Endpoint Protection

We're running 12.1.4 from SEPMs installed on two 2012 servers.  Two questions:

1)  How often do clients report in that thier definitions are up to date or not?  Is it recorded on each heartbeat or when they pull new dats from the SEPM?

2)  I'm being asked to split the clients into two groups Production and QA.  The QA they want to continue to get the defs as soon as available whereas they want to delay the other Production for 24 hours to make sure there is no issue.  I'm seeing that I can set up the two liveupdate policies - one to upgrade with the latest available dats and one to a specific dat.  Of course the issue with this is that then I'll have to manually update the defs every day.  Is there a setting that I'm missing that would create this delay?  Or an alternative setup?

1. It would be recorded at each heartbeat.

2. The way you described it is about the only way from the SEPM. The prod LU policy would need to be locked in at a specific date, and when it changes you need to manually edit it to allow. You could obviously set the heartbeat out to 24 hours but clients won't check in but once per day..probably not what you want.

I believe LUA can schedule updates but this may be a little much for what you're wanting.

You're welcome.

Thanks.