SEP clients go to the LiveUpdate server on the Internet despite a LiveUpdate policy from the SEPM to prevent that.