Video Screencast Help
Search Video Help Close Back
to help
Not able to make it to Vision this year? Get a sampling in the Best of Vision on Demand group.

SEP 11.0.6000.550 taking up too much space! Upgrade? What else?

Created: 04 Mar 2011 | 33 comments
zackherman's picture
0 0 Votes
Login to vote

Hello all..

My company is runnnig 11.0.6000.550.. We have it on a 2008 server with two drives, a 20gb (main, installed here) and a 100gb.

It somehow filled up the main drive and there's only 16MB left on it.  We thought we set it up to only write files to the 100gb.

We have it running on about 150 clients.

Here are my questions:

Is it supposed to fill 20GB?

We are planning to upgrade, will this fix this? and what's the latest version?

We are going to keep it on this server, so what's the best plan of upgrading?

Thanks,

Zack

Comments

Chetan Savade's picture
04
Mar
2011
0 Votes 0
Login to vote

Hi, Ideally it should not

Hi,

Ideally it should not fill 20 GB space.

Could you please confirm which folder is using more disk space under SEPM directory ? or it's under SEP directory ?

If you are planning to upgrade then upgrade to 11.0.6200.754 i.e RU6 MP2 (most recent built)

Thanks and Regards, 

Chetan Savade

Technical Support Analyst,

End Point Security, Enterprise Technical Support

zackherman's picture
04
Mar
2011
0 Votes 0
Login to vote

Windows\assembly 1.27

Windows\assembly 1.27 GB

Windows\System32 2.32 GB

Windows\SysWOW64 852MB

Windows\Temp 3.39GB

  • Windows\Temp\scm-ui.err 3.18 GB
Chetan Savade's picture
04
Mar
2011
0 Votes 0
Login to vote

Hi, Also could you please

Hi,

Also could you please confirm how much space is being used by SEPM and SEP folders?

Thanks and Regards, 

Chetan Savade

Technical Support Analyst,

End Point Security, Enterprise Technical Support

zackherman's picture
04
Mar
2011
0 Votes 0
Login to vote

I'm not sure what you mean or

I'm not sure what you mean or how to do this, sorry..

Chetan Savade's picture
04
Mar
2011
0 Votes 0
Login to vote

Hi, Go to C drive --> Program

Hi,

Go to C drive --> Program Files --> Symantec --> Right click on Symantec End point protection manager --> Click properties & check the size of folder.

Go to C drive --> Program Files --> Symantec --> Right click on Symantec End point protection --> Click Properties & check the size of folder

Thanks and Regards, 

Chetan Savade

Technical Support Analyst,

End Point Security, Enterprise Technical Support

zackherman's picture
04
Mar
2011
0 Votes 0
Login to vote

There is only LiveUpdate in C

There is only LiveUpdate in C Program Files Symantec which is 161MB

On the secondary drive there is E:\Symantec\Symantec Edpoint Protection Manager\ (only folder in dir) which is 4.24GB

sandra.g's picture
04
Mar
2011
0 Votes 0
Login to vote

So you do not have a SEP

So you do not have a SEP client on this server? Definitely not recommended. The SEPM provides no protection.

Do you see anything under C:\Program Files\Common Files relating to Symantec? Are there other Symantec folders on E:?

sandra

Symantec Endpoint & Mobility Group / Information Development
Don't forget to mark your thread as 'solved' with the answer that best helped you!
 

zackherman's picture
04
Mar
2011
0 Votes 0
Login to vote

I do (did) not have it on the

I do (did) not have it on the server.  Installing now (update: it failed!)

I don't see anything that looks like it's used by symantec, but I'm just going by filen ame..

The E drive only has Symantec folder in it

The Symantec folder only has Symantec Endpoint Protection Manager in it

From there there are a few folders (ASA, bin, data, db, Inetpub, jdk, Php, Server Private Key Backup, tomcat, Tools) and some files..

Chetan Savade's picture
07
Mar
2011
0 Votes 0
Login to vote

Hi, Space used by Symantec

Hi,

Space used by Symantec folders (SEPM & Live update) is quite normal.

As per your comment Windows\Temp\scm-ui.err is using almost 3.18 GB, try to delete temp files. 

Check size of hidden files on C drive.

Thanks and Regards, 

Chetan Savade

Technical Support Analyst,

End Point Security, Enterprise Technical Support

zackherman's picture
08
Mar
2011
0 Votes 0
Login to vote

I was looking at all files

I was looking at all files and folders (including hidden).  Do I delete scm-ui.err?

Chetan Savade's picture
08
Mar
2011
0 Votes 0
Login to vote

Hi, Yes you can delete

Hi,

Yes, you can delete scm-ui.err.

