Network Engineer #2 in response to Network Engineer #1:
"Yes, we have solutions to address this but it needs to be part of the deployed design and policy set from the start.
"You are correct, there are 3-updates per day from Symantec and if the number of revisions is limited to a small number of days, a full update would be required vs. micro updates, which is the preferred update method -- smaller sized updates. One can also populate the network with Group Update Providers the cache the downloaded content or Live Update Servers that pull down the data as it is released from Symantec, and via policy you can designate where systems get their updates. I can go on-and-on. I can spin this stuff in my sleep and go on-and-on with ways to address things here!
"Again, if the global design is properly architected, the impact will be minimized.
"Yes, someone who did not architect correctly could experience performance issues; but updates by most vendors today include a random update delay so systems are not swamped.
"In addition, we can take it to a whole new level with things like Intel vPro chip and Wake on LAN technology.
"While this could be an issue, I would be surprised if updates were not taken into consideration. But if people want help, they can give me a call and pay for our services. We deal with this on a frequent basis."