Video Screencast Help

Symantec micro definitions size

Created: 09 Jan 2012 • Updated: 13 Jan 2012 | 11 comments
This issue has been solved. See solution.


We have 4 SAVCE 10.X servers updating 900 clients. When our daily update from the symantec arrives, it brings our virtual desktop environment to a standstill. We suspect the size of virus defs being pushed out is causing the issue.

Please can someone let me know whats the usual size of virus defs pushed out to clients daily. Is there a way to reduce the size or what is the minimal update footprint that the client can recieve and function without performance impact. 

Comments 11 CommentsJump to latest comment

pete_4u2002's picture

this link should explain the information you require in detail

you should be upgrading to SEP 12.1 as it has more benefits for VM environment, like shared insight cache, random scan etc.

Abinash N's picture

Thanks Pete, SEP is currently being tested and will be deployed in near future but till then I need a solution for this.

I have checked the client machines and it would seem that they are downloading vdb files rather that the idb micro definition files. Is this a problem with client or server config? Can I force the clients to update microdefs only?

pete_4u2002's picture

if the clients have not been updated for a long time, the definition size is high. you cannot force .

Again SEP has delta generation capacity based on content revision stored on SEPM , which could be beneficial.

Abinash N's picture

Well, all the clients are updated daily. whats the usual size of microdefs/ delta defs for SAV 10.x?

P_K_'s picture

If I am not wrong it is some where inbetween 300- 500 KB if it is increemental update.

MCT MCSE-2012 Symantec Technical Specialist (SCTS)

pete_4u2002's picture

it varies, not sure what's running now a days. however it still could  be in kb's

Abinash N's picture

In our setup its pushing the 160mb vdb file daily. Any ideas why it would be doing so? Are there any configurations setting for micro defs? or can I do any manual updates to bring virus defs in sync so that the next time it updates, it will pick only delta updates.......

pete_4u2002's picture

The SAV server will download full definition, the clients will be taking definition.

Abinash N's picture

Its the clients that are taking the full updates which is why I am worried that we have a config error somewhere

pete_4u2002's picture

how are you calculating the size of the download on the client?

Abinash N's picture

When I check the client download folder in "All users\application data" it shows a new vdb file which is almost ~150 mb in size. All clients are storing 2-3 old vbd files and the file for the current date.