Endpoint Protection

 View Only
  • 1.  SEP in VDI - Quarantine Best Practices

    Posted Oct 03, 2014 01:35 PM

    I'm looking at the best practices regarding SEP and a non-persistent VDI infrastructure. I'm confused how the quarantine will work for those clients. I figured I would have to deploy a central quarantine server, but the article below states that a central quarantine server is not recommended if you have less than 10,000 endpoints.

     

    http://www.symantec.com/business/support/index?page=content&id=TECH104755

     

    So I have two questions. 1) What's the best way to configure the quaratine for VDI clients? 2) Why won't a central quarantine server work well for under 10,000 clients? I believe having the quarantine on a central server will be a great benefit, instead of going to the individual workstations and grabbing the file to analyze.

     

    Thank you!



  • 2.  RE: SEP in VDI - Quarantine Best Practices
    Best Answer

    Posted Oct 03, 2014 01:41 PM

    May want to get more info on this from Symantec themselves. Last I heard this was being phased out....

    Admin guide for it is here:

    http://www.symantec.com/docs/DOC4336

    Also, note, it's not being tested or supported on 64 bit OS.

    As for the 10k limit note, no clue why that says that but I've used thisbefore years ago with less than 10k clients.

     



  • 3.  RE: SEP in VDI - Quarantine Best Practices

    Posted Oct 03, 2014 01:44 PM

    Thanks Brian.