Hello,
Check this Thread:
https://www-secure.symantec.com/connect/forums/endpoint-protection-11-definition-update-size
Again, you can also check this Article:
http://www.symantec.com/docs/TECH102211
It states as below:
What are the sizes of the various packages that are sent between the Symantec Endpoint Protection client and manager?
The following are estimates of the size of packages that are sent between the Symantec Endpoint Protection client and manager:
- Heartbeat (with no updates to be exchanged) - When there is no traffic to be exchanged (i.e. no profile to download and no logs to update) then the heartbeat is between 2 KB/s and 3 KB/s.
- Policies (i.e. AV/AS, Firewall, OS Protection, Host Integrity) - Typically varies between 20 KB and 80 KB, but can increase if detailed rules are included, or OS protection templates are used. Generally, after you set your policies to suit your network needs, you do not modify them on a regular basis.
- IPS Signature Updates - Files range between 50 KB and 100 KB. Symantec supplies updates approximately every quarter unless a specific threat or vulnerability needs to be addressed.
- AV Signatures - 50 KB to 100 KB daily for clients, if you assume that the signatures are updated successfully every day.
- Logs - Logs are compressed at the client before they are uploaded to the Symantec Endpoint Protection Manager. Approximately, 800 log entries take up 1KB of file space.
Secondly,
- Symantec Endpoint Protection 11.x will keep 3 definition sets at any time: the current set and the last 2.
- Symantec Antivirus 8.x/9.x/10.x will keep 2 definition sets: the current set and the last used.
- Symantec End Point Protection 12.1.x will keep 1 set of definations.
For SEP 11.x, check the virus defs in.... >> C:\Program Files\Common Files\Symantec Shared\VirusDefs
You could also refer to below articles:
Drive Space used by Virus Definitions Updates
http://www.symantec.com/docs/TECH141811
Disk Space Management procedures for the Symantec Endpoint Protection Manager
http://www.symantec.com/docs/TECH96214
Hope that helps!!