Endpoint Protection

We have SEPM 12.1.4 and 600 clients with SEP 12.1.4

it seems that when the client download the virus definitions the network is really slow.

seems like they all update whitin a few minutes

where can i schedule the client updates?

 

 

 

If from SEPM you cannot schedule updates, they happen when clients heartbeat in. Move to 12.1.5, it has a bandwidth control module to limit bandwidth to clients when downloading from SEPM

click on policies, live update, edit policy

u can change the schedule.

How client computers receive content updates

http://www.symantec.com/business/support/index?page=content&id=HOWTO80888

How you have configured the clients to get the updates ? clients get from SEPM based on heartbeat interval push or pull mode.

are these getting updates from SEPM ? or Internal Live update server or using internet?

have "use the default managment server" checked, would i want to change this?

When you would want to use Symantec live update only and not get updates from the SEPM. Best bet is to use GUPs.

Default managemet server means SEPM. seems like all your clients are getting updates at a single time hence chocking the bandwidth.

Since you can schedule when to get updates, 

Change the push mode to PULL mode and set different internvals for different groups

Configuring push mode or pull mode to update client policies and content

http://www.symantec.com/business/support/index?page=content&id=HOWTO55197

1. would changing from push to pull have any affect?

2. how about  heartbeat settings?

3. do i need to move all clients to 12.1.15 or just the SEPM?

Yes somewhat because push leaves the connection to SEPM open so any changes are downloaded right away. What is your current heartbeat? For now just SEPM. Ideally you want clients at sane version as well.

so pull would help or make worse ?

heartbeat 5 mins

Pull would help. Way too short, try 30 minutes.