Endpoint Protection

 View Only
Expand all | Collapse all

Replication across WAN

  • 1.  Replication across WAN

    Posted Sep 02, 2009 12:36 PM
    I have installed a replication server at location B and pointed the Clients from Location B to Server B and it works fine. I am tyring to install a 3rd repliation Server in Location C. When I am at the replication part I have the screen "The Database is being created and initalized. This will take a few Minutes."  i left that overnight and it was timed out this morning. I have since re-installed the End Point and am waiting for the replication to finish it has been going probally almost a hour now. Any ideas why the replication is not taking place. Both servers can ping each other and have no problem comunnicating. The reponce time is anywhere from 120 MS to 200 MS from location C and 40 - 100 MS from Location B.


  • 2.  RE: Replication across WAN

    Posted Sep 02, 2009 12:48 PM
    Please read the
    Top 10 Symantec Best Practices - Deploying Symantec Endpoint Protection Architecture

    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2009012721190648

    Take note of  #8 on the list.

    Regards,
    Thomas


  • 3.  RE: Replication across WAN

    Posted Sep 02, 2009 12:49 PM
    It could caould be because of the Bandwidth issue.
    Also how much is the szie of database that you are trying to replicate.


  • 4.  RE: Replication across WAN

    Posted Sep 02, 2009 01:16 PM
    If this is not recomended what the best way to handle about 18 sites, We want a management server at the  sites that handle the respective clients so that the clients do not comunicate over the LAN. There are not many clients at each site the most is the main location of maybe 200 client all the other locations are under 50 and many under 20.


  • 5.  RE: Replication across WAN

    Posted Sep 02, 2009 01:16 PM
    The best option for you will be to use GrouP Update Providers

    You can check this document

    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008070715030248

    Or you can go through the Administartion Guide in Cd1 & read about Group Update Provider.



  • 6.  RE: Replication across WAN

    Posted Sep 02, 2009 01:17 PM
    See if this is helpful.

    How to: Setup a Group Update Provider (GUP)

    http://service1.symantec.com/support/ent-security.nsf/docid/2008052712534748


  • 7.  RE: Replication across WAN

    Posted Sep 02, 2009 01:23 PM
    So I just set one location to point to the server out there that has the client on iby following

    Solution:
    How To: Setup a GUP:
    1. On the console, click Policies.
    2. In the View Policies pane, click LiveUpdate.
    3. In the LiveUpdate Policies pane, on the LiveUpdate Settings tab, under Name, select the policy to edit.
    4. In the Tasks pane, click Edit the Policy.
    5. In the LiveUpdate Policy window, click Server Settings.
    6. On the LiveUpdate Server tab, under Local Network server Option, check Use the Group Update Provider as the default LiveUpdate server.
    7. Click Group Update Provider.
    8. In the Group Update Provider dialog box, in the Host box, type an IP address or a host name.
    9. In the Port box, accept or change the default, and then click OK.
    Is there anything I have to do on the Server in the remote location?


  • 8.  RE: Replication across WAN

    Posted Sep 02, 2009 01:43 PM


  • 9.  RE: Replication across WAN

    Posted Sep 02, 2009 02:19 PM
    Please make sure that port 2967 is opned and not blocked as this is the port that  is used by the GUP


  • 10.  RE: Replication across WAN

    Posted Sep 02, 2009 02:41 PM
    I can telnet to that port so it should be open, the system that I set as the GUP has no firewall installed. But in the Symantec\Symantec Endpoint Protection\SharedUpdates there are no updates. I have followed the links and changed the policy is there a delay in the updates.


  • 11.  RE: Replication across WAN
    Best Answer

    Posted Sep 02, 2009 03:31 PM

    The SharedUpdates directory will not immediately be populated, but rather, when the GUP receives a request it checks to see if the requested file(s) are present in the local cache. If it is, it responds to the request with the file. If it isn’t, then GUP holds the pending request, and reissues the same GetLUFile SyLink request to the server. When that file arrives it is added to the GUP cache.



    Title: 'Troubleshooting the Group Update Provider (GUP) in Symantec Endpoint Protection'
    Document ID: 2008040113243148
    > Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2008040113243148?Open&seg=ent