Endpoint Protection

Hi All,

I've ben told by the Symantec Enterprise support team during Webex session that installing SEPM v 12.1 RU 1 and LUA 2.3.1 is not supported ?

What is the actual issue ?

because previously since SEPM v 11.0.4 and LUA 2.2.9 it has been installed and work just fine, plus I can just open less firewall port to the internet once rather than in another server, not to mention another Windows Server licensing as well.

Installing LiveUpdate Administrator (LUA) and Symantec Endpoint Protection Manager (SEPM) on the same physical computer is not supported, nor recommended. This includes installing them to different virtual machines on the same physical computer.

In most environments, it is recommended to update clients using the built-in functionality of the SEPM instead of installing an additional LUA server just for content updates. The SEPM is capable of providing smaller, more efficient update packages for clients and does not require additional configuration or management to do so

http://www.symantec.com/business/support/index?page=content&id=TECH105076

@pete_4u2002

Interesting that this includes two VMs on the same physical tin. My thinking is that this could be DB related and due to heavy disk IO?

Unfortunately, even your linked article does not explain WHY? I've never seen that question answered.

Correct Ian,

That is what I'd like to know, the strong reason to do it is that all of my SAVFL (SEP for Linux) must use LUA in order to get the AV definitions update.

The two products contest for teh same resources- space, bandwidth, CPU, and especially Java Virtual Memory.  Expect random failures from both SEPM and LUA if you have them on the same machine.

Thumbs up to Ian and Mick2009 !

yeah, its becuase of the resource issue, it is not recommended to have both on same server.

Thanks Mick,

The LUA server in this case only push the update to 15- 25 Linux servers and that was it, so only the internet bandwidth could be the bottlenect intermittently I guess.

if that is the case then I can live with that as it is not a big problem for now.

note taht when SEPM is loaded and at the same time when LUA schedule download , because of I/O there might be failure. I would still say on different server

Well in that case the last resort is to schedule the download to not occuring the same hours.