Video Screencast Help
Search Video Help Close Back
to help
Not able to make it to Vision this year? Get a sampling in the Best of Vision on Demand group.

Shared insite cache best practices

Created: 12 Sep 2011 | 7 comments
Rick Bywalski's picture
0 0 Votes
Login to vote

I am looking for some guidance on the shared insite server cache.   Where should I place the server?  How much HD space should I alot?   Should I have all my clients reporting to it or just the VM servers?  How many cache servers should I have?   

 

Not finding much in the way of guidance in the documentation so far.   I am planning out my upgrade to 12 currently and trying to deside if I should add one of these into the mix.

 

Comments

CaryC's picture
12
Sep
2011
1 Vote +1
Login to vote

According to Symantec these

According to Symantec these are the requirements:

Win 2003/2008 Server with .net  framework 4

Either VM server or Physical

2GB RAM Minimum

100MB free space

I would recommend more memory, as much as possible, as the Shared Insight Cache is memory resident ONLY. It does not store any entries on the HDD. If the server reboots, your cache is no longer and must be rebuilt. This is not clearly specified in documentation.

The cache is configured via an XML file.

Shared insight caches should be set up close to clients (local to your clients, ideally on same LAN). If you have multiple offices on a WAN it would probably be best to put a cache in each site (or just put them at your largest sites). The cache is set up in the virus scan policy so each site with or without a cache would need a different policy, I think.

AFAIK it's OK to use the shared cache for physical workstations and can be handy if you have a homogenous workstation environment based on similar base images or a lot of files similar across workstations.

Caches support 2000 concurrent scanning clients. You can add more if randomized scanning is enabled, Symantec says that 10,000+ can theoretically be supported with scan randomization. You can check performance of the cache server via perfmon counters. It adds a performance object when installed.

I would use the VIE tool to make exceptions for your base VM images before implementing shared insight cache.

Rick Bywalski's picture
13
Sep
2011
0 Votes 0
Login to vote

Clients off the network

What happens if the insite server can not be reached.  Example I run a full scan every weekend what will happend to laptops that are out of the office.   I am guessing that they will just scan as if the server does not exist.

 

CaryC's picture
13
Sep
2011
1 Vote +1
Login to vote

yes, they will simply scan as

yes, they will simply scan as if the server didn't exist.

ericbrown's picture
22
Feb
2012
0 Votes 0
Login to vote

This post was very well

This post was very well written about secure symantec, and it also contains many useful facts. I enjoyed your great way of writing the post. Thanks, you have made it very easy for me to understand.

Logo Design

Symantec World's picture
22
Feb
2012
0 Votes 0
Login to vote
Ebrandster's picture
22
Feb
2012
0 Votes 0
Login to vote

I am reffering to others,

I am reffering to others, thanks for such an awesome post. Digital Marketing Agency