Endpoint Protection

Hello,

I am looking for the Best Practices way to deploy SEP Management servers in a multiple geographic location.  Is it best to treat each site individually?  Install one location as the First Site and then install a management server at each of the other locations?  Or is there some other suggested configuration.

Thanks!

Hello,

Check these Articles:

About installing multiple instances of Symantec Endpoint Protection Manager

http://www.symantec.com/docs/HOWTO26811

About Load Balancing and Failover Clustering in Symantec Endpoint Protection 11.0

http://www.symantec.com/docs/TECH104519

The Philosophy of SEPM Replication Setup:

http://www.symantec.com/docs/TECH93107

About installing and configuring Symantec Endpoint Protection Manager for replication

http://www.symantec.com/docs/HOWTO26797

Symantec Endpoint Protection Sizing and Scalability Best Practices White Paper

http://www.symantec.com/docs/DOC4448

The thing is that it's all very subjective.  One of the long-standing recommendations is to keep the number of SEP "Sites" to a minimum as per http://www.symantec.com/docs/TECH92051

But this is dependant upon the number of clients per site, available bandwidth between each of your sites, number of clients for each site, etc.

Hello,

Incase, you are in the Planning stage of SEPM and it's Architecture in your Environment, this Article would surely assist you:

Getting up and running on Symantec Endpoint Protection for the first time

http://www.symantec.com/docs/HOWTO55274

Hope that helps!!

I agree with Mithun, the article I usually send for such request is the last one he provided:

Symantec Endpoint Protection Sizing and Scalability Best Practices White Paper

http://www.symantec.com/docs/DOC4448

Very interesting and complete one.

Hi,

Vote up for Mithun, Earlier I also need guidance about multiple remote site location SEPM architecture.thanks to Mithun and Sumit , they suggeted me to deploy GUP and shared few links which is above Mithun posted. You can have single SEPM at your central site with a failover server or replication server, and at your remote sites, please assigan any good hardware system which would be your normal SEP client, prefarably any application server. It will receive update from SEPM and will distribute to your remote site clients, Clinets will only talk to SEPM server to receive any policy according to heartbeat which you defined. GUP can be configured for your remote site on your central SEPM server, for bandwidth issue bandwidth can be throtted on SEPM for remote sites. GUP is the best option for your remote sites to update thousands of systems without bandwitdht issue.

Please go through following links for GUP details and architecture for SEPM for remote sites.

http://www.symantec.com/docs/HOWTO55088

http://www.symantec.com/docs/HOWTO26781

http://www.symantec.com/docs/HOWTO55065

http://www.symantec.com/docs/HOWTO55066

http://www.symantec.com/docs/HOWTO55064

http://www.symantec.com/docs/HOWTO55086

Regards,

Ajay Singh

Thank you for those who responded.  Mithun and John Q - thanks for pointing me to the info -- I will check it out.  And also thanks to Ajay -- the GUP might be something I go with as the number of clients at each site are small.