Replication sites for computers
Created: 15 Feb 2013 | 7 comments
Hi I have a client that will implement Symatec Endpoint. There have a WAN with 14 remote sites all connected with a 2Mb data link. I will like to implement Replication server or sites so each remote computer look and see for updates and policies is on replication server instead of going to the mail office where the SEPM server is. Can this be done? Thanks.
Discussion Filed Under:
Comments 7 Comments • Jump to latest comment
The Philosophy of SEPM Replication Setup
How replication works
REPLICATION
1) About installing and configuring Symantec Endpoint Protection Manager for replication
http://www.symantec.com/docs/HOWTO26797
Check this video.
https://www-secure.symantec.com/connect/videos/replication-concepts-and-configuration
Check this article.
https://www-secure.symantec.com/connect/articles/replication-and-considerations
Check this thread
https://www-secure.symantec.com/connect/forums/difference-between-replication-and-failover
Thanks In Advance
Ashish Sharma
SEPM Knowledgebase Documents
You could set them up to replicate. You can than also setup a GUP at each remote site to provide contents to clients on each local LAN so they don't have to come back to the SEPM for updates, which will conserve on bandwidth
SEP Knowledge Base
Endpoint SWAT
14 sites is too many. 5 sites can be replicated as per best practies. Suggest to have GUP at other sites.
Cheers!
Pete
Help Link: http://www.symantec.com/business/support/overview.jsp?pid=54619
Hello,
I would try my level best to get things under one umbrella..
There are various ways for Managing SEPM across WAN network.
Before we proceed, please Check this:
Top 10 Symantec Best Practices - Deploying Symantec Endpoint Protection Architecture
http://www.symantec.com/business/support/index?page=content&id=TECH92051
There are many methods. You need to understand what is the soul purpose.
Here are the various ways:
1) Replication - Replicate Sites
http://www.symantec.com/business/support/index?page=content&id=TECH93107
http://www.symantec.com/business/support/index?page=content&id=TECH105928
2) Failover -
Where Symantec Endpoint Protection Manager (SEPM) servers are assigned a priority so that if the primary SEPM goes down, the clients know to contact a secondary SEPM.
About failover and load balancing
http://www.symantec.com/business/support/index?page=content&id=HOWTO26809
About Load Balancing and Failover Clustering in Symantec Endpoint Protection 11.0
http://www.symantec.com/business/support/index?page=content&id=TECH104519
3) Group Update Provider - used for updating SEP clients across sites.
How To Optimize Endpoint Protection for Branch Offices using GUPs, Load Balancing, and Location Awareness
http://www.symantec.com/business/support/index?page=content&id=TECH94122
4) Simple managing multiple SEPM from IE with the help of Dashboard.
How do I access the Symantec Protection Center?
http://www.symantec.com/business/support/index?page=content&id=HOWTO39469
Logging on to the Symantec Protection Center Dashboard in Symantec Endpoint Protection RU6
http://www.symantec.com/business/support/index?page=content&id=TECH131684&locale=en_US
How to delete a product from RU6 Dashboard/portal?
https://www-secure.symantec.com/connect/articles/how-delete-product-ru6-dashboardportal
Also, check this:
Multiple office WAN infrastructure best practices
https://www-secure.symantec.com/connect/forums/multiple-office-wan-infrastructure-best-practices
Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | MCTS | STS | ITIL v3
Twitter: @mithun_sanghavi
Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<&a
Thanks for the information, I think that for what we need using the GUP should do the work. I will check the information on how to setup up.
Hi,
How to: Setup a Group Update Provider (GUP)
http://www.symantec.com/business/support/index?pag...
Group Update Provider: Sizing and Scaling Guidelines
http://www.symantec.com/business/support/index?page=content&id=TECH95353
Best Practices with Symantec Endpoint Protection (SEP) Group Update Providers (GUP)
http://www.symantec.com/business/support/index?page=content&id=TECH93813
Configuring the Group Update Provider (GUP) in Symantec Endpoint Protection 11.0 RU5
http://www.symantec.com/business/support/index?pag...
Video’s
https://www-secure.symantec.com/connect/videos/group-update-providers-part-1
https://www-secure.symantec.com/connect/videos/group-update-providers-part-2
Replication with WAN performance is a bit dodgy.
Replication is fair especially with big sites. If you have 14 remote sites where finally there are few clients (I mean less than 1.000), you could forget replication completely.
Replication for small sites is absolutely not fair. Do not forget that replication can use somewhat bandwidth and especially the first one as it's all the db, group and policies which are getting replication.
Even the first replication may completely fail with WAN performance. A short time out may make the replication impossible to be completed.
For this reason I join at 100% the advice from Brian81. Setting GUP is absolutely the best way to go for your situation.
Configuring the Group Update Provider (GUP) in Symantec Endpoint Protection 11.0 RU5 and later
=> http://www.symantec.com/docs/TECH96419
Kind Regards,
A. Wesker
Would you like to reply?
Login or Register to post your comment.