Endpoint Protection

I have 1 main site in the United States and 8 replication sites around the world.  Each of the replication sites has a Riverbed Steelhead installed for WAN optimization.  I have site-to-site VPN connections to each location.

Since my data transmission is already encrypted with site-to-site VPN tunnels, I would like to know if there is a way to turn off encryption and compression in the SEP management console for replication partners.  If I am able to turn off these features, I acan leverage the Riverbeds and cut down the replication time to a few minutes from a few hours.

Has anyone else come across this problem?  As it stands right now, I can see the connection on both the Riverbed in the US and the Riverbed in the remote locations.  However, data reduction is not taking place either due to encryption or compression that is being enabled by SEP.  Any thoughts?

This is for SEP 11.x

Thanks in advance!

Even I would like to know if its possible

First thought was that this isn't possible. I also went through and checked all the docs I could find on the subject, and none of them mention a way to turn the encryption off. However it is hard for me to believe that you will see such a dramatic decrease in replication time (few hours to a few minutes). I will admit I am not familiar with riverbed at all but just looking at their site and video I still have trouble believing the decrease will really be this much. Maybe, and hopefully someone else can answer your question but as far as I know there isn't a way to do what you are describing.

Cheers
Grant-

Depending on your WAN links and client numbers I would decommission all of the replicated sites and install GUP's.
The SEP clients can all communicate directly with a few SEPM's at your head office for logs etc. and get their definitions (majority of traffic) from the GUP's.

You can create groups and have granular admin accounts for local admins if that is a requirement.

Why do you feel you need so many replicated sites?
I avoid them as much as possible!!

cheers

Z

Personally, I dont think this is possible thru the SEPM / SEP. You can try to replicate without the content and packages being replicated across sites, that'll cut down on a lot of traffic either way.

Anyway, now you also have me ears perked up. even I'm interested to know if anyone from Symantec can provide a logical answer to this. Pretty interesting setup related query you have.

Grant,

Thanks for the reply.  I have to admit, I was skeptical of the Riverbed claims as well.  However, after having them in production, the results are real.  If I can send the replications without encryption/compression, the Steelheads will be able to work their magic on the transfer.

If you have remote sites that suffer form slow links, the Steelhead product can improve the quality of life for users in those offices.

-Wes

zer0,

This issue is with the infrastructure for my remote offices.  All of them are in the developing world.  Each office has three major issues:

1) High speed Internet is simply not available.  The majority of my offices are on 512k lines - And this is considered "fast" in the countries where they are located.
2) Frequent power outages - Both for the office and the surrounding infrastructure.
3) The power outages mean loss of Internet connectivity.

Because of #3, I need my local admins to have the ability to manage the SEP clients without relying on an Internet connection.  This means replicating the database to the local offices so they can login to the management console.

If you can suggest a better setup, I am all ears.

Thanks for the reply.

-Wes

That is pretty exciting technology. I have never heard of those kind of speedups! I will have to suggest it to some of the friends I have that do network management. I am sorry I can't be more helpful about disabling the encryption. I looked again and can't find anything, hopefully another Symantec guy can step in to see if there is anything. I will try PMing some of the other techs in the forum to see if they might know a way. Hope it works out

Grant-