The Endpoint Protection client is the application found in the system tray, which is used by users to view the malware that is detected on their computer. When the client and the computer is in a healthy state, the icon is green. When malware is detected, the client changes color; it becomes red and it also flashes in the system tray to alert the user. Depending on the malware and its severity, a user can be asked to take action by clicking on Clean Computer. If the user doesn't take an action, the client itself determines what action is appropriate and applies it based on the antimalware policy.
You must distinguish the Configuration Manager client from the Endpoint Protection client. When you deploy the Configuration Manager client, the Endpoint Protection client is prestaged. The files are locally cached and the SCEP is installed only when the client settings are configured to enable the System Center Endpoint Protection...