Endpoint Protection

Microsoft Windos XP professional does not support more than 10 clients.

Can someone from Symantec assist me, what can happen in the following scenario...

#1. SEPM installed on Windows XP Professional machine with 25 clients simultanesoly accessing the SEPM. What will happen to SEPM. Will it crash? Will all clients gets its virus definations? Please elobrate.

#2. In an small environment, if a client does not want to invest into Server operating system and Server machine, and still want those 25 clients to access the SEMP on Windows XP machine. What setting should be recommanded on SEPM.

We have one installation, where in the above scenarion, the SEPM machine crashed twice. We are not very sure, whether it was a hardware problem of some software malfunctioned, or it's the SEPM.

Tejas

 

hi,
my views

#1. SEPM installed on Windows XP Professional machine with 215 clients simultanesoly accessing the SEPM. What will happen to SEPM. Will it crash? Will all clients gets its virus definations? Please elobrate.

this is limitation with the OS, instead of push mode set it to pull mode so that te clients can get definition. However, it may not be updating more than 10 clients at one go

http://service1.symantec.com/support/ent-security.nsf/docid/2008071822365448

 

#2. In an small environment, if a client does not want to invest into Server operating system and Server machine, and still want those 25 clients to access the SEMP on Windows XP machine. What setting should be recommanded on SEPM.

recommendtaion in the above URL

If the box has crashed, then you may need to deeply check cause of the failure. Read the event logs for pin point the issue.

Cheers

Pete!
 

Hi Mr Shah

In case of 1. You can have Replication or Failover Server in your environment.
In case of 2.  Xp is vry much compitable for SEPM

Ajit

Hi,

You can change the maximum IIS connections to 39 with Metaedit.

http://download.microsoft.com/download/iis50/utility/5.0/nt45/en-us/mtaedt22.exe

- Jukka

to workaround the limitation you can also patch XP TCP/IP stack. However it's unsupported and unofficial you can still do this if you want. http://lvllord.de/

Too bad it won't run on UBUNTU........... that's FREE and lean.

When we ran the the old SAVCE 10 on a Windows XP Client we did get problems with not all clients updating or getting access to logfiles etc.

I guess this is not an ideal situation.

We also are using SEPM on WIN-XP just for testing, Not for live.

It will run fine. It's true that the simultanous connections limit is set to 10 for xp but that's by design
There are workarounds available though.
https://www-secure.symantec.com/connect/forums/configuring-symantec-endpoint-protection-manager

Did not understand what shadowspapa meant?

What ShadowsPapa was saying is it is too bad that SEPM cannot be installed on an OpenSource operating Syste, such as Ubuntu.  Ubuntu is a free distribution of Linux.

Unfortunately, SEPM runs in a windows environment.

Hi,

If SEPM is installed on Windows XP machine, then

1. You can get the error "Unable to communicate with the reporting component"
2. No all the computers will have a green dot. At any point 10 computers will have a green dot.

If you try to contact the server from a client, you may encounter the error "Error Message: Access Forbidden: Too Many Users Are Connected 403.9"

[ http://support.microsoft.com/kb/248074 ]

You can refer to the document below:

Best practices guide for installing the Symantec Endpoint Protection Manager (SEPM) on a Windows XP operating system

http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/0c1f4df44d154e3e8825753700799307?OpenDocument


The document from microsot for the connection limit is :
http://support.microsoft.com/kb/314882

Hope this Helps

Regards,
Aniket

Exactly, Jason. It would be nice as folks could run a lower end computer, a free lean small server OS and have themselves a stable SEM server - for cheap.

I REALLY hope that at some point Symantec can get a return on developing SEP and SEM for non-Windows OSs.
A lot of agencies and companies are discovering a better way with Linux/Ubuntu, etc.
Now everyone can afford what a Windows server OS requires of hardware but still want good protection and management of said protection.

I'm sure it's not so simple, though, to make SEM or SEP run in an alternate OS - probably like starting all over with a new product.

Aniket nailed it.

I belive the clarification has come for this question. Admin should close this thread for further comments.

Tejas