bandwidth usage in sav 10
Updated: 21 May 2010 | 9 comments
This issue has been solved. See solution.
One of my customer is facing problem with sav. They are having a central server(sav 10) and secondary servers in different (30+)locations .In each location 4-6 clients are present. Because of bandwidth issues (daily the secondary servers are downloading the updates which is about 50mb) we are planning to move all clients to central server so that it will download only incremental updates. Is any setting we can do like if a client pc is downloading updates which is having a particular series of ip it should not allow to download updates for the clients which is present in that series unless this download is complete.
discussion Filed Under:
Comments
You can update each server
You can update each server individually - not from the master/primary.
I ran a script that downloaded the update file (forget, was it xdb or vdb or whatever) from Symantec's FTP site - and ran that on each server at a time of my choosing, actually every hour on the hour, but it only got updates if there was a new release.
That way, they go to the Internet for updates. You don't have to update secondary servers from the Primary. You can have it do settings only, and let each update themselves. Or have each run LU themselves.
There is a file Symantec furnishes for this - a CMD file. Schedule it on each server. It checks for updates, grabs them, puts them in the correct folder on that server, then logs what happened. Might be called vdbdown or xdbdown. I modified it and posted it here under downloads to work with SEP!
Otherwise, no there's not a setting..............
You can also set the clients up on roaming and configure roaming so that the clients use whatever server responds the fastest.......
I love ROAMING!
My sites - http://theamcpages.com & http://antique-engines.com
Toy:
Shadow:
I am having internet
I am having internet connection only for primary server. So I cannot download updates directly from inter net in secondary server. Somebody told me that there is a registry setting in server it will disallow the client form downloading the updates from server if a client pc is already downloading updates which is present in the same subnet unless that download is complete.
Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind
Now you mention it that
Now you mention it that sounds familiar for some reason.................
My sites - http://theamcpages.com & http://antique-engines.com
Toy:
Shadow:
Hi
Hello Arvind,
if you are looking for registry , this is the document you should referr to.
Scalability and performance guidelines for Symantec AntiVirus Corporate Edition 10.x and Symantec Client Security 3.x
http://service1.symantec.com/SUPPORT/ent-security.nsf/3cc2e41c6822760f882573410063494d/b8d98400b78a9f018825704d005ef4a5?OpenDocument
let me know if this was helpful.
Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq
Hi Aravind, According to my
Hi Aravind,
According to my observation primary server pushes full 40+mb update to secondary server.
Its better to bring all the clients to one server and use the following reg tweak to set one thread to update one client in a subnet.
__________________________________________________________________
U can modify/Create the following registry values.
HKLM\Soffware\Intel\LanDesk\Virusprotection6\
"UpdateClientsByNetOrSubnet" set the value to 1
"IpSubnetMask" set the value to ur subnet mask in hex (for 255.255.255.0 it is ffffff00)
(Key names are case sensitive)
This reduces one thread per subnet and traffic for one subnet will be less
Also you have to set ClientUpdateThreadPool according to ur need....
REF:
http://service1.symantec.com/support/ent-security....
__________________________________________________________________
Regards,
Srinivas H.P.
HCL Infosystems Ltd
very good SHP
i was actually looking for this, i remember u suggested this to one of the customers ;)
good info..
Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq
Thanks Rafeeq, I cant forget
Thanks Rafeeq,
I cant forget this because it saved me when i was managing 2500 client from 1 server(That too PIII server and 64Kbps branch links).
When ever a large update(re-installation of clients) comes customer used to complain about the network.
I searched for many days and found this from Symantec KB.
From that day i started looking information in Symantec KB and i like it very much.
Regards,
Srinivas H.P.
HCL Infosystems Ltd
Thank you SHP.
Thank you SHP.
Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind
You can also change the
You can also change the number of virus definition (.vdb) files that a Symantec AntiVirus Corporate Edition server keeps
If the pc is not used for more that 7 day it will download full update. If you set num of vdb to 20 it can provide microdefs even if the clients are having 20 days old update.
REF:
http://service1.symantec.com/SUPPORT/ent-security....
Regards,
Srinivas H.P.
HCL Infosystems Ltd
Would you like to reply?
Login or Register to post your comment.