If user-company already has their own "Anti-Virus Server" or "Windows-update Server", can CAM refer to their servers(not Cisco's policy-update-server) to get current update files?
The below URL describes how to configure the Antivirus (AV) Definition Update requirements in the Cisco Network Admission Control (NAC) Appliance, formerly known as Cisco Clean Access.