hi,
the child servers number 56 looks a huge to have SEPM installed, you can make these servers as GUP.

however best architecture wise you might check for sizing and not many SEPM's.

Pete!

so if i have 1 central which gets updates from internet, then 56 proxy servers each updating 50 client computers. Whats is the best practice ? 

i understood, that i install SEPM on central server, then migrate servers and client groups to it. I want to ask, after this procedure do i have to manually uninstall SAV from each of the proxy servers or it is done when migrating?

hi

You should rethink you design a bit, think we have a simular setup as yours. also 1 primary and 50 secondary server.

Try to have a look in the sizeing document. Look at the server design part.

SEP Sizing guide available at ftp://ftp.symantec.com/public/english_us_canada/products/symantec_endpoint_protection/11.0/manuals.

It depens on how many locations you have and how far they are apart.

But we will make 3 sites with 2 SEPM and a cluster sql. and the use either gup or liveupdates server to distrupute the definitions to the clients.

I have each server in different location, so i guess i need to have management in each of site. My goal is to have  logging and reporting of all sites in the center server. So my design will look like center server for logging reporting and downloading updates and other 56 servers for managing clients.

So in which way i should start to migrate each of servers?
Migrate central server first or  child servers one by one and finnally migrate the central server ? 

I would run the two systems in a parallel mode (SAV AND SEPM) - start with your central site.

Make 2 or 3 SEPM servers and use SQL. So you have the load and fail thing enabled at your central site (HQ) and maybe make a couple of other sites with SEPM servers. But do not make to many.

Use GUP instead if you have under 200 clients at a remote location or LU if you have more. There are a guide to LU on cd2.

After you have done the setup of SEPM, start migration a couple of client to see that it is working, especial if you are using the firewall and application control thing.

We will have 3 sites, one in emea, america and asia. 2 of those will replicate logs to the HQ. At the moment only the HQ site is running.

I was also a bit puzzle in the start, but after I read that design guide and the admin guide I could see the light (almost) :-)))