Endpoint Protection

Hi,

Firstly, is this adviseable?

If yes, then i'm following this guide about performance tuning: http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2009092623113548

Its wants me to uninstall and reinstall a certain version of Java. I know the SEPM consol is java based so will this be ok if i perform the requested java update?

Thanks

its actually not adivisable to have SEPM and LUadmin on the same server 

LiveUpdate Administrator 2.x and Symantec Endpoint Protection Manager on the Same Physical Server

http://service1.symantec.com/support/ent-security.nsf/docid/2008060510124848

as the symptoms mentioned it wil use lot of resources.you can unintall java any issues with sepm then (hopefully no) then you can install the java from here
C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\webapps\scm\clientpkg thats it 

 Removing Java update should not be the problem..However its not that its not recommended but it makes less sense to install LUA on SEPM server when SEPM itself can download the updates.

Is this LUA for other purposes aswell ?

Hi,

We have a number of systems running an application which is business critical. When a definition update was distributed by the SEPM is woudl cause this application to crash.

To get around this issue we needed to schedule the updates, somethign which can only be done when downloading form a LU server. The clients do not have direct access to the internet so an internal LU server was the only way to go. We don't really have any other place to put the LU server so I installed it on the SEPM (dedicated symantec) server.

Resource is not an issue as long as the LU server does exactly what it should do and get updates to these clients at the scheduled time.

we did had a similar issue with the updates the the cpu used to spike when new defs arrive from SEPM
we did manage to put the LUadmin and scheduled updates as we dont have that option in SEPM
if the resource consumption are minimum with sepm and luadmin, you can go with it  

 OK..just make sure both SEPM and LUa are not downloading Defs.

In LUA create 2 Distribution schedule.
1. Only for SEPM
2. Only for group with Servers ( with Citical Apps. )

How do I create a distribution schedule for only SEPM? SEPM manages its own updates right?

We have 2000 clients of which 50 have the critical app so the LU shoudl nto be very busy at all.

he mentioned about manage schedule for liveupdate administrator
 once it download defs , make your sepm to get it from there.

 1.. Make sure these servers are in 1 group.
2. Create distribution for SEPM would be your normal Distribution 
Give LUA info in SEPM in SEPM -Admin- Servers- Local Site- Properties- Liveupdate- Source Servers.

3. Create a new Distribution and in this distribution first you will test it..once it has been tested it will be published only to Critical App group.

for that you will have to create a new Liveupdate policy
uncheck -default management server, check the second option for symantec liveupdate servs then add the LUA clu-prod link below.

So here..SEPM will get defs from LUA and it will distribute to 1950 clients in one go..
The 50 servers will not take defs from SEPM they will directly connect to LUA distribution link to get the updates once they are tested.

we have samiliar issues, new defination update from SEPM live update server, it caused CPU spike on some slown PCs in branches, one PC donwloaded a 45MB size update and another new def update within 2-3 hours.

Do you have some instruction how to set up LUA districution link?