Endpoint Protection

Hi everybody . I have SEPM12.1 ru1

I would like to know which feature set should include client install package for servers (dc, exchange, sharepoint / x86/x64 ) ?

I need to prepare setup.exe (package) for servers. Do I need to install on servers only "Virus, Spyware, and Basic Download Protection" feature or and some others ? 

you can use all the modules ( AV/NTP/PTP SEP 12) , however take consideration on the firewall rule that no traffic ic blocked for tha pplication used on the server.

check this link

Best Practices for Installing SEP on Windows Servers
http://www.symantec.com/business/support/index?page=content&id=TECH92440
 

I would start with both AV and IPS (requires NTP). You can always assign a firewall policy to start and add necessary exceptions or withdraw the firewall policy altogether, which will still allow you to use the IPS piece of it.

Can that load the server if I install some unnecessary features?

When i say unnecessary features I think on outlook scanner, smtp/pop3 scanner, application and device control under PTP, firewall under NTP.

Therefore, I need only minimal feature(S) that I need to install on the server(S) .

unless you do want those features, you can skip it. Being server it will be having good resource to take care of the load :-)

If you only want minimal, my suggestion would be AV and IPS. AV alone would be the least you could possibly get.

If you have a test server, you could baseline it by installing AV/IPS and monitoring the load, than only install AV and monitor that.

I think you will be fine with AV/IPS.

It really just depends on your preferences.

thanks guys for the help