Endpoint Protection Small Business Edition

i monitor some client download full content is arround ~500MB , so if i change the number of content revision to keep from 30 to 15 ( keep 5 day ) . Is It the full content file that client download will decrase a half ( arround < 300MB ) , pls correct me if i wrong . If true so the frequency of client download full content will incrase , right ?

If the clients are off longer than the 5 days, they cannot get a delta so when they come back on, they will download the full set.

You're best off setting it so when they go offline, they go out to Symantec LiveUpdate for updates.

When will a client download a full definition set from a Symantec Endpoint Protection Manager or Group Update Provider?

dear Brian

if decrease the number of revision content , it will make the full content file smaller , is it ?

You need to increase the number of content revisions that the SEPM keeps.

Decreasing the number will only make clients who have been offline for a longer period of time pull a full def set when they come back on.

If you increase it, chances are clients will not need a full def set when they come back, depending on how long they've been offline.

A full set is around 500MB.

because my client download via WAN so i just want to decrease MB of full set , from 500MB to 200MB will bestter , can you show me how to do that ?

another way , i had query full content by SQL query

SELECT SUM(DATALENGTH(CONTENT))/1024.0/1024/1024
AS "content size (GB)" FROM BINARY_FILE
WHERE TYPE='DownloadedContentFile'

the result is 1GB  , is it this is the full content that client download ? very big 

 

You can't decrease the size of the full def set. Those will always be a set size. What you need to do is increase the amount of content revisions stored so when a client has been offline for some time, it can get a delta instead of pulling down a full.

ok  , i got it , thks

 

This query determines the content saved in the database (and only there). 1 GB is rather low. As Brian says, try to increase the number of content versions on the SEPM. If I remember correctly, you have a big environment (8,000 clients?) and SEP 12.1.5, so you should save at least the Symantec default value of 90 versions.

The value must be changed here:

Admin > Servers > Local Site > Edit Site Properties > LiveUpdate > Disk Space Management

SEP 12.1.5 has a far better disk space management than previous versions, so you can save more content versions on your SEPM.

##Edit

See this KB article:

Disk space management for Endpoint Protection Manager

Article:TECH96214

|

Created: 2009-01-17

|

Updated: 2014-11-20

|

Article URL http://www.symantec.com/docs/TECH96214

dear Greg 12

Thank you, i will check it.

But why Symantec make the full content grow so big , from 2010 i remember just near 200MB and now is near 500MB , in my big envinoment that is impossible . why and why ? 

The number of threats continue to grow year to year. So signatures continue to increase. Until Symantec finds a different way to address this, expect the size to grow.

why another old signatures of old virus never appear like old windows ( win 98, Win Me ...) . Did symantec delete that signatures?

Where do you see this?

oh , sorry , My mean is Did symantec have delete old signatures or still keep it ?

They would be purged

thks brian