Endpoint Protection

Dear Support,

In one of our client place we upgraded the SEPM AV server from 12.1.1 RU1 to 12.1.3 since then we are facing MPLS bandwidth choking utilizing full network traffic, please let us know the what is causing the issue.

Regards,

Nagaraj Kukke

is it on the SEPM port?

have you configured GUP?

are the machines configured for pull mode or push mode?

SEPM server it self causing the issue if we shutdown the server there is no network issue.

GUP is not configured 

machins are configured in push mode.

can you check if GUP configuration reduces the bandwidth?

Also have you enabled autoupgrade of the agents from SEPM?

as it was working good when it was 12.1 RU1 after we upgrade to 12.1 RU3 many issues started arraising and now total network will down if we put on the SEPM server.

can you check if it's the content or package that is the cause for this issue?

we had issue related to content which was downloading and c drive was full that issue was resolved and now only internet and MPLS network bandwidth is fully used and net is totally down if we stop the SEPM services then everything comes to normal 

check the tomcat logs. Configure GUP and let us know if it addesses your issue.

after all R&D i found we are facing bandwidth issue because of upload from SEPM server..

is there any way to limit the upload of sep content distribute to the client systems please let us know.

what do you mean by upload?

if content updates to remote clients, configure GUP.

Please find the attached screenshot document of download and upload of the network in indivisual when SEPM serveces started and services stopped bandwith utilise in the network

Attachment(s)

sepm bandwidth.doc   252 KB 1 version

You really should consider adding GUPs. This will reduce the bandwidth load greatly.

Same issue found at my side....still can't resolve..

dear nagaraj,

If you got any solution kindly revert so that can i take some action.

All the GUP Server live & update properly ...still facing same issue....

can you check if auto upgrade feature is enabled?

also have you configured LU policy to bypass GUP?

I upgraded my SEPM from 12.1.2 and began to see the same issues with my MPLS network being flooded with traffic from SEPM, even though I had not assigned client update packages to my clients yet for the new SEP version. I used a QOS policy on the 2008 Server hosting SEPM to limit it's bandwidth consumption for now, but I have a request in to Symantec tech support to resolve the issue long term.

GUP is did not fixed the issue..

as i have planed to install one more SEPM server to minimise the issue immidiatly, parallelally working to find the resolution

i found one small change that application monitoring option which is enabled in the external communication setting in the upload caption, this perticular thing will keep monitor on all application so there is more upload bandwidth in the MPLS network

Has anyone found a fix for this?

I'm having the same issue.  SEPM 12.1.2 server and when clients download definitions from the server, network utilization sky rockets.  Disabled the SEPM service resolves network issue.  Network monitoring shows high traffic statistics between clients and SEPM on port 8014.  One thing we've noticed is that delta files are not showing up on SEPM so clients are downloading the full 270MB definition file every time they poll the server for new defs.

Any help is greatly appreciated.

No one have this solution ..may bugs in version cause i log case at last 3-month & still issue persist...

Support hasn't provided any answers?!

I second the motion. I am calso facing the same issue. We need to resolve this issue. Thanks!