vincikb
How did your DS POC go? Were still going back in forth about ripping deep security out and just going with office scan. To your point, I would almost rather take a litte more hit on resources and just stagger the scanning. My biggest pain point is how many things have to be upgrade in one maintenace window. Deactive all trend DSVA's, Unprepare ESXi host from Deep security manager, remove vShield endpoint from ESXi hosts, Remove vShield endpoint on ALL VMs, Uninstall vShield Endpoint manager, Upgrade vCenter, Upgrade vShield endpoint manager, Upgrade ESXi hosts, Install vShield endpoint back on all VMs, and now you can finally start your deep security manager upgrade and redeploy your DSVA's ..... 
So the question I raised is what happens if I encounter any issues with just my VMware vSphere upgrade during the maintenance window and can't complete Deep security upgrade?
Run dirty with no AV protection?... LAME
I found this link this morning which even discouraged me more about DS 9: http://www.philvirtual.com/it/vmware/trend-deep-security-9-do-not-upgrade/