Allow for a failover/failback controller for agents. Currently if a controller is available only on LAN. There's no way for a remote agent to update without access to private network.
If all the controller(s) in a company could have WAN-available failover controller. Administrators could ensure that endpoints always have access to updates and endpoint control.