Endpoint Protection Small Business Edition

Here is my question, we have several remote (VPN) users, when they sign in, they have access and can get updates. What I would like to do is get them uopdates as quickly as possible using the least amount of bandwidth. They are all over the country and continent. They are not on at the same time so the bandwidth isn't too bad, but some of the clients DO report to their local GUP's because sometimes they are in fact in the local office and can get updated internally. When they are out of the office(s) the Subnet is not the same as it would be in the office. What is the best way to get this done and use minimal bandwidth? Should I keep it the way it is, or should I take a look at other options?

Setup a VPN location. You can have multiple locations so say one for internal, one for external, one for VPN, etc. You can have them go out to liveupdate or they can continue to get from their local GUP or a GUP closer to your concentrator to reduce bandwidth usage.

The way I am reading this is to add a VPN folder to my structure, and do not set a GUP for it, add the VPN to this folder, so when they are on the road they use liveupdate, but when they are in the office, since they are on the same Subnet, they will get updates from the GUP?

No folder. use location awareness Just add another location for VPN (or similar) and define criteria for it. Clients will set their location based on the criteria and use the policy you assign for it. These are helpful

http://www.symantec.com/docs/TECH98211

http://www.symantec.com/docs/HOWTO81170

http://www.symantec.com/docs/HOWTO80747

http://www.symantec.com/docs/HOWTO81170  (This was already done)

http://www.symantec.com/docs/HOWTO80747 (This was slow torture) Especially with all of the interuptions.

I have done it for one location that constantly complains about Bandwidth, let's see how it goes.