Also make sure SEPM is not set to finesh level. You can check by accessing following path

C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\etc\conf.properties

At the end of file make sure "scm.log.loglevel=FINEST" sentence is not written, if it's present remove that sentence.

Thanks and Regards, 

Chetan Savade

Technical Support Analyst,

End Point Security, Enterprise Technical Support

zackherman's picture
08
Mar
2011
0 Votes 0
Login to vote

I don't have those folders..

I don't have those folders.. As stated above I tried to install the client on this server and it failed..

 

Also, scm-uii.err, I can't delete it.. Do I have to stop services or something?

 

Thanks

Chetan Savade's picture
08
Mar
2011
0 Votes 0
Login to vote

Hi, In your case it is

Hi,

In your case it is on

E:\Symantec\Symantec Endpoint Protection Manager\tomcat\etc\conf.properties
 
Yes you will have to stop the service before deleting it.
 
Even after stopping service if you could not delete then try rename it and then delete it.

Thanks and Regards, 

Chetan Savade

Technical Support Analyst,

End Point Security, Enterprise Technical Support

zackherman's picture
09
Mar
2011
0 Votes 0
Login to vote

I deleted that temp

I deleted that temp file..

also,

That line is not anywhere in conf.properties

 

Thanks,

Zack

Jason1222's picture
04
Mar
2011
0 Votes 0
Login to vote

You can try

Open Endpoint Protection Manager

Click Admin

Click Servers

Click on Local Site, not your server.

Click edit Site Properties

Click LiveUpdate Tab

 

At the bottom, Number of content revisions to keep.  Change this value to something small(er).  Like 3 or 5.

You should probably remove the files under  the \content directory as well.  This should already free up your space and limit it in growth...

zackherman's picture
04
Mar
2011
0 Votes 0
Login to vote

I just checked it and it has

I just checked it and it has already been set to 3

Kurt G.'s picture
04
Mar
2011
0 Votes 0
Login to vote

Is this the SEPM or a SEP client?

Also as Chetan mentioned, what is the directory that you are seeing the disk space utilization?

You also mentioned "We thought we set it up to only write files to the 100gb." Could you please clarify on this, as far as what you mean by setting it up to only write to the 100gb drive? Is this the drive you installed the product to?

Kurt G.
Symantec Technical Specialist: Endpoint Security Advanced Team

Symantec Corporation www.symantec.com

Symantec Enterprise Support: (800) 342 0652 

zackherman's picture
04
Mar
2011
0 Votes 0
Login to vote

Not too sure, my boss told me

Not too sure, my boss told me he had set it up to only write files on the 100GB

We installed on the main drive (20GB)

He said he set it up to write files on teh secondary drive (100GB)

Mithun Sanghavi's picture
04
Mar
2011
0 Votes 0
Login to vote

Recommended.

Hello,

It is recommended to upgrade the Symantec Endpoint Protection RU6 (11.0.6000) to Symantec Endpoint Protection RU6a (11.0.6005) and beyond.

The RU6 version had 2 Bugs which were fixed in Symantec Endpoint Protection RU6a (11.0.6005) and many other in the latest version.

Check the Release Notes:

Release notes for Endpoint Protection and Network Access Control 11

http://www.symantec.com/business/support/index?page=content&id=TECH103087&actp=search&viewlocale=en_US&searchid=1299256540097

In your case, the first thing, you would have to check which place the space is getting consumed more?

Let me know and I will assist you with steps on how to get the space freed up.

 

In your case,  you would have to Migrate From Symantec Endpoint Protection 11.0.6000 (RU6) to Symantec Endpoint Protection 11.0.6200 (RU6 MP2)

http://www.symantec.com/business/support/index?page=content&id=TECH145428&actp=search&viewlocale=en_US&searchid=1293479302456

Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | SCTS | ITIL v3

Follow me on Twitter: @mithun_sanghavi

Don't forget to mark your thread as 'SOLVED' with the answer that best helped yo

sandra.g's picture
04
Mar
2011
0 Votes 0
Login to vote

Migration Path

Actually, that is incorrect. If he is at 11.0.6000, he can go directly to RU6 MP2. RU6 and RU6a are functionally equivalent as major builds.

From the RU6 MP2 migration document:

Migration paths
Symantec Endpoint Protection 11.0.6200 (RU6 MP2) can migrate seamlessly over the following:
- Symantec Endpoint Protection 11.0.6000.550 (RU6), 11.0.6005.562 (RU6a) and 11.0.6100.645 (RU6MP1).

sandra

Symantec Endpoint & Mobility Group / Information Development
Don't forget to mark your thread as 'solved' with the answer that best helped you!
 

