See Using Group Update Providers to distribute content to clients.
See Deciding whether or not to set up multiple sites and replication.
See Updating policies and content on the client using push mode or pull mode.
Symantec recommends that you use this method unless network constraints or your company's policies require an alternative.
Use a Group Update Provider for groups at remote locations with minimal bandwidth.
Consider using an internal Live Update server in the following situations: You should not install the management server and an internal Live Update server on the same physical hardware or virtual machine.
Installation on the same computer can result in significant server performance problems.
Best practices: Before you upgrade, you must manually stop the Symantec Endpoint Protection Manager service on every management server in your site.
After you upgrade, the management server automatically starts the service.