Video Screencast Help

SEP11 questions

Created: 18 Jun 2012 • Updated: 19 Jun 2012 | 2 comments
This issue has been solved. See solution.

Dears, greeting!

If someone would help me with my question I will much appreciate.

The questions are:

  1. What network load is seen during:
  • Antivirus updates uploading to the client side;
  • Policies update uploading to the client side (all SEP components are used).
  1. What HW requirements do we have in case of real system that should manage more than a thousand clients in real-time? I think here mostly the question about DB.

Thanks a lot in advance.



Comments 2 CommentsJump to latest comment

Mithun Sanghavi's picture


The following are estimates of the size of packages that are sent between the Symantec Endpoint Protection client and manager:
  • Heartbeat (with no updates to be exchanged) - When there is no traffic to be exchanged (i.e. no profile to download and no logs to update) then the heartbeat will be between 2 and 3 KB/s.
  • Policies (i.e. AV/AS, Firewall, OS Protection, Host Integrity) - Typically varies between 20 and 80 KB, but can increase if detailed rules are included, or OS protection templates are used. Generally, once you set your policies to suit your network needs, you do not modify them on a regular basis.
  • IPS Signature Updates - Files range between 50 and 100 KB. Symantec supplies updates approximately every quarter unless a specific threat or vulnerability needs to be addressed.
  • AV Signatures - 50 to 100 KB daily for clients, assuming that the signatures are updated successfully every day.
  • Logs - Logs are compressed at the client before they are uploaded to the Symantec Endpoint Protection Manager. Approximately, 800 log entries take up 1KB of file space.

Reference :

All the Answers to your queries would be answered in the Articles below:

1) Sizing and Scaling Guidelines Document

2) Disk Space Management procedures for the Symantec Endpoint Protection Manager

3) Microsoft SQL Server requirements for Symantec Endpoint Security 11.0 and Symantec Network Access Control 11.0

4) How to use SEPM Database sizing tool

Hope that helps!!

Mithun Sanghavi
Associate Security Architect


Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Kolacha1's picture

Thanks a lot for detailed answer! This info is more then enough.