Endpoint Protection

Hey guys,

 

How can we do this? I'm aware of the Group Update Provider setting to limit the bandwidth. But what if there's no Group Update Provider? Just the SEPM Server and the Client?

 

Thank you,

12.1.6 has an option to stop sending full.zip to clients..other than that you can use apache config file to control bandwidth

Here is the link https://support.symantec.com/en_US/article.TECH201290.html

Symantec Endpoint Protection Bandwidth Control for Client Communication

https://support.symantec.com/en_US/article.TECH201290.html

see below thread

https://www-secure.symantec.com/connect/forums/can-one-throttle-updates-between-gup-and-clients

I'm looking for a Per Group bandwidth control, not for our whole network.

Thanks,

Not possible per group

Do you guys think it's possible to just setup a Group Update Provider, then  set the SEPM Server itself as the Group Update Provider? That way I can use the feature to limit the bandwidth per group?

Not possible per group bandwidth limit

But I can use Group Update Providers then set the SEPM Server as the GUP right? Which means when the  Group Update Provider is on I can then use the Bandiwdth Limit. Right?

Yes that can be done.

Apache is a web server it does not knw about SEPM groups, you can still limit the bw using Ip subnets

you would probably use the BW on low Bw sites not on entire network

ex

MinBandWidth 192.168.1.0/255.255.255.0 1048576 
         # would reserve a minimum of 10 Mbps for full content going to the 192.168.1.0 subnet.
         # After the clients are deployed and updated, comment out this rule.

 

simillarly you can do for other subnets,

I'd just talked to the support it seems like it's not possible. The GUP will only limit the bandwidth from SEPM to GUP Client, so using the SEPM's agent to run as a GUP Client wont even make a difference.

We're looking for a per group approach,.

Not possible as of now ... 

What you want to do is not possible and setting the SEPM as a GUP is not reven receommended. It defeats the purpose since it already provides content.

There is no way to have different throttle the bandwidth used by clients to download policy updates and log submission from clients to SEPM per group. Anyway they are very small in size. The definition updates files are the ones that are sometimes of considerable size.

If you desperately want to throttle the bandwidth, used for DEFINITION download, per group then consider making other servers (or even PC) that are in the same site as the SEPM in to GUPs. Then you can assign one GUP per group and throttle the bandwidth used by each GUP per group (for definition download) in the the GUP policy.

This will help to manage the bandwidth utilized via WLAN links.

Note: In the above case, you cannot have the GUP server with different throttle settings in the same group.