Until Endpoint Protect Protection 10 is released you can procure and install VirusScan Enterprise to protect your Windows Fleet. This is McAfee's Antivirus and Anti Malware product.
This product can be installed without the need to manage the product via ePO. The management component for McAfee Endpoint Products is the McAfee Agent which is the Communication and Policy Enforcement vehicle, but all the end point products are designed to operate as either Standalone or Centrally managed.
The absence of the Management Agent results in the product operating in Stand alone mode.
McAfee Certified Product Specialist - ePO
Servers will need internet access to update the Anti-Virus/Anti-Malware definitions tough.
If you have a Firewall isolating these servers from the internet you may need to whitelist the update sites, which currently are:
McAfeeFtp FTP ftp.nai.com/CommonUpdater
McAfeeHttp HTTP update.nai.com/Products/CommonUpdater
Additional Common Updater sites are being added for the newer DAT versions coming out with Endpoint Protection 10 and can be referenced in the CommonUpdater section of this KB which details the sites for the V2 DATs.