Symantec Endpoint Protection Client configuration changes for performance optimization

Article:TECH102711  |  Created: 2007-01-23  |  Updated: 2010-01-30  |  Article URL http://www.symantec.com/docs/TECH102711
Article Type
Technical Solution


Issue



My system is running slowly since installation of Symantec Endpoint Protection. How do I configure Symantec Endpoint Protection to alleviate performance issues?


Solution




Communication between the Endpoint Client and Manager are causing network and server slowdown.
    Modify the default communication settings:
    1. Click the Clients Tab.
    2. Select the client group you would like to modify.
    3. Click the Policies tab.
    4. If this is not the Global group, uncheck Inherit policies and settings from parent group. Ensure that Policy inheritance is OFF.
    5. Under Location-independent Policies and Settings, with in the Settings box, click Communications Settings.
    6. In the Download box select Pull mode.
    7. Modify the default Heartbeat Interval from "5 minutes" to fit your needs. This modifies how often clients check-in with the manager to receive policies, settings, and content (definition) updates.
    8. Click OK to save settings.

Network file sharing is slow or a network-hosted application runs slowly.
    Disable Network Drive Scanning:
    1. Click the Policies Tab.
    2. Click Antivirus and Antispyware.
    3. Click the policy you would like to modify and then click Edit the Policy.
    4. Click File System Auto-Protect.
    5. Under Network Settings, uncheck Network.
    6. Click OK.
    7. Assign the policy by clicking Assign the Policy, then check each group to which the policy should apply.
    8. Click Assign, then click Yes.

All systems in a group run slowly and Endpoint Protection processes are using an abnormally high level of system resources every week.
    Modify the default weekly scan:
    1. Click the Policies Tab.
    2. Click Antivirus and Antispyware.
    3. Click the policy you would like to modify and then click Edit the Policy.
    4. Click Administrator-defined Scans.
    5. Select Weekly Scheduled Scan and click Edit...
    6. Modify this scan so that it will run at the least intrusive time.
    *There are no randomization options for this scan so all Endpoint Protection Clients in this group will run the scan at the same time.

The Application event log on the system is filled with tamper protection alerts.
    Disable Tamper Protection:
    1. Click the Clients Tab.
    2. Select the client group you would like to modify.
    3. Click the Policies tab.
    4. If this is not the Global group, uncheck Inherit policies and settings from parent group. Ensure that Policy inheritance is OFF.
    5. Under Location-independent Policies and Settings, with in the Settings box, click General Settings.
    6. Click the Tamper Protection tab.
    7. Uncheck Protect Symantec security software from being tampered with or shut down.

The system has trouble delivering email. The email server, with the Symantec Endpoint Protection client installed, runs slowly.


    Deactivate the email tools on Endpoint Protection Clients within a group:
      Part I - Create a custom feature set
      1. Click the Admin tab.
      2. Click Install Packages.
      3. Under View Install Packages, click Client Install Feature Sets.
      4. Under Tasks, click Add Client Install Feature Set...
      5. Type All except AntiVirus Email Protection in the Name box.
      6. Uncheck AntiVirus Email Protection.
      7. Click OK. You should see All except AntiVirus Email Protection listed under the default Client Install Feature Sets.

      Part II - Assign and deploy the custom feature set
      1. From the Clients View, select the client group you would like to modify.
      2. Click the Install Packages tab.
      3. If there is no package present in this list, from the Tasks menu, click Add Client Install Package.
          1. In the Add Client Install Package dialog box, ensure that the correct install package (32-bit or 64-bit) is listed in the first drop-down list.
          2. Disable (uncheck) the Maintain existing client features when updating option.
          3. Click the Select the features you want to use drop-down list and then select the desired feature set.
          4. Ensure that Download the client package from the management server option is enabled.
          5. Ensure the Upgrade Schedule option is disabled.
          6. Click OK.
      4. Click the Clients tab. Under the Tasks menu click Run Command on Group and select Update Content.

        --or-- If there is an Install Package listed on this tab that you wish to continue to use:
      5. Double-click the install package that is currently in use, for example Symantec Endpoint Protection version 11.0.5002.333 for WIN32BIT.
        1. Under Client Features select All except AntiVirus Email Protection from the Select the features you want to use: drop-down menu.
        2. Click OK

Note: The above steps can be useful for adding or removing any product feature.


    References
    This document is available in the following languages:




    Legacy ID



    2007102311173048


    Article URL http://www.symantec.com/docs/TECH102711


    Terms of use for this information are found in Legal Notices