Video Screencast Help
Protect Your POS Environment Against Retail Data Breaches. Learn More.

Reducing size of Virus defination for a single host in SEPM 11.x

Created: 02 Oct 2012 • Updated: 02 Oct 2012 | 9 comments

Hi all,

Is it possible to reduce the Virus defination size to keep   for a single host in SEPM 11.x.The path were the Virus definations are stored is

C:\Program Files\Common Files\Symantec Shared\VirusDefs

 

 

Discussion Filed Under:

Comments 9 CommentsJump to latest comment

pete_4u2002's picture

check this article , it is possible

Configuring the number of content revisions kept by the SEP client 11.x

 

http://www.symantec.com/business/support/index?pag...

 

Ashish-Sharma's picture

Check this thread

https://www-secure.symantec.com/connect/forums/change-symantec-endpoint-protection-11x-will-keep-3-definition-2-instead

check this fourms.

https://www-secure.symantec.com/connect/forums/client-virus-definition-revision-numbers

By Default, Symantec Endpoint Protection Manager downloads and keeps 3 Revisions of Virus definition versions in its Repository.

 

Incase if Space is a Concern in Regards to Virus Definitions Folder Size....

1) Login to Symantec Endpoint Protection Manager

2) Click on Admin

3) Go to Servers

4) Right Click on the Local Site

5) Click on Properties

6) Go to the Liveupdate Tab 

Thanks In Advance

Ashish Sharma

 

 

sandra.g's picture

FYI, this is for the SEPM, not the SEP client. He/she wants the number of revisions for the SEP client to be reduced.

sandra

Symantec, Senior Information Developer
Enterprise Security, Mobility, and Management - Endpoint Protection

Don't forget to mark your thread as 'solved' with the answer that best helps you!

Mithun Sanghavi's picture

Hello,

In SEPM 11.x, it is not possible to reduce the Virus definition size to keep for a single host.

I would suggest you to migrate to the SEP 12.1,where you would be able to reduce the Virus Definition limit to 1.

Check this Thread: https://www-secure.symantec.com/connect/forums/virusdefs-folder-size

By Default, Symantec Endpoint Protection Manager downloads and keeps 3 Revisions of Virus definition versions in its Repository.

Configure the Disk space Management for Virus Def.

 

To configure the disk space used for LiveUpdate downloads

  1. In the console, click Admin.

  2. Click Servers and select the site that you want to configure.

  3. Under Tasks, click Edit Site Properties, and then click LiveUpdate.

  4. Under Disk Space Management for Downloads, type the number of content downloads that you want to store.

  5. If you want to reduce the amount of disk space used, uncheck the Store client packages unzipped to provide better network performance for upgrades option. Note: Disabling this option also disables the ability of Symantec Endpoint Protection Manager to construct deltas between content revisions and may adversely affect network performance for updates.

  6. Click OK.

Disk Space Management procedures for the Symantec Endpoint Protection Manager

http://www.symantec.com/docs/TECH96214

Drive Space used by Virus Definitions Updates

http://www.symantec.com/docs/TECH141811

 
Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

hj1979's picture

Agree with Mithun. You can the SEPM 11.x to 12.1 to reduce the size/limit of defintion

.Brian's picture

http://www.symantec.com/business/support/index?pag...

11.x keeps 3 revisions, 12.1 only keeps 1.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Mick2009's picture

Hi vonphenyl,

One important note: if you reduce the number of revisions that the SEPM keeps, you may save Hard Drive space on that server, but you will have larger packages downloaded by the SEP clients (higher network bandwidth consumption).  The more past revisions your SEPM has, the greater number of small "direct delta" definition updates it can build and send to clients.

This white paper has some good info:

Symantec Endpoint Protection (SEP) Sizing and Scalability recommendations
Article:TECH123242   |  Created: 2010-01-16   |  Updated: 2011-12-08   | 
Article URL http://www.symantec.com/docs/TECH123242

Many thanks!
 

 

With thanks and best regards,

Mick

Ashish-Sharma's picture

HI vonphenyl,

Did you have received your answer ?

Thanks In Advance

Ashish Sharma

 

 

Rafeeq's picture

You can control the number of content revisions that the Symantec Endpoint Protection client stores for each content type. Each content type can be configured individually.
Start > Run > regedit > navigate to HKEY_LOCAL_MACHINE\SOFTWARE\SYMANTEC\Symantec Endpoint Protection\Content\ > Open folder with the intended content moniker name > & then depending on version do the following:
A. In Symantec Endpoint Protection 11.0 and MR1, adjust the "CachedEntries" DWORD value to the # of cache content revisions to keep.

B. In Symantec Endpoint Protection MR2 and newer, adjust the "CachedEntriesEx" DWORD value to the # of cache content revisions to keep.