SEP 11 virus defintion update settings

Hi,

I would like to have the information for the "Best practice" regarding the schedule update on sep 11 for big enterprise.

I did my work and found many best practice for the SEp 11 av. I was able to get the heartbeat, GUP, etc. But, I did not found any information regarding if the recommend the endpoint to look for update every hour, 2 horus, 6 hours, etc.

I know that the bandwith speed must be considered also. Let's consider that every low-speed have a local GUP in place, so only the GUP will load the definition and that the majority of the corporation (80%) is runnign on high-speed internet conenction.

Thanks