what new features are in store for r5 users?

Check the release notes for the latest version of SEP RU5.

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007121216360648

Release Update 5 (RU5)

What's new in this version
The current release includes the following improvements that make Symantec Endpoint Protection and Symantec Network Access Control easier and more efficient to use.

Symantec Endpoint Protection Manager now supports the following operating systems:
Microsoft Windows Server 2008 Service Pack 2 (all editions except for Itanium)
Microsoft Windows Server 2008 R2 (all editions except for Itanium)

Symantec Endpoint Protection Manager can now be used with Microsoft SQL Server 2008.

The Symantec Endpoint Protection or Symantec Network Access Control client now supports:
Microsoft Windows 7 (all editions except for Itanium)
Microsoft Windows Server 2008 R2 (all editions except for Itanium)
Microsoft Windows Vista Service Pack 2

The size of the client upgrade package used for auto-upgrading has been significantly reduced.
This reduces the amount of traffic that is sent to the clients when you auto-upgrade them. The auto-upgrade process is faster and conserves network bandwidth.

You can configure the following features for the Group Update Provider:
Limit the amount of bandwidth that the Group Update Provider can use when the Group Update Provider downloads content from the management server.
You can define a Group Update Provider by using rules and conditions, such as an IP address or host name. You can configure a single Group Update Provider in a single LiveUpdate Policy that applies across multiple groups for multiple clients.
Define clients to connect to a Group Update Provider within the same site to improve performance.
Identify which clients act as Group Update Providers.

The client now includes a Download Support Tool command on the Help and Support menu.
Users on the client can download a support tool from the Support Web site that helps to diagnose the common issues that they might encounter on the client.

Symantec Network Access Control includes the following enhancements:
New Host Integrity templates support Altiris 7, BigFix Enterprise Suite, and new versions of additional third-party products.
End users with a valid RADIUS logon but a computer with no client installed can be blocked from your company's network.
You can configure when the command-line interface on the Enforcer times out.

https://www-secure.symantec.com/connect/articles/new-features-ru5-mr5