We currently are using agents on our desktops and manage all our servers as "agentless".
A question that came up recently to a very time sensitive high availability set of servers, is how resource intensive are security patch scans on the systems in a machine group? There is a concern that running scans throughout the day while these systems are needed could cause a theoretical slowdown. Let me know your thoughts and experiences!!