Endpoint Protection

We are limited to a certain amount of monthly  downloads/bandwidth. Is it better to set Live Update on the SEP Manager to download updates once a week (say every Wed) vs. having it constantly connect or even every 4 hrs?

What I am wondering is will the amount downloaded be the same either way?

Thanks

Update are all incremental updates. It is upto you about when to set the schedule. It is advisable to update the antivirus signature at least daily.

Thanks for the post!

So if it is incremental would that mean if I update say on Wed, it will update everything I have missed since the previous Wed? In this case, wouldn't the amount downloaded be the same, either daily or weekly?

One other question to go along with the question posted above:

If I do choose daily or even every 4 hr, what is the average downloaded file size I will be downloading vs. doing a once a week download/update?

I just took a look at server and we download new defs every 240 minutes and the clients checking twice a day.  The size of the definition files that I am seeing is only about 500KB.  But depending on how many types of clients you have you may see more than one at the same time.  for example, IA64, x64, and x86.  The definitions are different based on the arcitection of the OS. 

If you configure a live update policy to have the computers check for live updates wheather they are in the office or not at a specific interval, the definition files will be very small.  It is the product updates that make Live update files large.

At least this has been my observation. 

The updates depend on the signature on a particular release day. If you update on Wed and then again update on Wed of the next week, it will incrementally add the signatures of the last virus definition file released.

Great Thanks!

dpease:
I have 4 machines, including the server. All are WinXP 32bit. I know where to set the server update/live-update times, however where do you set the amount of times/intervuls the clients check back to the server for updates? I thought it was automatically done. When the server downloads an update, it automatically sends it out to the client machines. I do have push method enabled.

Also, you mentined about the product updates are large. About how large and how often is this updated?

Thanks for all the help.

 I agree with dpease. We have similar settings to check for updates once in 4 hours.  Most are small incremental updates but are worth the check, so that the latest defs can almost be immediately pushed out for all users