Endpoint Protection

Hey Guys,

Looking for a visual aid and or a tech article that would help me understand how the heartbeat interval and the Download Randommization window play with each other. Also, Is there a best practice for both heartbeat interval and the Download Randommization values?

My current setup: Heartbeat Interval is 60 minutes while the download radomization window is 5 minutes.

There is a misunderstanding in my environemnt that I would like to clear up.

 

Thanks for the effort in advance

Check this as well as links in the KB article at the bottom of page:

About randomization of simultaneous content downloads

Article:HOWTO80889

|

Created: 2012-10-24

|

Updated: 2013-01-28

|

Article URL http://www.symantec.com/docs/HOWTO80889

 

Pull mode is where clients use the heartbeat setting to determine when they check in.

So for example, 30 minute heartbeat and 1 hour download randomization means the client may take up to an hour around the heartbeat interval to check in and upload logs, update policy, download content, etc.

Here have a look at some information about the hearthbeat:

https://www-secure.symantec.com/connect/articles/symantec-endpoint-protection-heartbeat-process

...and accelerated heartbeat:

http://www.symantec.com/docs/TECH93724

Check this thread

https://www-secure.symantec.com/connect/forums/download-randomization

is there any performance related issue seen, if not let it be as it is set at this time. basically randomization should not be more than heartbeat.

So, Let me run this by you guys to see if I understand. Scenerio: SEP 12.1.2 client, heart beat interval: 60 minutes, download randomization value is 5 minutes. So, if a SEP 12.1.2 client heartbeat kicks in at 6:00pm and needs to download a delta, does this mean that the client can download the delta between 6:00pm and 6:05pm?????

Yes, within five minutes of heartbeat