What is the "best practice" or the "norm" for client installation features.  If we aren't going to run the Firewall or IPS feature, is it best to create a client installation package that doesn't include those features?  Or, should we just push out a default client that includes all features but disable the policies at the group level?

 

 

Thoughts?

 

Thanks