Best Practices for configuring the number of content revisions to keep in Symantec Endpoint Protection Manager

Article:TECH92225  |  Created: 2009-01-05  |  Updated: 2014-06-11  |  Article URL http://www.symantec.com/docs/TECH92225
Article Type
Technical Solution


Issue



What are the best practices for setting the number of content revisions to keep in the Symantec Endpoint Protection Manager (SEPM)?


Solution



The SEPM must have previous content revision downloads in order to create a "delta", or differential, capable of updating a client from its current content version to the most recent version of that content being stored on the SEPM.  The value of deltas is that content revisions are kept to a minimal size as they are sent across the network. 

To determine how many content revisions you should keep consider the following:

  • For the majority of your clients how often do they communicate with their SEPM?
  • Historically, how long have your clients had to go without communication with their SEPM?
  • What disaster recovery scenarios must you consider and of what duration?
     

The number of content revisions to keep should depend on the need to balance network bandwidth usage with the amount of hard drive storage availability on the SEPM. This setting should be made with the specific network environment's requirements and limitations in mind.


Technical Information

To determine how long it will take to perform a content distribution update in a best case scenario, use the following formula of:

 Concurrent Connections x Content Size* ÷ Available Bandwidth = Content Distribution Time
* Average Content Size = 70-100kb
 
Example of Content Distribution Time using 70kB update.

Bandwidth

Number of clients

Time

T1 (1.54Mbps)

 

5,000

15,000

30 minutes

2 hours

10 Mbps

 

5,000

15,000

4 minutes

14 minutes

100 Mbps

 

5,000

15,000

30 seconds

2 minutes

1 Gbps

 

5,000

15,000

3 seconds

9 seconds

  The above table assumes the entire network was dedicated to the update

 *Note that latency can also be affected by network utilization and protocol overhead.

 Downloads Storage


 

  • Number of Definitions stored is configurable.
  • Each Definition is stored in the DB Compressed.
  • A Compressed and uncompressed copy each definition is kept on SEPM.
  • All Deltas from full definitions are kept on SEPM.

 



Legacy ID



2009020514050748


Article URL http://www.symantec.com/docs/TECH92225


Terms of use for this information are found in Legal Notices