were are having issues with some computers are bypassing the local distribution server ( I am assuming the patch they want is not available on the distribution server) and are going outside (web/vendor) to download the updates. This is what we are seeing from the logs as well as from the traffic these machines are generating. This seems to be isolated to laptops. We do have a separate agent policy for laptops and have protect cloud sync also configured for these. I am thinking this might be related to the agent setting "use vendor as a backup site) which is not enabled on the desktop. so if I uncheck this setting does that mean when that when my laptops are offsite they will not update since they will not have access to the distribution servers?