Shared insite cache best practices
Created: 12 Sep 2011 | 7 comments
I am looking for some guidance on the shared insite server cache. Where should I place the server? How much HD space should I alot? Should I have all my clients reporting to it or just the VM servers? How many cache servers should I have?
Not finding much in the way of guidance in the documentation so far. I am planning out my upgrade to 12 currently and trying to deside if I should add one of these into the mix.
Discussion Filed Under:
Comments
According to Symantec these
According to Symantec these are the requirements:
Win 2003/2008 Server with .net framework 4
Either VM server or Physical
2GB RAM Minimum
100MB free space
I would recommend more memory, as much as possible, as the Shared Insight Cache is memory resident ONLY. It does not store any entries on the HDD. If the server reboots, your cache is no longer and must be rebuilt. This is not clearly specified in documentation.
The cache is configured via an XML file.
Shared insight caches should be set up close to clients (local to your clients, ideally on same LAN). If you have multiple offices on a WAN it would probably be best to put a cache in each site (or just put them at your largest sites). The cache is set up in the virus scan policy so each site with or without a cache would need a different policy, I think.
AFAIK it's OK to use the shared cache for physical workstations and can be handy if you have a homogenous workstation environment based on similar base images or a lot of files similar across workstations.
Caches support 2000 concurrent scanning clients. You can add more if randomized scanning is enabled, Symantec says that 10,000+ can theoretically be supported with scan randomization. You can check performance of the cache server via perfmon counters. It adds a performance object when installed.
I would use the VIE tool to make exceptions for your base VM images before implementing shared insight cache.
Hi Rick Check the link
Hi Rick
Check the link below;
About the Symantec Endpoint Protection Shared Insight Cache tool
How Shared Insight Cache works
System requirements for Shared Insight Cache
Installing Shared Insight Cache
Configuring your clients to communicate with Shared Insight Cache
Clients off the network
What happens if the insite server can not be reached. Example I run a full scan every weekend what will happend to laptops that are out of the office. I am guessing that they will just scan as if the server does not exist.
yes, they will simply scan as
yes, they will simply scan as if the server didn't exist.
This post was very well
This post was very well written about secure symantec, and it also contains many useful facts. I enjoyed your great way of writing the post. Thanks, you have made it very easy for me to understand.
Logo Design
Re
Please refer below both document:
https://www-secure.symantec.com/connect/downloads/...
http://www.symantec.com/business/support/index?pag...
Regards, M.R
I am reffering to others,
I am reffering to others, thanks for such an awesome post. Digital Marketing Agency
Would you like to reply?
Login or Register to post your comment.