Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

SEPM Backend = 12.1, Clients = 11.x GUP traffic - aprox 112MB?

Created: 30 Nov 2012 • Updated: 06 Dec 2012 | 12 comments
This issue has been solved. See solution.

Hi guys,

We are in the middle of an upgrade.  The backend has already been upgraded to 12.1 and we are now planning the client rollout.

We have noticed that traffic between the SEPM > GUP at some sites, during def upgrades is well voer 100MB (approximately 112MB)

I seem to remember the full def package is something like 60MB and deltas are 100KB (ish) each - is this still the case?

Would there be anything in this mixed configuation that would generate extra traffic, as it seems quite high or is this the full package size?

Regards

Discussion Filed Under:

Comments 12 CommentsJump to latest comment

.Brian's picture

Sounds about right, I've seen it range anywhere from 130-200MB for a full defintion.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Davinci_uk's picture

Thank Yuo guys, after full package, should clients just get deltas from SEPM or only deltas from GUP?

Chetan Savade's picture

Hi,

If you are sending package with latest definitions then clients just get deltas from SEPM or only deltas from GUP.

If client requested delta is not available on the SEPM then full.zip will be requested.

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

Davinci_uk's picture

a-ha!  Thank you!

Last oine - are v11 and v12 def sizes different or the same (approx?)

Mithun Sanghavi's picture

Hello,

Yes, the def. updates size for SEP v. 11 and SEP 12.1 are different and so the revision numbers.

I would say delta's may not have much of a difference.

Check these sites - 

For SEP 12.1 RU2

http://www.symantec.com/security_response/definiti...

For SEP 12.1

http://www.symantec.com/security_response/definiti...

For SEP 11.x (32 bit)

http://www.symantec.com/security_response/definiti...

For SEP 11.x (64 bit)

http://www.symantec.com/security_response/definiti...

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

.Brian's picture

Yes, they should still be about same size.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

pete_4u2002's picture

you can enable sylink log and check the size of the definition download.

Mithun Sanghavi's picture

Hello,

Could you check the Log.liveupdate (incase of SEP 11.x) and Log.lue (incase of SEP 12.1)

Log.liveupdate could be found under -

Windows 2003: C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate
Windows 2008: C:\ProgramData\Symantec\LiveUpdate

whereas,

Log.lue could be found under -

On Windows XP and Windows server 2003:
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\<silo_id>\Data\Lue\Logs
On Windows Vista, Windows 7, and Windows Server 2008:
C:\Program Data\Symantec\Symantec Endpoint Protection\<version number>\Data\Lue\Logs

Look for "estimated file size" and This file size will indicate the total package size that was requested from the SEPM.

NOTE: The value would in bytes, so if full content update will be around 77 MB (77,000,000 bytes).

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

SOLUTION
Davinci_uk's picture

We are seeing a situation that if the GUP is down for whatever reason the clients will get the full package from SEPM.

I am narrowing this down, if it happens all the time, but where are the retention settings configured? In the LU policies?

pete_4u2002's picture

SEPM contnet revision retention should be increased if the clients are getting full definition.

check the SEPM revision content retention

You can find this setting under Admin --> Servers --> (Local Site) --> Edit Site Properties -> LiveUpdate --> Disk Space Management for Downloads

Davinci_uk's picture

Thanks, so its actually around 77MB - not 100-200MB!!

arrggh :-)

Will check the logs you suggest. Thank Yoo Very much.