Symantec End Point

Hi

I have a basic question - i am pretty new to symantec and trying move away from mcafee and deploy SEP.

Can I deploy sub agents at my MPLS locations and install the server at HO so that the updates can be between the server and sub agents during night time and then all clients take updates from the sub agents deployed at each location so that the update can happen within the LAN only. 

If yes which product i should go for? 

Thanks

Ash