Endpoint Protection

 View Only
  • 1.  SEPM update topology

    Posted May 29, 2014 12:54 AM

    Hi

    I have a SEPM 12.1.4xxxx with approx 10 clients at site A and 10 clients on site B. The sites are interconnected via a 4mb WAN link. There is a Windows Server at site B. The Windows clients on site B aren't joined to the domain.

    To minimise traffic between sites whats the best way to configure the update topology?

    Would setting up a GUP on the server in site B be the most effective way to miminise traffic as well as minimise administrative overhead?

    If I install a GUP at site B do clients ever need to talk to the SEPM? How much data would be transferred from the clients at Site B and the SEPM?

    And lastly, how much data is transferred regularly between the SEPM or GUP and the clients? Delta update changes or full updates?

    Many thanks

     

     



  • 2.  RE: SEPM update topology
    Best Answer

    Posted May 29, 2014 01:00 AM

    To minimise traffic between sites whats the best way to configure the update topology?

    You can configure GUP.

    Would setting up a GUP on the server in site B be the most effective way to miminise traffic as well as minimise administrative overhead?

    Minimizing network traffic from client-to-server communications in Symantec Endpoint Protection Manager 12.1

    http://www.symantec.com/business/support/index?page=content&id=TECH164737

    If I install a GUP at site B do clients ever need to talk to the SEPM? How much data would be transferred from the clients at Site B and the SEPM?

    How much bandwidth is used by a SEP Client in One day ?

    https://www-secure.symantec.com/connect/articles/how-much-bandwidth-used-sep-client-one-day

    And lastly, how much data is transferred regularly between the SEPM or GUP and the clients? Delta update changes or full updates

    Delta updates..

    When will a client download a full definition set from a Symantec Endpoint Protection Manager or Group Update Provider?

    Article:TECH131528 | Created: 2010-01-06 | Updated: 2013-09-24 | Article URL http://www.symantec.com/docs/TECH131528

    With default LiveUpdate content revision settings configured within the Symantec Endpoint Protection Manager, clients are downloading full definition updates instead of delta updates

    Article:TECH94916 | Created: 2009-01-07 | Updated: 2011-12-13 | Article URL http://www.symantec.com/docs/TECH94916


  • 3.  RE: SEPM update topology

    Posted May 29, 2014 01:01 AM

    It will move the delta defintion on GUP Server on daily bases. All of the B site clients connect on there for definition.

    For the policies and chnages all client will connect to SEPM.



  • 4.  RE: SEPM update topology

    Posted May 29, 2014 01:17 AM

    Since you have only 10 clients in each site, Two different independent SEPMs would do the job...



  • 5.  RE: SEPM update topology
    Best Answer

    Posted May 29, 2014 05:20 AM

    To minimise traffic between sites whats the best way to configure the update topology?

    Promote the server at site B to be GUP

    Would setting up a GUP on the server in site B be the most effective way to miminise traffic as well as minimise administrative overhead?

    The GUP proxies only the definitions.

    If I install a GUP at site B do clients ever need to talk to the SEPM? How much data would be transferred from the clients at Site B and the SEPM?

    Yes, clients need to talk to the SEPM. Ideally few MB's, depending on your clients logging settings (the more events you set them to log, the more data they will send to the SEPM).

    And lastly, how much data is transferred regularly between the SEPM or GUP and the clients? Delta update changes or full updates?

    see J007's answer

     



  • 6.  RE: SEPM update topology
    Best Answer

    Posted May 29, 2014 07:36 PM

    Thanks for your replies, this has been very helpful.



  • 7.  RE: SEPM update topology

    Posted May 30, 2014 03:04 AM

    You are welcome, just remember to close the thread.