Endpoint Protection

 View Only

  • 1.  Endpoint Update File Size

    Posted Dec 17, 2014 04:19 PM

    Hi,

    How large is a typical client update for SEP? I'm seeing 1GB of data going out to each client. This seems very high to me. Thanks!



  • 2.  RE: Endpoint Update File Size

    Posted Dec 17, 2014 04:22 PM
    This is quite high. What SEP version and over how long a time period? A full update is typically 450MB and deltas are much smaller


  • 3.  RE: Endpoint Update File Size

    Posted Dec 17, 2014 04:29 PM

    V12.1.3. The 1GB is all in one shot. Does not occur every day. 



  • 4.  RE: Endpoint Update File Size

    Posted Dec 17, 2014 04:35 PM

    Download and run the symhelp tool on one affected client to see if it shows any problems.

    Download the Symantec Help (SymHelp) diagnostic tool to detect Symantec product issues

    http://www.symantec.com/docs/TECH170752



  • 5.  RE: Endpoint Update File Size

    Posted Dec 18, 2014 01:04 AM

    Actually, they've not been 450 MB for some time.

    As of today, a Full SEP VirusDef package is 530 MB down the wire, and that's just one architecture. i.e. one for x86, one for x64, then Mac is seperate again, likewise other platforms.

    Once installed/extracted by the SEP Agent it currently blows out to 950 MB on disk.  We've been monitoring it for some time, and as of late it seems to grow 1-2 MB a day on average.

    The closest competitor in size is McAfee, 70 MB down the wire, who's "Full DAT" expanded/installed is about 160 MB. SOPHOS (which is notorious for being one of the smallest) is only 92 MB, with a total agent size of 166 MB.

    The most current SEP Agent 12.1 RU5 (with bith App Control & Firewall not installed) blows out to a total of 1.5-2.0 GB, and needs at least that much extra as free space, in the possibility it needs to ever install a full update.
    (i.e. user is away on leave, comes back some time later, needs full update, without adequate space to pull down over 500 MB, then extract it to temp, then copy it/install it., it fails to update)

     



  • 6.  RE: Endpoint Update File Size

    Posted Dec 18, 2014 06:47 AM

    How are the clients configured to get the updates?

    Run sylink monitor .. Provide logs...



  • 7.  RE: Endpoint Update File Size

    Posted Dec 18, 2014 09:13 AM

    Thanks for the suggestions. I ran the Symhelp utility and everything came back fine except for a few unrelated minor issues. Stephen's comments are right on track. These updates are just bloated. Our clients get our updates from an internal SEP server. We have flow monitor software that tracks the bandwidth used by SEP at 1.09GB per client over a 24 hour period on average. That's a lot of bandwidth!

     

    I'm going to keep looking and maybe see if the sylink logging will shed any light on what's actually being sent.

    I'll post what I find.

    Thank again!

     

    Chris