I have just setup my new Exchange 2010 servers.  I utlize TMG 2010 for reverse proxy and edge transport in my DMZ.  I also have a Client Access server with Hub Transport and a separate mailbox role server.  Is there a document or link that explains the best practice for isntalling SEP 11 on these servers for protection?  Thanks.

Preventing Symantec Endpoint Protection 11.0 from scanning the Microsoft Exchange 2010 directory structure

http://www.symantec.com/business/support/index?page=content&id=TECH97707&actp=search&viewlocale=en_US&searchid=1290179770500

About the automatic exclusion of files and folders for Microsoft Exchange server and Symantec products

http://www.symantec.com/business/support/index?page=content&id=TECH102400&actp=search&viewlocale=en_US&searchid=1290179770500

Also check the following article

Title: 'Best Practices for Installing Symantec Endpoint Protection on Windows Servers'
Web URL: http://www.symantec.com/business/support/index?page=content&id=TECH92440&locale=en_US