Create the client package and save it at a centralized location from where the clients can download it. In case the sites are geographically away then you can burn the packages on to a CD or copy it to a thumb drive and allow the clients to download it from there. You mentioned that you have a distributed environment therefore after the installation of SEP on the clients download the latest virus definition file from    http://www.symantec.com/business/security_response... ( The first exe file) and run it on the clients so that they have the latest virus definitions and they will not overload the SEPM server for updates when they initially contact the SEPM.

package suppoed to be installed can be saved on hard drive. And users can access the shared drive and proceed with installation.

This is would be end user manually need to initiate the update/upgrade.

Hi,

I was talking about Client update package (RU5) which I need to install on clients. And I cannot trust end user actions...

-.-Jari-.-

 You should deploy the Altiris component that integrates with SEP.  It's free!  And it'll solve all your issues in providing a bandwidth efficient way to do updates and installations over slow links.

On a side note, you can trickle packages down to clients over xx days to save on bandwidth.  The total package is about 35MB in RU5, down 50% from previous builds.  There is a setting for this in the upgrade wizard.

I agree with teiva-boy
Altris will be an ideal solution for you 
For more information you can refer below article
Managing Symantec Endpoint Protection with Symantec Software Management Solution, Part 1: Software Resource
 

Now Altiris is called as Symantec Management platform.
Check this... 
https://www-secure.symantec.com/connect/developers...
https://kb.altiris.com/

Altiris has lot of features for package distribution.  and its free...  
Package server: which can download and distributed the package to other clients.
Bandwidth throttling: you can set the amount of bandwidth utilized by the client to download the package.

Hi,

Yep, I totally agree benefits of Altiris, but unfortunately politics comes into this option. I found the solution for this, I can use LiveUpdate for upgrading clients... Haven't tested it yet, but let's see the results....

-.-Jari-.-

Ya that is also a good option....

Use these for reference....

https://www-secure.symantec.com/connect/articles/i...
https://www-secure.symantec.com/connect/articles/c...

Include the product update for any version.
II also have bandwidth throttling available under configure-->preferences.

I'm still wondering how to create upgrade package for LU I created LU rule and enabled client updates and pointed it to internal dfs share. But I have an error that unable to ger catalog file.... Does anybody have a clue how to create LU upgrade package...

-.-Jari-.-