Endpoint Protection

We are planning to put up additional SEP Managers with one database (load balance and failover), endpoints are assigned to specific SEP manager based on regions via management list. The architecture will look like this:

SEP Manager 1 – region1 clients (has internet access for LiveUpdate)

SEP Manager 2 – region2 clients (No internet access)

SEP Manager 3 – region3 clients (No internet access)

GUPS – all site will have gups

My questions:

Liveupdate – Does SEP Managers 2 and 3 get their LiveUpdate content from Manager 1?

Endpoint Content – will endpoints in regions 2 and 3 requiring full content update get it from their assigned SEP Managers?

Thanks!

You can designate one SEPM to download LU content so yes and as long as you correctly setup the MSL, clients will go to their SEPM accrodingly.

About failover and load balancing.

Configuring failover and load balancing for Symantec Endpoint Protection Manager

SEPM 1 will download updates and store it in the DB, since all of them are talking to the same DB, you will see the content on all the three.

Thanks guys!

You're welcome!