Endpoint Protection

We have only 10 clients and are using SEPM 12.1 RU1, but the size of the embedded database is 7gb+

We have truncation and rebuilt options checked... Also have the content revisions to 5, but nothing helped.

So we uninstalled and re-installed, but still the size is 5 gb.

Any suggestions?

First:

http://www.symantec.com/business/support/index?page=content&id=TECH160736

Second:

Try deleting some client packages

System requirements state you need at least 8GB free space for the SEPM, a 5GB DB is not out of the question, or unusual.

http://www.symantec.com/business/support/index?page=content&id=TECH163806

Keep in mind the 8GB requirement is just for installing. You should also make sure to have plenty of room for the DB to grow and shrink as it downloads new definitions updates and gets rid of old ones.

Ted G.

The machine definitely meets the requirements infact more than waht is required

OK. Just make sure the truncation settings are enabled on the SEPM so the transaction log does not grow out of control. It should be anabled by default. Other than that, what you are seeing is pretty normal.

Another thing to keep in mind is each set of definitions you retain in the SEPM is ~250M. 250*5 = 1,250 MB just for the definitions.

can you let me know if it helps

http://www.symantec.com/business/support/index?page=content&id=TECH166658

in case sem5.log is of huge size, you can use the steps to recreate the sem5.log

1) Stop SEPM and database services.

2) Rename / Delete the current log

3) Click Start, click on Run and Type "CMD" then click OK

4) In the Command Prompt type: "CD C:\Program Files\Symantec\Symantec Endpoint Protection Manager\ASA\win32\" and press Enter this will change directories to the folder containing dbsrv11.exe.

5) To force the recreation of sem5.log. Type: "dbsrv11 -f "C:\Program Files\Symantec\Symantec Endpoint Protection Manager\db\sem5.db" and press Enter

6) Click Start, click on Run and Type "services.msc" then click OK and start the Symantec Embedded Database Service

7) Start the Symantec Endpoint Protection Manager service.

pete_4u2002

I have tried those steps.. they do not help.

Plus 5 gb for 10 clients is too much.. i heard 2gb is fine..the virus defs size is fine and apart from the database everything is normal and running fine.

how long you have configured to keep the logs?

is application learning enabled?

As previously mentioned by Jason, there are many criteria that may impact database size, such as:

 - number of clients (limited here)

 - number of install packages

 - log purge settings

 - number of definitions stored

Please reduce all these options to a low level, wait for database maintenance at midnight, and see if it brings any improvement.

Agree witH John, Also have you tried re-installing without the backup of the database?

If the issue comes still.. then may be it would be best if you download a fresh copy from fileconnect and then do the installation.

Could be a case of corruption.

I don't know which version of SEP 12.1 RU1 you have (EE or SBE), but please note there is a known issue with SEP 12.1 RU1 SBE transaction log. All details available here:

http://www.symantec.com/docs/TECH178718

Thank you for the update John Q. I'll look into it..