you can use the McAfee Client Proxy. it should already be part of your SaaS product. you can download the extension for EPO and set a central policy and distribute MCP to the notebooks. it gets programmed with the customer ID, etc, so that it automatically looks for those accounts you've updated up to SaaS through the DSC. from there, it redirects web traffic to the SaaS servers, no matter where it is.