By default all machines will seek updates from the console, but If they can't communicate with the console, they'll get their updates over the WAN, though you'll want to enable streaming updates.
In regards to streaming updates, you need to make sure that "enable streaming updates" is selected. It is by default.
The two fields you're going to want to look at in the console are the updates and cloud services fields, under edit group settings.