Endpoint Protection Small Business Edition

I was reading a post by jk123 because my server has a very large amount of space being consumed by LU and SEP. In the post, jk123 made the following remark:

"In this folder (C:\Users\All Users\Symantec\LiveUpdate\Downloads) I have .zip files going back to 4/1/09". Judging from the path, he is using Vista or Win7. I am using Server 2003, so my path is C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads. That folder currently contains 743 files dating back to initial installation and consumes almost 700 MB.

In remarks by BadAndy, he seemed to be referencing C:\Program Files\Common Files\Symantec Shared\VirusDefs. My server has the last three updates in that folder consuming about 600MB; however, I found the problem discussed by jk123 when I checked out the path in the All Users folder.

Is it safe to purge (delete) files in that download folder?

The SEP is installed on a separate drive (G:\Program Files\Symantec\Symantec Protection Center) and is consuming 9.6 GB. The db folder is consuming 5 GB, inetpub\client packages consumes 520 MB (and everyting in it dates back to initial install), and inetpub\content consumes 1.6 GB (and the files appear to be exactly the same as the files in C:\Program Files\Common Files\Symantec Shared\VirusDefs). This seems really excessive for a 3-machine installation. Any recommendations to reduce disk space requirements?

>> My server has the last three updates in that folder consuming about 600MB

The amout of data is fine, every revision is about 100MB X 2

DB of 5 GB is quite normal as well.

Have a look on article:

Disk Space Management procedures for the Symantec Endpoint Protection Manager
http://www.symantec.com/business/support/index?page=content&id=TECH96214&key=56824&actp=LIST

BUT: for 3 machines, do you really need to have SEPM. Wouldn't it be reasonable to install all 3 clients as automanaged ones?

My server requires that I use the SEP ("normal" antivirus will not install/run on a server OS, per Symantec Sales). Since I had to pay for five users anyway, I am using two other subscriptions for the two other PC's in my office. Why do I use a server in the first place? I develop and support software. The server is much more reliable than a desktop, plus I need the ability to test and run the software in a client/server environment. I suppose enough said about that.

What is bothering me more than anything is the fact that these files are stale and/or duplicates. SEP has absolutely no need to retain files downloaded in April. Of the total of about 11 GB, a good one-third is either duplicated information or is *really* old - much older than the previous three updates. Also, I believe you missed the point that the folder I am referencing - and that was being referenced in another post within the past few months - is NOT the Program Files\Common Files\Symantec\.... folder where you are storing updates. It is in the All Users folder in Documents and Settings. The LU is consuming about 2 GB of my 17 GB C drive. I'm not in trouble there yet, but I can see it coming.

If you consider the 5 GB db file as normal, I can accept that. I allocated a 17 GB partition for the SEPM, but now I am concerned that it may not be large enough. What do you recommend? 50 GB or 100 GB?

The Downloads folder in Documents and Settings is completely safe to purge. 

You can go to Control Panel > Symantec Liveupdate and click the Cache tab. Here you can set the amount of total space you want to have for this. I currently have mine set at 10 mb. It will download what it needs, process it, and then purge anything to get it back down to 10 mb.

As for total disk space, with a server and 5 clients I would expect maybe 6 or 7 Gb of usage tops. Of course this will expand and decrease as updates are done, database maintanence occurs, etc. though the increase would be temporary.

In your setup I would expect to keep at a minimum 2-3 Gb of free space as a buffer, as long as you have that you'll be set.

"normal" antivirus will not install/run on a server OS, per Symantec Sales

By 'normal', do you mean a consumer product like Norton Antivirus?

I would say the only time I would caution purging the Downloads directory is if LiveUpdate Administrator 2.1 is installed and in use.  Doesn't sound like that's the case for you, though.

sandra

Thecotton,

What I meant is that you can use SEP without SEPM - you can install SEP client on every machine as automanaged and not use SEPM at all - I think that installing SEPM for 3 clients is waste of resources.

I would point out that all three respondents have been helpful here.

Pawel, at the risk of sounding ignorant (in this case I truly am!), what is the procedure for installing as automanaged? I received instructions to install SEPM, but not standalone (automanaged?). If I just uninstall the SEPM will that "force" the computers to go to automanaged, or do I have to uninstall SEP on all machines and reinstall?

John, thank you for instructions to reduce the LU cache and purge the 700MB stored there. My server was set to 872 MB cache before I reduced it.

Sandra, yes by "normal" I was referring to consumer product Norton Antivirus. When I tried to install the product on the server with Windows Server 2003 OS, it refused to install with message that the OS was not supported. That is when I called your sales department, and they recommended the SEP. Prior to purchasing SEP, I had been using Mcafee antivirus. It installed OK, but was not actually protecting (!!!). I have always been very careful about opening emails (even from customers), so it took about three years before I picked up a trojan that wiped out the boot sector. Repairing the boot sector failed and I had to set the entire system back up. Thank God for backups! Mcafee's response was unsatisfactory, so I "fired" them and purchased Symantec, with which I am satisfied.

Installing as standalone or self-managed, you would just install SEP from the SEP or SEPWin64 folder on the file you download from Fileconnect.

Yes, the consumer product was not intended to protect a server-class OS. :)

sandra

Just like Sandra wrote, automanaged client may be installed from SEPM installation folder by running setup.exe and choosing client installation.

Automanaged client is a client noty managed from SEPM which means all settings may, and must, be set locally. There is no need for a console in such configuration. With 3 clients the console is really unnecessary as it is useful with lerger environments.

I really needed the suggestions given by all of you, so let me thank all three of you for your guidance.

Have a reaaly nice holiday season!