Throttle bandwidth used by server to update itself
I have seen how to throttle the BW used by the clients from within IIS. Will this also throttle the servers bandwidth when it updates it's signature files?
The problem we are having is that we use VoIP in our office, and the server appears to be on a 4 hour interval to update it's signature files. When it starts to download the updates, it saturates our T1 and any telephone calls occuring at that time get dropped.
I've gone through the forums and literature, and I can't find information on how to:
1. Limit bandwidth used by the server when downloading signature files [not the clients, but the server itself], or;
2. To designate a time schedule when the server will download the files, so it is done after business hours, or;
3. Be able to designate a particular NIC on the server used to download the signature files, so I can throttle that port on the managed switch and prevent the server from saturating the T1 while downloading signatures.
We currently have to throttle the switch port connected to the firewall so the servers download bandwidth [and subsequently the entire office internet connection] is held below full capacity of our T1.
We have been in contact with our ISP to resolve the problem through QOS settings on the router, but that's another avenue.
Thanks,
Tom
Comments
I think a GUP will help you
I think a GUP will help you in this case
Check this & see if its helpful
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008121722041748
How to throttle network
How to throttle network bandwidth used by the Endpoint Protection Manager (SEPM) website in Microsoft's Internet Information Server (IIS) - http://service1.symantec.com/SUPPORT/ent-security....
GUP or Group Update Provider
GUP or Group Update Provider is meant to update only client machines and not SEP servers. GUP will help you only to redistribute the load between different branches that you may have. At this time SEP 11 console does not have option to limit the bandwidth used to download updates (except the IIS solution posted by Cycletech), you can schedule LiveUpdate to pull updates during the night. Follow the path to edit LiveUpdate policy of your server: log in to SEP console, go to Admin > Servers > Select your server > Click on "Edit Site Properties. Select the third tab called "LiveUpdate" (refer to the screen shot). There you can schedule updates in a convenient time for you and select what exactly you want to pull from Symantec LU server (for example, if you are not using IPS you can exclude signatures from being downloaded). If you have two Ethernet cards you can read this MS article for Server 2003 TCP/IP load balancing(if you use Server 2003).
System Integration Engineer
Thanks
I was just coming back to post that I had found the section you just pointed me to. I appreciate that you posted it. I have set my server to pull the updates after midnight, and that will be an adequate solution. A BW throttle setting would be more elegant though :)
As you already said, the other 2 options posted aren't what I was looking for, but good information for someone else looking at this thread.
I found these other links that might help others:
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007091122402048
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007092720522748
I am having the same issue with bandwidth between SEPMs
So, it looks like at this point my best option is to just schedule it for after hour so it doesn't interfere with our phone calls. I totally support the idea of some sort of bandwidth throttling for SEPM update replication. Thanks for the information.
Would you like to reply?
Login or Register to post your comment.