Endpoint Protection

 View Only
  • 1.  LUA & definition sizes - any recent changes?

    Posted Jun 22, 2016 03:47 AM

    Has there been a change to the way definitions are delivered to the LUA?

    We have noticed a significant increase in the size of the hub defs in May and June, which is causing failures to download due to disk space issues, which in turn seem to be caused by a bug in the LUA.

    Hub defs were released on 16th June, IIRC; I wiped the content for the LUA this morning (22nd) and initiated a fresh download (RU4 & RU6 defs, both 32 and 64 bit) and the system is currently pulling down 23.5GB of data. Typically, we would have been seeing 8-9GB sizes over the last six months or so, once the defs had settled down after the hub release. And there's no sign of the size beginning to settle down yet after that release.

    Compounding this issue is that there seems to be a bug in the LUA - I would be interested to confirm if I'm right in thinking that the LUA calculates (free space required for RU4 defs)+(free space required for RU6 defs); as 99.5% of the content is shared, this means it's double counting the actual free space required, so my LUA would not allow me to initiate download until i had cleared 47GB free for a 23.5GB download.

     

    Our LUA had been stable for over a year until May, and we're firefighting disk space issues since until we can get extra storage allocated.

    It would also be useful in the LUA if instead of being able to automate a purge only once per day, it could be configured to trigger after a successful download & distribution.

    Has this issue been seen elsewhere?

     

    Thank you!



  • 2.  RE: LUA & definition sizes - any recent changes?

    Posted Jun 22, 2016 04:29 AM

    Hi KevinMcL,

    Thanks for the post - I understand that recent LUA downloads have been bigger than a month ago, particularly with the "delta" files. I understand that this is a temporary increase, oddly enough due to the same change in technology which results in smaller long-term files.  The increase is down to a change-over to Core 1.5 definitions.

    FAQ: Core 1.5 definitions for Endpoint Protection 12.1
    http://www.symantec.com/docs/TECH230149
     

    I have heard that once the change is complete (a month for the next hub download, in the LUA terms) the downloads and storage/bandwidth demands will be back to normal size.

    Please do keep this thread up-to-date with your progress, or mark it solved if you have received your answer!

    With thanks and best regards,

    Mick