Hello,

We have around 5000 systems are in network,We are planning to push the SEP from the SEPM console,if we push it from sepm console is it recomended from symantec,

is there any advatntage and dis advatage by doing this?which port this uses while pushing it from SEPM console.

clinet systems are having 12.1.1 now we are planning for 12.1.4

You need to scheduled this accordingly. Doing 5,000 clients from the SEPM is a big task. Are these at different (remote) sites? Client will check in on tcp 8014 but the client will pul down the package over ephemeral ports.

Which communication ports does Symantec Endpoint Protection use?

You can use autoupgrade feature to push it.

--Edit--

How to upgrade Symantec Endpoint Protection clients using the Auto-Upgrade feature

You cn schedule it according to your bandwidth. Below thread help you

https://www-secure.symantec.com/connect/forums/sep-1214-mp1-agent-upgrade 

is there any issue while doing it?some of the systems are in LAN and some are in WAN.Wat is the recomendation for this?

I wouldn't recommend using SEPM to push upgrades over the WAN. Need to use another tool such as SCCM or remote deploy tool
 

can i get the clarity why sccm is good compare to SEPM for wan..

if the systems are in LAN,can we push it from SEPM

Yes, if in LAN, SEPM is fine provided you have a good connection.

For WAN, SCCM uses distro points at the remote site so you can push right from the distro point instead of over the WAN. Similar to how the GUP works for content updates

use this method for WAN

https://www-secure.symantec.com/connect/forums/deploying-sep-client-installation-package-over-wan

SCCM has distribution points where only one instance of the file gets to the DP and all clients get from there local subnet. 

if you use SEPM, it will push each packages ( approx 400 MB) on all the machines , on your link it will 400MB X no of machines 

For the wan system you can use the remote deployment tool.

https://www-secure.symantec.com/connect/articles/overview-push-deployment-wizard-symantec-endpoint-protection-121

Hi,

SEP 12.1 RU5 is in the beta testing. I would suggest to hold the upgrade plan if possible.

After SEP 12.1 RU5 release directly upgrade to it. I am guessing that RU5 may release within next 3-4 weeks.