Endpoint Protection

Hi,

i have the following Symantec Organization running in my network:

Symantec Endpoint Protection used versions

- SEPM Version: 11.0.6100.645

- SEP Client Version:  11.0.6100.645 & 11.0.6005.562

Symantec Endpoint Protection Management Server

- Server 1: Intel Xeon E5520, 12 GB Ram, Win2k8R2

- Server 2: Intel Xeon 3 Ghz, 3,5 GB Ram, Win2k3

Symantec Group Update Providers

- 21 GUPs in Branch Office all over the world

- The GUP-Role is enabled on the Domain Controller of thes branch offices

Workstations

- 1200 managed Clients

Problem

Our biggest problem is, that it will take very long time until the newest pattern-files are installed on the workstation.

So my question is, what can i do to speed up the update-process. Please ask me, what kind of information you need...

Thx

Julian.

what is the heart beat set?

is there any limitations/rules set for bandwidth between GUP and the SEPM's, GUP's and the SEP client?

First things first...get all of them to the same and the latest version i.e. RU6 MP2 .

Symantec Endpoint Protection RU6 MP2 (11.0.6200)

Secondly determine using task manager or process explorer what is consuming the CPU or the memory so that we can further narrow down on the performance issue.

Ensure that the GUP and the client reporting to the GUP are in the LAN, preferably in the same subnet.

Hi,

Heartbeat-interval is set to 15 minutes and we are using the Pull-Mode! The update-process for the clients in our branch-offices (normally around 20-30 client) is working fine. So our mean problem is located in our main building.

In the main building we have the most clients installed in different vlan. My idea is, to use a GUP for each vlan, maybe we can solve the problem than!?

@Sandip: Which CPU do you mean? Client-CPU or SEPM-Server-CPU?

BR

Julian. 

Hi,

@Pete: Maximum bandwidth allowed for GUP downloads from the SEPM is set to Unlimited!

BR

Julian.

15 minutes looks good. Can you post the sylink logs? there could be other issue, since the HeartBEat is 15 minutes the client will be contacting SEPM at this interval.

where i could find the right log-file? Sorry Symantec SEP is new for me...

what do you think regarding this article:

https://www-secure.symantec.com/connect/articles/tips-installing-sep-low-bandwidth-environment

BR

Julian.