Endpoint Protection

We currently have SEPM configured as our anti-virus and firewall software on all pc and server estates in our business, which i have been asked to review the design.

Currently we have a head office where the main AV server is located with SEPM 12.1.6 installed. We have also have 20 other sites, 1 which has several servers and the rest are mainly user PC's. Each site has a max of 250 endpoints. 

We have a liveupdate server which was built as a test in head office as we need to control when certain servers at both the head office and remote site access liveupdate server.

My question is, can we get rid of the liveupdate server, and instead use GUP's at each remote site instead, and if we do, can we still control when servers access liveupdate at certain times of the day?

Any help or suggestions for the design much appreciated. 

Yes, you can use GUPs at those remote sites but you will have no way to control timing on the updates. When clients check in, they will grab the updates. This is based on the heartbeat setting.

Your best bet is to use Liveupdate server and set the scheduling, unfortunately SEPM does not have this setting.

Thanks both for your replies, i did think this but wanted to be 100% sure.