Endpoint Protection

We have a dedicated virtual machine for Symantec Endpoint Management server, and it updates all clients at all our sites (16 in all we're a school district). This normally works fine but when staff go on break and come back the ammount of updates is large and Endpoint will just take all the bandwidth that it can muster to push updates to the point where it was interferring with our IP phones. I put this server on it's own virtual switch and capped the network to 2mb/sec and it solved that problem. Now we have implemented some better site monitoring software and it's driving me nuts because Endpoint still monopolizes all the bandwidth on that server when it needs to...and I constantly get dropped SNMP packet alerts in my email. It's a feature I don't want to turn off  but.....how can you regulate how much bandwidth Endpoint is allowed to take? If this wasn't a virtual machine and we couldn't cap it's bandwidth we'd be having major problems. It would be nice to set Endpoint at a certain point and then cap the VM just a little bit higher so other traffic is allowed to reach this server while it's pushing updates.

We can try to optimize the performance of SEP but we cannot set fixed bandwith  for SEP.


Symantec Endpoint Protection Client configuration changes for performance optimization

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007102311173048

In IIS you can set a maximum bandwidth for the SEP website.  (It is under the properties for the Symantec website on the performance tab.)

This will cap the bandwidth that the clients can use getting the updates. 

 Would a GUP solve the issues?  Sounds like it would.

In our environment it really helped us very much in 6 different sites.

This began happening a couple of months ago here as well.  At first, we limited the bandwidth in IIS, as Jeremy suggested.  With things under control, we then took the opportunity to set up Group Update Providers for each location.  We were then able to remove the IIS limit and everything has been fine ever since.