first, we have kindof like a business wide license for CE. (We're set up all over the world). The reason we don't a server isn't set up is because we don't have extra servers/workstations for it.

We're not allowed to use liveupdate at all. Our NOSC(Network Operations Support Cell) has to test and validate definitions before we can use them. even if we wanted to sneak around and set up getting the files from symantec's ftp server, we would have to send a firewall request to our NOSC asking them to open the port on Sidewinder for that specific machine to symantec, which would let them know that we were trying to set up liveupdate.(We don't have control of our firewall)

I also want to add that Baghdad sucks... in case you wanted to know