Video Screencast Help

Symantec Endpoint Protection disk space

Created: 16 Jan 2013 | 4 comments

 

On a Windows SBS 2008 server we have Symantec Endpoint Protection Manager installed (version 12.1.671.4971). Also, the Symantec Endpoint Protection client is installed on the server (same version).

The server has a limited amount of diskspace, and they are starting to run out. I've run a scan with TreeSize to see what's taking up all the space and I've noticed this:

C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Data\Definitions\VirusDefs

This folder is taking up 6,2GB and it contains folders like "20130110.024", "20121217.003", etc. etc. There are about 16 of such folders in the VirusDefs folder, which is weird because I've set in the SEPM settings to only keep the last 3.

But, I've also found this folder:

C:\ProgramData\Symantec\Definitions\SymcData\virusdefs32

This folders is about 1,2GB and contains three subfolders like "20130110.005". Since this folder only contains three folders it would seem the settings of SEPM are applied here.

We're getting to my question: Can I safely delete the old definitions folders from the VirusDefs folder? And where could I set the setting to only keep the latest three virus definitons, like in the virusdefs32 folder.

Comments 4 CommentsJump to latest comment

Ashish-Sharma's picture

Hi,

 

Disk Space Management procedures for the Symantec Endpoint Protection Manager

http://www.symantec.com/business/support/index?page=content&id=TECH96214

You can do the following:

1. change the number of revisions retained by the Symantec Endpoint Protection Manager

2. edit the database retention settings for the Symantec Endpoint Protection Manager to help save disk space:

 

 

Try the following links this should fix you're issue ....

Symantec Endpoint Security Manager: How is Database Maintenance scheduled? 

http://www.symantec.com/business/support/index?page=content&id=TECH95880&locale=en_US

 

Changing the log settings to reduce the size of the database

http://www.symantec.com/business/support/index?page=content&id=TECH105238&locale=en_US

 

How to quickly purge the SEPM log tables on a SQL server

Check this thread

https://www-secure.symantec.com/connect/forums/sep...

Thanks In Advance

Ashish Sharma

 

 

.Brian's picture

How many content revisions are you keeping?

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

MichaelD50's picture

Known issue; upgrade your SEPM to 12.1 RU2 (12.1.2015)

Rebooting the server may also help until upgrade.

MJD

SebastianZ's picture

The definitions is this folder are SEP client definitions:

C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Data\Definitions\VirusDefs

 

The other folder: C:\ProgramData\Symantec\Definitions\SymcData\virusdefs32 belongs to SEPM - the settings here with 3 revisions should be fine.

 

Problem is with he clients revisions - the default value of revisions kept on clients in version 12.1 should be 1 - if you see more this is a known defect - please have a look at the following KB:

http://www.symantec.com/docs/TECH180056