Endpoint Protection

We are currently running Symantec EndPoint 12.1.2015.2015 with the Management Server running on a slower Windows Server 2003 box maxed out with 4GB RAM.

The server needs to be replaced, the hardware and especially the disk subsystem is severely lacking, but in the meantime we are trying to maximize performance.

We notice significant slowdown especially, it seems, when the server is pusing out new LiveUpdate content to clients.  I can't say for certain, but it appears that the server is pushing the content out to all client (13 of them) at once.

Is this the case?  If so, is there a way to change this to perhaps limit the # of simultaneous content pushes?  I believe this is causing a significant burden on our network and would like to somehow space out the content pushes. 

I see that I can set the client policy to a PULL method instead and have the clients pull down definition updates at a specified interval, say every hour or 2, but would the clients still pull the content simultaneously?

Any info or advice appreciated.

 

Thanks!

Have you considered using GUPs to distribute content? There isn't a way to schedule updates from the sepm as it happens automatically when clients check in.

I see that I can set the client policy to a PULL method instead and have the clients pull down definition updates at a specified interval, say every hour or 2, but would the clients still pull the content simultaneously?

 

- No, if you in addition to pull mode interval set as well Randomization for clients heartbeat to SEPM - this will apply as well to update downloads from SEPM,