Deciding from Where to Update and When
You should have a clear understanding of what options are available for definition updates retrieval, and decide where your Endpoint Protection clients can retrieve the definition updates.
• If you want to have total control and a single point of contact, you can force your client computers to get definition and engine updates from ConfigMgr and exclude all other sources of update retrieval.
• For additional flexibility, you can allow the clients to retrieve these updates from additional sources such as Microsoft Update or local network shares.
Allowing your clients to update from sources other than ConfigMgr means they are protected, regardless of whether they talk to their management point. This is important ...