It's a toss-up right now between Symantec Endpoint and Mail Security for Exchange or Trend Micro Worry Free.  How does Symantec Endpoint update laptop users in the field?  Trend will call home to update if the user is off the network.

Thanks