Mithun Sanghavi's picture
04
Mar
2011
0 Votes 0
Login to vote

Thank you

Hello Sandra,

Thank you very much for pinpointing that.

That helps a lot. Thanks again. :)

Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | SCTS | ITIL v3

Follow me on Twitter: @mithun_sanghavi

Don't forget to mark your thread as 'SOLVED' with the answer that best helped yo

sandra.g's picture
04
Mar
2011
0 Votes 0
Login to vote

:)

No problem--happy to help cool

sandra

Symantec Endpoint & Mobility Group / Information Development
Don't forget to mark your thread as 'solved' with the answer that best helped you!
 

zackherman's picture
08
Mar
2011
0 Votes 0
Login to vote

I'd like to upgrade to the

I'd like to upgrade to the newest build. Is this RU6 MP2?

 

Thanks

Brian81's picture
08
Mar
2011
0 Votes 0
Login to vote
Ryan_Dasso's picture
04
Mar
2011
2 Votes +2
Login to vote

Use this...

... to find what's using your disk space: http://windirstat.info

AravindKM's picture
07
Mar
2011
0 Votes 0
Login to vote

I think it is better to move

I think it is better to move your content folder to secondary drive.For this follow this KB

How to use a new Drive/Partition to host the Symantec Endpoint Protection content directory without reinstalling

http://www.symantec.com/business/support/index?page=content&id=TECH103808&locale=en_US

If yor Data base is in C move thant also to secondary drive.Refer this KB

Best Practices guide for moving the Symantec Endpoint Protection Manager SQL Server database from one drive to another on the same machine

http://www.symantec.com/business/support/index?page=content&id=TECH106213&locale=en_US

Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind

zackherman's picture
09
Mar
2011
0 Votes 0
Login to vote

That folder is already on the

That folder is already on the second drive...

 

So what you guys are telling me is the primary drive being almost 20GB is normal?

Ryan_Dasso's picture
09
Mar
2011
0 Votes 0
Login to vote

Not usually...

Depending on your settings, of course, the amount of space used by SEP will vary on a case by case basis. 

Download, install and use the tool that I posted earlier (WinDirStat) and give us a brief listing of directory paths that are more than 1 GB in size... that should get us started in the right direction and help us know whether or not the space usage is normal, or not.

zackherman's picture
09
Mar
2011
0 Votes 0
Login to vote

Ok so.. C:\Windows\winsxs\ is

Ok so..

C:\Windows\winsxs\ is 6.2 GB but nothing in there is more than a GB

C:\Windows\assembly\ is 1.3GB

C:\pagefile.sys is 2.3GB

C:\hiberfil.sys is 2.0GB

- That's it for the main drive, the one I'm concerned with - but...

 

 

E:\Symantec\Symantec Endpoing Protection Manager\Inetpub\content\ is 1.8GB

E:\Symantec\Symantec Endpoing Protection Manager\db is 1.3GB

zackherman's picture
12
Mar
2011
0 Votes 0
Login to vote

Does that seem normal? Or can

Does that seem normal? Or can I get rid of something so I can install the client..

zackherman's picture
11
Mar
2011
0 Votes 0
Login to vote

What is the file name and

What is the file name and what's the correct path ot it?!?

The downloads are a bit confusing..

 

Is this it?? Symantec_Network_Access_Control_SE_11.0.6_MP2_AllWin_EN.zip

 

If not could someone tell me how to find it?

 

Thanks

sandra.g's picture
11
Mar
2011
0 Votes 0
Login to vote

In Fileconnect

Use the filters to select Endpoint Protection as the product type. It should be clearer then.

sandra

Symantec Endpoint & Mobility Group / Information Development
Don't forget to mark your thread as 'solved' with the answer that best helped you!
 

AvinashBharatharaj's picture
14
Mar
2011
0 Votes 0
Login to vote

The correct file to download...

The correct file to download for you would be :

Symantec_Endpoint_Protection_11.0.6_MP2_Xplat_EN_DVD.zip

 

Note: To check if your symantec folders are taking more space that actually required, please check the size of the following folders :

For 32bit OS:

1. C:\Documents and Settings\All Users\Application Data\Symantec - if this folder size is too high (approx. above 250-300MB) then find out which folder inside of it takes up the maximum space.

2. C:\Program Files\Common Files\Symantec Shared - if this folder size is too high (approx. above 510-550MB) then find out which folder inside of it takes up the maximum space.

For 64bit OS:

1. C:\Program Data\Symantec

The other 2 folder size that you mentioned :

E:\Symantec\Symantec Endpoing Protection Manager\Inetpub\content\ is 1.8GB

E:\Symantec\Symantec Endpoing Protection Manager\db is 1.3GB 

is normal.

~Avinash