Video Screencast Help
Search Video Help Close Back
to help
Not able to make it to Vision this year? Get a sampling in the Best of Vision on Demand group.

Best Practice for 450 Windows and 50 Mac clients

Created: 29 Mar 2011 | 11 comments
ddavid@peapod's picture
ddavid@peapod
0 0 Votes
Login to vote

Hello,

I presently have one SEPM installed on a 64bit Server 2008 machine. We are running 11.0.6200.754

1. Is it advisable to install a LUA to manage the updates for my Mac clients?

2. If so, I already know that you should install LUA on a different server than the SEPM but should I stick with a physical server or can I make do with a virtual server? 

Thanks,

Dino

Discussion Filed Under:
, , ,

Comments

Rafeeq's picture
29
Mar
2011
6 Votes -6
Login to vote
Rafeeq

Hi

Yes.

You can have sepm and luadmin on the same server however you should have one schedule for Liveudpate

make your sepm to get updates from Luadmin too...Let LUadmin do all the downloading job. 1 of the reasons why its not advisable is that they both download defs and store defs and eat up space..if you have any spare XP can have luadmin on that....

Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq

Been_Jamming's picture
29
Mar
2011
5 Votes +3
Login to vote
Been_Jamming
Symantec Employee
Accredited
Certified

Installing both the SEPM and

Installing both the SEPM and LUA on the same server is not recommended nor supported.

http://www.symantec.com/business/support/index?page=content&id=TECH105076

ddavid@peapod's picture
29
Mar
2011
0 Votes 0
Login to vote
ddavid@peapod

Thanks Rafeeq. Could I

Thanks Rafeeq.

Could I install luadmin on a virtual server or is it advisable to stick to a physical server?

Rafeeq's picture
29
Mar
2011
7 Votes -7
Login to vote
Rafeeq

hi

stick to the same server, slim to none that u would run into any trouble...You can uninstall and reinstall luadmin any time if u face any issue. 

if you still have enough source, u can build a new vm..again if its just for Luadmin, u can go with the physical one.

Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq

Ted G.'s picture
29
Mar
2011
6 Votes +6
Login to vote
Ted G.
Symantec Employee
Accredited

LUA and the SEPM installed

LUA and the SEPM installed and running on the same server is NOT SUPPORTED or recommended. This is in the release notes for the product.

MichaelD50's picture
29
Mar
2011
4 Votes +4
Login to vote
MichaelD50

Bad info, Rafeeq

It is never appropriate to put SEPM and LUA on the same piece of hardware!

Where did you get such an idea?

MJD

Rafeeq's picture
30
Mar
2011
1 Vote -1
Login to vote
Rafeeq

Hi

Could you please tell me what are the disadvantages?

referring to this document

 

LiveUpdate Administrator 2.x and Symantec Endpoint Protection Manager on the Same Physical Server

 

http://www.symantec.com/business/support/index?page=content&id=TECH105076

Please Note: The statement 'same physical server' includes separate virtual machines housed on the same physical hardware.

so we should get a  new server in this case ??

We have been running LUadmin and SEPM on the same box..it has enough resource available wrt to  RAM and diskspace..so now worries :)

Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq

Been_Jamming's picture
30
Mar
2011
3 Votes +3
Login to vote
Been_Jamming
Symantec Employee
Accredited
Certified

The disadvantages are listed

The disadvantages are listed in the document.

  1. A very high probability the server will run out of Java Heap space.
  2. Server performance with both SEPM and LUA will suffer due to high I/O load and RAM requirements.
  3. For redundancy it is recommended to install LUA on another server.
  4. Security implications if the SEPM/LUA server fails (clients will not receive updates or all clients will attempt to retrieve updates direct from Symantec)
  5. Potential Network performance issues on the segment the SEPM/LUA server is located (e.g. The initial download of definitions to an LUA server is between 600MB - 1.5GB)

 

Mick2009's picture
30
Mar
2011
2 Votes +2
Login to vote
Mick2009
Symantec Employee

Helpful Article

Hi Dino,

 

Here is a new article that may help you design your SEP infrastructure:  When is it Recommended to Use LiveUpdate Administrator 2.x with Symantec Endpoint Protection? (http://www.symantec.com/docs/TECH154896)

 

Definitely make sure that you are using the new LUA 2.3  to keep those Mac clients up to date!  And please do continue to use the Connect forum (and the expertise + experiences of its members) should you need any additional assistance.

 

Thanks and best regards,

 

Mick

With thanks and best regards,

Mick

ddavid@peapod's picture
30
Mar
2011
0 Votes 0
Login to vote
ddavid@peapod

Thanks Mick. Can I install

Thanks Mick.

Can I install LUA on a virtual server?

Mick2009's picture
31
Mar
2011
1 Vote +1
Login to vote
Mick2009
Symantec Employee

Should Be OK

Hi Dino,

 

I've seen many LUA servers that operate well on VMWare.  The only concern that arises is the amount of resources LUA needs (CPU + memory + network bandwidth + lots of hard drive space).  Tryign get an LUA to run on an image that only has 1 GB or RAM and 10 GB of hard rive will never work.

 

Also: be aware that demands on Java Heap, etc that are placed from within a VMWare are pulling on the same finite resources as whatever server they are hosted on.  I would not recommend installing VMWare on the SEPM server, for instance, and trying to run the LUA 2.x serevr from there.

 

Thanks again,

 

Mick

With thanks and best regards,

Mick

Technical Support

Symantec.com

Store

Community Stats

Total Content Items
Members
270,010