Two way to deploy sep client
To deploy on clients which are connected
autoupgrade feature
https://www-secure.symantec.com/connect/articles/upgrade-clients-sep-121-auto-upgrade-feature
To deploy on clients which not connected
How to push deploy clients in Symantec Endpoint Protection 12.1.x
http://www.symantec.com/docs/TECH164327