There a few methods of updating ForeFront Endpoint Protection. I am trying to get my head around the best method. Ideally i would like it so the clients check for definition updates every few hours.

What method do you use? We use FEP rollup 1 with SCCM 2007 R3, what would be the best method for us please?