Client Behavior without SEPM

Just curious about something.  If a managed SEP client can't contact its SEPM server for whatever reason, will it fall back and use the Internet to update its virus defs?  If not, is there a way to set SEPM policies to do this?  I'm mainly thinking about laptops that people take home but don't jack into the network or VPN in that often.