Is anyone aware of a link to some best practices for configuring SEP on servers located in a DMZ?  

Thank You,

Eric

Best Practices: Configuring a Symantec Endpoint Protection environment in a DMZ

http://www.symantec.com/docs/TECH178325

Check this thread

https://www-secure.symantec.com/connect/forums/deploying-sep-client-remote-dmz-area

You can refer to these Symantec KB articles to ensure proper setup:

Best Practices: Configuring a Symantec Endpoint Protection environment in a DMZ

Communication issues with SEP client installed in DMZ while the SEP Manager is outside DMZ

Check the thread

https://www-secure.symantec.com/connect/forums/sepm-replication-configuration-best-practice-update-sep-client-dmz

https://www-secure.symantec.com/connect/forums/sepm-dmz-deployment-best-practice

https://www-secure.symantec.com/connect/forums/server-dmz

Check this artical.

http://www.symantec.com/business/support/index?page=content&id=TECH92051&locale=en_US

 Best Practices: Configuring a Symantec Endpoint Protection environment in a DMZ

http://www.symantec.com/docs/TECH178325 

Security recommendations regarding SEP client installed on server located in DMZ

http://www.symantec.com/docs/TECH122858

http://www.symantec.com/connect/articles/sep-121-best-practice-license-other-articles

Thanks for all the great info!!!

Best Practices: Configuring a Symantec Endpoint Protection environment in a DMZ

Security recommendations regarding SEP client installed on server located in DMZ

Communication issues with SEP client installed in DMZ while the SEP Manager is outside DMZ

Hello,

Please check this Thread: https://www-secure.symantec.com/connect/forums/server-dmz

and check these Articles:

Best Practices: Configuring a Symantec Endpoint Protection environment in a DMZ

http://www.symantec.com/business/support/index?page=content&id=TECH178325

Security recommendations regarding SEP client installed on server located in DMZ

http://www.symantec.com/docs/TECH122858

Communication issues with SEP client installed in DMZ while the SEP Manager is outside DMZ

http://www.symantec.com/docs/TECH146736

Updating downloads in an internal LiveUpdate Administrator 2.x Server using the downloads from an external LiveUpdate Server

http://www.symantec.com/docs/TECH106254

NOTE: The above Articles applies to both SEP 11.x and SEP 12.1

Hope that helps!!

Thanks for all the comments and references.  This link answers part of my question:

http://www.symantec.com/business/support/index?page=content&id=TECH122858 

  I was wondering if there are any best practice application settings for SEP for DMZ servers? Should it be a basic install? or include the IDS components?  I know some of the IDS components can effect performance possibly.

On servers most of us prefer only AV/AS, but if you dont have any additional firewall which could also do IPS you can go for it, yes adding more features add load to cpu, 

You can check the best practice for windows servers which covers all.this is applicale to 12.x aswell

Top "Best Practices" Articles for Symantec Endpoint Protection (SEP) 11.0x

http://www.symantec.com/business/support/index?page=content&id=TECH181685

The ordinary configuration is obvious!

So may you need to drill down to configuration and well configure the SEP for the DMZ segment, cast a look at the below article:

SEP Configuration for DMZ Servers

http://www.symantec.com/connect/articles/sep-configuration-dmz-servers

for overal information, you can survay the below link:

Configuring a Symantec Endpoint Protection Environment in a DMZ

http://www.symantec.com/business/support/index?page=content&id=TECH178325

Hello,

Please check with below given article, I hope these will help you.

Deploying SEP client in remote DMZ area

https://www-secure.symantec.com/connect/forums/deploying-sep-client-remote-dmz-area

Best Practices: Configuring a Symantec Endpoint Protection environment in a DMZ

http://www.symantec.com/business/support/index?page=content&id=TECH178325