Video Screencast Help

High Bandwidth usage Endpoint

Created: 24 Mar 2011 • Updated: 02 Dec 2011 | 13 comments
This issue has been solved. See solution.

Hi there,

It seems my management server is using very high bandwidth daily, about 120gb.

I have about a 1000 endpoint clients connected, im using GUP on other GEO locations, set pull mode and experienced width bandwidth settings in IIS.

Can anyone help me lower the bandwidth consumption? 120 gb looks a bit high to me.

I attached a syslink.log file from one of my clients.

 

Thx,

LEVd

Discussion Filed Under:

Comments 13 CommentsJump to latest comment

pete_4u2002's picture

Use the latest version of SEPM and GUP.

Use more number of content revision on the SEPM.

levd's picture

can you be a little bit more specific? im using sepm 11.0.6100.645, another version of GUP? its just a selection in SEPM if you want to use a client as a gup..

 

also what do you mean by: Use more number of content revision on the SEPM?

 

LEVD

Mithun Sanghavi's picture

Hello,

Few Suggestions for you to Follow:

Please Follow the Symantec Knowledgebase Articles provided below:

1) Best Practices with Symantec Endpoint Protection (SEP) Group Update Providers (GUP)

http://www.symantec.com/business/support/index?pag...

2) Items to consider when using Group Update Providers (GUP)

http://www.symantec.com/business/support/index?pag...

3) Group Update Provider: Sizing and Scaling Guidelines

http://www.symantec.com/business/support/index?pag...

4) When does a client download full.zip from SEPM/GUP?

http://www.symantec.com/business/support/index?pag...

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Jeremy Dundon's picture

Number of content revisions to keep determines whether a client will get a delta (small package) or a full update (100+mb package)

Generally more content revisions kept means more clients getting delta updates, up to a maximum of ~40 revisions kept.

Admin > Servers > Edit Site Properties > LiveUpdate (tab) > Disk Space Management for Downloads

Mithun Sanghavi's picture

Hello Levd,

The amount of revisions kept by the manager should be more than three (3) revisions.  This ensures the GUPs receive delta packages instead of full packages.  If the manager does not have all definitions between the last client check-in and the next check in, the manager will send the GUP a full (80 MB) package, increasing bandwidth over the WAN.  One day's worth of definitions is normally three (3) revisions.

The number of content revisions to keep should depend on the need to balance network bandwidth with the amount of hard drive storage availability on the SEPM.  This setting should be made with the specific network environments requirements and limitations in mind.

 

 

 

Check this Symantec Knowledgebase Article:

Best Practices for configuring the number of content revisions to keep in Symantec Endpoint Protection Manager

http://www.symantec.com/business/support/index?pag...

 

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

SOLUTION
levd's picture

ok thx i will take a look at things.

 

LEVD

levd's picture

I checked again, it looks like its mostly bandwidth consumption between SEPM and the database (different servers)

Number of content revisions to keep are set to 10, im allready using the GUPs on several GEO locations.

Any idea how to limit bandwidth between SEPM and DB?

 

Jeremy Dundon's picture

The biggest thing that will reduce bandwidth between SEPM and DB is to increase the amount of time between client check-ins, since each check-in puts  information from the client into the database.

 

By default clients are set to check in every 5 minutes. (12 times an hour)

Bump that out to 30 or even 60 minutes and you will see your bandwidth usage drop accordingly.

levd's picture

Hi Jeremy,

Is this the heartbeat setting? where can i find this setting so i can alter it.

 

Thx,

 

LEVD

Mithun Sanghavi's picture

Hello,

2 Ways to Limit Bandwidth, check this below:

1) How to throttle network bandwidth used by the Endpoint Protection Manager (SEPM) website in Microsoft's Internet Information Server (IIS)

http://www.symantec.com/business/support/index?pag...

2) Limit The Bandwidth from GUP Policy. Check the screenshot.

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

levd's picture

will alter the hearbeat settings.

I allready have GUPs running and also looked at the bandwidth settings within IIS.

 

Will check back here after some time.

Thx,

LEVD