Endpoint Protection

 View Only
  • 1.  3 SEPM's

    Posted Oct 23, 2018 03:07 PM

    I currently have 2 SEPM using 1 SQL server, servicing 1800 clients.  Everything is currently running Server 12 R2.  I was thinking of spinning up another SEPM to help with the load.  I was curious if 1) If it's possible to run 3+ SEPMS accessing one database. 2) If possible, do I have to stay with 2012R2 or can I use 2016 for the new SEPM?

     

    I appreciate any guidance.

     

     



  • 2.  RE: 3 SEPM's

    Posted Oct 23, 2018 03:56 PM

    It is by why add another SEPM? One SQL DB supports up to 18,000 clients.

    https://www.symantec.com/docs/HOWTO81036

    Is there a concern currently?



  • 3.  RE: 3 SEPM's

    Posted Oct 23, 2018 04:13 PM

    Ever since 14.2.770 I've been getting Critical Network Load alerts (Concerning full definitions being downloaded) , and according to Symantec tech support, "It's nothing to be concerned about, so either change the limits on the notice, or turn it off" 

    So I was thinking that by adding another SEPM to the mix it might help the situation, since I've never had these alerts before.

     

     



  • 4.  RE: 3 SEPM's
    Best Answer

    Posted Oct 23, 2018 04:16 PM

    Not sure why support didn't troubleshoot this further but depending on the number of clients you already have connected I doubt adding another SEPM fixes anything.  The ideal scenario wuld be to understand why those clients are wanting defs. Unless they've been off the network for ages or there is corruption this should rarely be the case.



  • 5.  RE: 3 SEPM's

    Posted Oct 23, 2018 04:22 PM

    Nope, we have a hand full (60 or so) that have been offline for over 60 days, but for the most part, clients are online at least once a week, this all with 14.2.770, and got tons better with 14.2 MP1, but I still have gotten a couple of them since MP1 was released.  May need to re-open the ticket with Symantec if I continue to see it.