Video Screencast Help
Search Video Help Close Back
to help
Not able to make it to Vision this year? Get a sampling in the Best of Vision on Demand group.

Limit the number of Def files stored on computer

Updated: 25 Jul 2011 | 4 comments
BW_Dreamer's picture
0 0 Votes
Login to vote
This issue has been solved. See solution.

Is there a way to limit the number of virus definition files on the end users computer. We have some servers that have very little free space. I would like to limit the number of definition files to maybe three. I have seen posts about editing the conf.properties file. Not sure if this limits the number on the clients or the SEPM. 

Comments

Beppe's picture
03
Jun
2011
1 Vote +1
Login to vote

how to

Hi,

here is the good procedure for you:

How to decrease the number of Content Cache definitions stored on the Symantec Endpoint Protection Clients.

HKEY_LOCAL_MACHINE\Software\Symantec\Symantec Endpoint Protection\Content\{MONIKER.EN_US}
Each moniker should have a "CacheEntries" (DWORD) entry in the registry. This value determines the number of cache entries for that particular moniker.

If the value does not exist a default value of 5 is used.

 

    • Open the registry
    • Go to the following Moniker {C60DC234-65F9-4674-94AE-62158EFCA433} Key.
  • HKEY_LOCAL_MACHINE\Software\Symantec\Symantec Endpoint Protection\Content\{{C60DC234-65F9-4674-94AE-62158EFCA433}

    • Locate the CacheEntries and double click on the key
    • Change the CacheEntries key to the desired value (default is 5) .

Note: The changes will not take affect until the next content update from the manager.

Content Information:
{C60DC234-65F9-4674-94AE-62158EFCA433}: SESC Virus Definitions Win32 v11 - MicroDefsB.CurDefs - SymAllLanguages
{1CD85198-26C6-4bac-8C72-5D34B025DE35}: SESC Virus Definitions Win64 (x64) v11 - MicroDefsB.CurDefs - SymAllLanguages
{ECCC5006-EF61-4c99-829A-417B6C6AD963}: Decomposer - 1.0.0 - SymAllLanguages
{C25CEA47-63E5-447b-8D95-C79CAE13FF79}: Symantec Known Application System - 1.5.0 - SymAllLanguages
{812CD25E-1049-4086-9DDD-A4FAE649FBDF}: Symantec Security Content A1 - MicroDefsB.CurDefs - SymAllLanguages
{E1A6B4FF-6873-4200-B6F6-04C13BF38CF3}: Symantec Security Content A1-64 - MicroDefsB.CurDefs - SymAllLanguages
{E5A3EBEE-D580-421e-86DF-54C0B3739522}: Symantec Security Content B1 - MicroDefsB.CurDefs - SymAllLanguages
{CC40C428-1830-44ef-B8B2-920A0B761793}: Symantec Security Content B1-64 - MicroDefsB.CurDefs - SymAllLanguages
{D3769926-05B7-4ad1-9DCF-23051EEE78E3}: SESC IPS Signatures Win32 - 11.0 - SymAllLanguages
{42B17E5E-4E9D-4157-88CB-966FB4985928}: SESC IPS Signatures Win64 - 11.0 - SymAllLanguages
{4F889C4A-784D-40de-8539-6A29BAA43139}: SESC Submission Control Data - 11.0 - SymAllLanguages

Note: The procedures above can also be used to define the number of Content Cache for other signatures.

    • Note in {C60DC234-65F9-4674-94AE-62158EFCA433}:
      In Symantec Endpoint Protection 11.0 and MR1, adjust the "CacheEntries" DWORD value to the # of cache content revisions to keep.
      In Symantec Endpoint Protection MR2 and newer, adjust the "CacheEntriesEx" DWORD value to the # of cache content revisions to keep. 

Regards,

Giuseppe

Beppe's picture
03
Jun
2011
1 Vote +1
Login to vote
Mithun Sanghavi's picture
03
Jun
2011
1 Vote -1
Login to vote

Solution Steps

Hello,

I would Suggest to rather Work on the Disk Management Procedures which would answers to all:

● How to ensure that the content downloads on the Symantec Endpoint Protection Manager server are limited by days

● How to control database growth

● How to control the amount of disk space Symantec uses on the Symantec Endpoint Protection Manager server

● Is there a recommended disk space management configuration for virus definition downloads and database for the Symantec Endpoint Protection Manager?

● How to reduce the amount of disk space used by the Symantec Endpoint Protection Manager for content revisions and the database

 

Disk Space Management procedures for the Symantec Endpoint Protection Manager
 
 
 
Other Things which could be Managed: 
 
Managing log data in the Symantec Endpoint Protection Manager (SEPM)
 
 
About Content Cache Control
 

 

Hope this helps!!!

Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | SCTS | ITIL v3

Follow me on Twitter: @mithun_sanghavi

Don't forget to mark your thread as 'SOLVED' with the answer that best helped yo

Jason Petorak's picture
03
Jun
2011
1 Vote -1
Login to vote

Hi BW_Dreamer, How to make

Hi BW_Dreamer,

How to make the Symantec Endpoint Recovery Tool boot from a USB memory stick
http://www.symantec.com/business/support/index?page=content&id=TECH131578

In these instructions, you can create a bootable SERT USB memory stick complete with the latest definitions.