Endpoint Protection

Hi there,

It seems my management server is using very high bandwidth daily, about 120gb.

I have about a 1000 endpoint clients connected, im using GUP on other GEO locations, set pull mode and experienced width bandwidth settings in IIS.

Can anyone help me lower the bandwidth consumption? 120 gb looks a bit high to me.

I attached a syslink.log file from one of my clients.

Thx,

LEVd

Attachment(s)

03.docx   45 KB 1 version

Use the latest version of SEPM and GUP.

Use more number of content revision on the SEPM.

can you be a little bit more specific? im using sepm 11.0.6100.645, another version of GUP? its just a selection in SEPM if you want to use a client as a gup..

also what do you mean by: Use more number of content revision on the SEPM?

LEVD

bump...

Hello,

Few Suggestions for you to Follow:

Please Follow the Symantec Knowledgebase Articles provided below:

1) Best Practices with Symantec Endpoint Protection (SEP) Group Update Providers (GUP)

http://www.symantec.com/business/support/index?page=content&id=TECH93813&actp=search&viewlocale=en_US&searchid=1300976352653

2) Items to consider when using Group Update Providers (GUP)

http://www.symantec.com/business/support/index?page=content&id=TECH138828&actp=search&viewlocale=en_US&searchid=1300976352653

3) Group Update Provider: Sizing and Scaling Guidelines

http://www.symantec.com/business/support/index?page=content&id=TECH95353&locale=en_US

4) When does a client download full.zip from SEPM/GUP?

http://www.symantec.com/business/support/index?page=content&id=TECH131528&actp=search&viewlocale=en_US&searchid=1300976352653

Number of content revisions to keep determines whether a client will get a delta (small package) or a full update (100+mb package)

Generally more content revisions kept means more clients getting delta updates, up to a maximum of ~40 revisions kept.

Admin > Servers > Edit Site Properties > LiveUpdate (tab) > Disk Space Management for Downloads

Hello Levd,

The amount of revisions kept by the manager should be more than three (3) revisions.  This ensures the GUPs receive delta packages instead of full packages.  If the manager does not have all definitions between the last client check-in and the next check in, the manager will send the GUP a full (80 MB) package, increasing bandwidth over the WAN.  One day's worth of definitions is normally three (3) revisions.

The number of content revisions to keep should depend on the need to balance network bandwidth with the amount of hard drive storage availability on the SEPM.  This setting should be made with the specific network environments requirements and limitations in mind.

Check this Symantec Knowledgebase Article:

Best Practices for configuring the number of content revisions to keep in Symantec Endpoint Protection Manager

http://www.symantec.com/business/support/index?page=content&id=TECH92225&actp=search&viewlocale=en_US&searchid=1300979297767

ok thx i will take a look at things.

LEVD

I checked again, it looks like its mostly bandwidth consumption between SEPM and the database (different servers)

Number of content revisions to keep are set to 10, im allready using the GUPs on several GEO locations.

Any idea how to limit bandwidth between SEPM and DB?

The biggest thing that will reduce bandwidth between SEPM and DB is to increase the amount of time between client check-ins, since each check-in puts  information from the client into the database.

By default clients are set to check in every 5 minutes. (12 times an hour)

Bump that out to 30 or even 60 minutes and you will see your bandwidth usage drop accordingly.

Hi Jeremy,

Is this the heartbeat setting? where can i find this setting so i can alter it.

Thx,

LEVD

Yes its heart beat setting

http://www.symantec.com/business/support/index?page=content&id=TECH93724&key=55357&actp=LIST

Hello,

2 Ways to Limit Bandwidth, check this below:

1) How to throttle network bandwidth used by the Endpoint Protection Manager (SEPM) website in Microsoft's Internet Information Server (IIS)

http://www.symantec.com/business/support/index?page=content&id=TECH104518&actp=search&viewlocale=en_US&searchid=1301577428187

2) Limit The Bandwidth from GUP Policy. Check the screenshot.

will alter the hearbeat settings.

I allready have GUPs running and also looked at the bandwidth settings within IIS.

Will check back here after some time.

Thx,

LEVD