Configuring the endpoint protection infrastructure
One of the biggest differences between FEP 2010 and SCEP 2012 is how much easier the core infrastructure is to set up. It is now lightning quick to deploy the additional role required for your primary site or central administration site.
The only prerequisite for the endpoint protection point role is that the software update point is also deployed, which is covered later in this chapter. The software update point is needed because this is used to obtain the latest definition updates for endpoint protection.
Your clients will then download and install the definition updates just like regular updates, and you can deploy them using automatic deployment rules.
Deploying the endpoint protection point
The endpoint protection point can be deployed in two ways and should be installed at the top of their hierarchy. The first way is using the traditional console method, where you can deploy other site system roles such as a distribution point, and the...