Manage remote workers PCs thru Internet without VPN

Hi guru,

We got some branches which does not have VPN connection with HQ. However, we also requried to manage those PC from our Enterprise console.  Having read the "guide-for-planning", it seems not exactly what we required for remote workers.

Is it possible to

1) manage the EP thru the internet (without VPN)?how?

2) install Auto Updater in those offices to update from our Web CID? Web CID is already configured.

Your input is appreciated,

Thanks

Nick