How do Endpoint Protection Updates work with SCCM? This is a bit more complex compared to other antimalware products: Endpoint Protection has many ways to fetch the updates with the use of different technologies involved; and there are time settings that determine what happens, and when. This has its pros and cons.
The pros are that it makes it more failsafe. Endpoint Protection will most likely manage to update itself even if some functions fail. Another pro is that you can configure it to suit your environment in the best way to ensure the least disturbance and interference to employees.
The con that I see is that, if you get too many choices that you don't need, you are more likely to overlook or misconfigure them. When troubleshooting why only some of my clients have been updated and some not, it may be hard to figure out because of all the settings and time schedules, as well as figuring out where the client update came from. This requires some...