Endpoint Protection

Hi all,

Is it possible to reduce the Virus defination size to keep   for a single host in SEPM 11.x.The path were the Virus definations are stored is

C:\Program Files\Common Files\Symantec Shared\VirusDefs

check this article , it is possible

Configuring the number of content revisions kept by the SEP client 11.x

http://www.symantec.com/business/support/index?page=content&id=TECH103956

Check this thread

https://www-secure.symantec.com/connect/forums/change-symantec-endpoint-protection-11x-will-keep-3-definition-2-instead

check this fourms.

https://www-secure.symantec.com/connect/forums/client-virus-definition-revision-numbers

By Default, Symantec Endpoint Protection Manager downloads and keeps 3 Revisions of Virus definition versions in its Repository.

Incase if Space is a Concern in Regards to Virus Definitions Folder Size....

1) Login to Symantec Endpoint Protection Manager

2) Click on Admin

3) Go to Servers

4) Right Click on the Local Site

5) Click on Properties

6) Go to the Liveupdate Tab 

Hello,

In SEPM 11.x, it is not possible to reduce the Virus definition size to keep for a single host.

I would suggest you to migrate to the SEP 12.1,where you would be able to reduce the Virus Definition limit to 1.

Check this Thread: https://www-secure.symantec.com/connect/forums/virusdefs-folder-size

By Default, Symantec Endpoint Protection Manager downloads and keeps 3 Revisions of Virus definition versions in its Repository.

Configure the Disk space Management for Virus Def.

To configure the disk space used for LiveUpdate downloads

1. In the console, click Admin.

2. Click Servers and select the site that you want to configure.

3. Under Tasks, click Edit Site Properties, and then click LiveUpdate.

4. Under Disk Space Management for Downloads, type the number of content downloads that you want to store.

5. If you want to reduce the amount of disk space used, uncheck the Store client packages unzipped to provide better network performance for upgrades option. Note: Disabling this option also disables the ability of Symantec Endpoint Protection Manager to construct deltas between content revisions and may adversely affect network performance for updates.

6. Click OK.

Disk Space Management procedures for the Symantec Endpoint Protection Manager

http://www.symantec.com/docs/TECH96214

Drive Space used by Virus Definitions Updates

http://www.symantec.com/docs/TECH141811

http://www.symantec.com/business/support/index?page=content&id=TECH103956

11.x keeps 3 revisions, 12.1 only keeps 1.

Agree with Mithun. You can the SEPM 11.x to 12.1 to reduce the size/limit of defintion

FYI, this is for the SEPM, not the SEP client. He/she wants the number of revisions for the SEP client to be reduced.

sandra

Hi vonphenyl,

One important note: if you reduce the number of revisions that the SEPM keeps, you may save Hard Drive space on that server, but you will have larger packages downloaded by the SEP clients (higher network bandwidth consumption).  The more past revisions your SEPM has, the greater number of small "direct delta" definition updates it can build and send to clients.

This white paper has some good info:

Symantec Endpoint Protection (SEP) Sizing and Scalability recommendations
Article:TECH123242   |  Created: 2010-01-16   |  Updated: 2011-12-08   | 
Article URL http://www.symantec.com/docs/TECH123242

Many thanks!
 

HI vonphenyl,

Did you have received your answer ?

You can control the number of content revisions that the Symantec Endpoint Protection client stores for each content type. Each content type can be configured individually.
Start > Run > regedit > navigate to HKEY_LOCAL_MACHINE\SOFTWARE\SYMANTEC\Symantec Endpoint Protection\Content\ > Open folder with the intended content moniker name > & then depending on version do the following:
A. In Symantec Endpoint Protection 11.0 and MR1, adjust the "CachedEntries" DWORD value to the # of cache content revisions to keep.

B. In Symantec Endpoint Protection MR2 and newer, adjust the "CachedEntriesEx" DWORD value to the # of cache content revisions to keep.