Recommended Design Scenario

Hi all,

In our environment we currently have 7 different locations. We want our SEPM to be located at our datacenter (central to everything) although we the administrators are located at the Main Office.

• Main office ~300 users 50 servers connecting to a datacenter over a 1Gbps link 50 miles away, which the datacenter is the hub for all of our other networks.
• Datacenter: 70-80 servers no users. Connects to main office over 1 Gbps link and to remote location in another country over a VPN using an MPLS 30 Mb link.
• Remote office in different country 1200 users 30 servers over a VPN using an MPLS 30 Mb link
• A couple small remote locations over MPLS links  < 40 people.

My main questions are

1. Would having a central SEPM server be best in this scenario or would having a SEPM at each of our 3 largest locations (Main, Datacenter, Remote facility in different country) be best? It would be ideal if we could just have on SEPM server, but manage all these servers and clients, but I'm not sure if our bandwidth could handle it.
2. Could a 30 MB link handle 1200 clients from our remote location to the central SEPM server with definitions and all if we just use one SEPM server?
3. Can SEPM be setup so that delegation can be set so certain administators in remote locations can manage their stuff, but CANNOT be super users? Can SEPM be setup so that administrators are only limited to their respective systems?
4. Would GUPs be better for us in this situation or utilizing a liveupdate server or SEPM server for definitions management, etc.
5. An much network resources are used by SEP/SEPM as I cannot find any documentation talking about this. I do find documentation recommending the number of SEPMs based on your number of clients, where according to their documentation--irrespective of our network links--we should only have one SEPM according to documentaiton. How should heartbeat intervals be configured in this scenario?
6. When is it best to use GUPs over SEPM servers?

Included is a general example of our network layout.

Any information would be great, thanks everyone!