Endpoint Protection

 View Only

  • 1.  Symantec AntiVirus Corporate Edition XDB Question.

    Posted May 03, 2011 02:32 PM

    Ladies/Gents,

    I have an issue (if you want to call it that) with configuring SAV CE.  I'm currently updating the primary server and clients via the .xdb file since this is a closed network.

     

    Problem:  After dropping the .xdb file into the main SAV folder, the primary server automatically pushes the virus definitions to the clients.  This is a problem as it "bogs" down our network.  I have tried to schedule the pushes using the Virus Definition Manager but no matter how I configure, the Primary server always pushes the new virus definitions out immediately after I drop the xdb file into main SAV folder.  Any thoughts would be greatly appreciated.

     

    Solution:  ????

     

    v/r,

    MM



  • 2.  RE: Symantec AntiVirus Corporate Edition XDB Question.

    Posted May 03, 2011 04:29 PM

    This is 100% working as designed... best security practices includes getting the latest virus definitions out to your endpoints as soon as possible. If you want bad secuirty practice, LiveUpdate Administrator is close to the only way to control virus definition distribution.

    Or... Have you considerred waiting to apply the XDB file until a time when the bandwidth usage isn't so critical?



  • 3.  RE: Symantec AntiVirus Corporate Edition XDB Question.

    Posted May 03, 2011 04:48 PM

    I totally agree that pushing the latest virus definitions immediately is what we should be doing but unfortunately, this is not an option due to our current software requirements (heavy bandwidth utilization).

     

    You just clarified what I was originally thinking with regards to applying the XDB file on weekends.  This is the option I will implement.

     

    Ryan, thank you for responding to my question/concerns.  Really appreciate it.

     

    v/r,

    MM



  • 4.  RE: Symantec AntiVirus Corporate Edition XDB Question.

    Posted May 04, 2011 04:48 AM

    Hi IBM13,

     

    Have you seen the following article?  It is possible to configure the number of clients that the server will attempt to update at once--- that can throttle the bandwidth that SAV 10 uses.

     

    Configuring the number of updates that a Symantec AntiVirus server can push simultaneously (http://www.symantec.com/docs/TECH100124)

     

    Hope this helps!  Please let the forum communuity know if this solves your question or if ther is anything additional that can be done to help.

     

    With thanks and best reagrds,

     

    Mick