Hi,
installing is no problem, but be sure to check the VSE policies before you Rollout an Agent.
Configure HIP (Firewall) costs the most time of all ....
You need really time to figure out what u want with it ^^
Ive got a lot of fun with the Application Blocking ^^
At the moment we got it deactivated

happy