: To optimize network bandwidth, SEPM can use Group Update Providers (GUPs) —designated endpoints that act as local update hubs for other devices in remote offices—or dedicated LiveUpdate servers. Advanced Security Capabilities
Monitoring file behavior to catch "zero-day" attacks that haven't been seen before. symantec endpoint manager