Hi, The SEPM server for one of our customers is sending out about 7-8 Mbps of bandwidth for a couple of hours now. It is not one client that is pulling that much bandwidth but about 7 or 8 clients pulling at once.  It varies between 10 Mbps and 30 Mbps. It is all being used in the Apache Webserver and I have tried to restart the Symantec Webserver service and the Symantec Manager server but when the service comes back up and all clients reconnect, it starts again. I have also changed communication setting from Push Mode to Pull Mode.

If it's Identify 7-8 Client you can try to clear old defination may be issue will resolved.

How to clear out corrupted definitions for a Symantec Endpoint Protection client manually

How to Troubleshoot High Bandwidth usage issues in Symantec Endpoint Protection

SEPM & SEP Client bandwidth troubleshooting

https://www-secure.symantec.com/connect/articles/sepm-sep-client-bandwidth-troubleshooting

We are not using any GUP's since we only have about 500 client machines. Also, these 7-8 machines are different and not the same 7-8 machines. Every hour these machines change and new machines start pulling bandwidth.

I will go through the Bandwidth troubleshooting article and will update here.

For 500 clients, a GUP would help quite a bit. Can you see how much data they're pulling? Is it a full def set? How many revisions are you storing on the SEPM?

They currently only have 3 client revisions. Also, the issue seems to be fixed for now, and hadn't appeared before.

3 revisions is only 1 day. If clients connect who are farther out of date, they will download a full set.

Have you considered setting it higher to something like 10 or more, depending on how many mobile clients you have?