Video Screencast Help
Search Video Help Close Back
to help
Not able to make it to Vision this year? Get a sampling in the Best of Vision on Demand group.

Throttle bandwidth used by server to update itself

Updated: 21 May 2010 | 5 comments
TomCra's picture
0 0 Votes
Login to vote
This issue has been solved. See solution.

I have seen how to throttle the BW used by the clients from within IIS.  Will this also throttle the servers bandwidth when it updates it's signature files?

The problem we are having is that we use VoIP in our office, and the server appears to be on a 4 hour interval to update it's signature files.  When it starts to download the updates, it saturates our T1 and any telephone calls occuring at that time get dropped.

I've gone through the forums and literature, and I can't find information on how to:

1.  Limit bandwidth used by the server when downloading signature files [not the clients, but the server itself], or;
2.  To designate a time schedule when the server will download the files, so it is done after business hours, or;
3.  Be able to designate a particular NIC on the server used to download the signature files, so I can throttle that port on the managed switch and prevent the server from saturating the T1 while downloading signatures.

We currently have to throttle the switch port connected to the firewall so the servers download bandwidth [and subsequently the entire office internet connection] is held below full capacity of our T1.

We have been in contact with our ISP to resolve the problem through QOS settings on the router, but that's another avenue.

Thanks,
Tom

Comments

kavin's picture
17
Jun
2009
1 Vote -1
Login to vote

I think a GUP will help you

I think a GUP will help you in this case

Check this & see if its helpful
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008121722041748

Thomas K's picture
17
Jun
2009
1 Vote +1
Login to vote

How to throttle network

How to throttle network bandwidth used by the Endpoint Protection Manager (SEPM) website in Microsoft's Internet Information Server (IIS)  - http://service1.symantec.com/SUPPORT/ent-security....

Chris_L's picture
17
Jun
2009
2 Votes +2
Login to vote

GUP or Group Update Provider

GUP or Group Update Provider is meant to update only client machines and not SEP servers. GUP will help you only to redistribute the load between different branches that you may have. At this time SEP 11 console does not have option to limit the bandwidth used to download updates (except the IIS solution posted by Cycletech), you can schedule LiveUpdate to pull updates during the night. Follow the path to edit LiveUpdate policy of your server: log in to SEP console, go to Admin > Servers > Select your server > Click on "Edit Site Properties. Select the third tab called "LiveUpdate" (refer to the screen shot). There you can schedule updates in a convenient time for you and select what exactly you want to pull from Symantec LU server (for example, if you are not using IPS you can exclude signatures from being downloaded). If you have two Ethernet cards you can read this MS article for Server 2003 TCP/IP load balancing(if you use Server 2003).

System Integration Engineer

TomCra's picture
17
Jun
2009
0 Votes 0
Login to vote

Thanks

I was just coming back to post that I had found the section you just pointed me to.  I appreciate that you posted it.  I have set my server to pull the updates after midnight, and that will be an adequate solution.  A BW throttle setting would be more elegant though :)

As you already said, the other 2 options posted aren't what I was looking for, but good information for someone else looking at this thread.

I found these other links that might help others:

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007091122402048

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007092720522748

Adrian Iwanczuk's picture
05
Nov
2009
0 Votes 0
Login to vote

I am having the same issue with bandwidth between SEPMs

So, it looks like at this point my best option is to just schedule it for after hour so it doesn't interfere with our phone calls.  I totally support the idea of some sort of bandwidth throttling for SEPM update replication.  Thanks for the information.