Endpoint Protection

We have tight AV update policies but limited bandwidth to our remotes sites.  We do have Cisco WAAS (WAN optimzation tools) at each of our sites.  Cisco says these updates are encrypted and therefore their product (WAAS) can not help with the sending of 60meg updates to many computers are once.  Can you tell me if these updates are encrypted and if it can be turned off?

Thanks

For SAV 10.x you may find it is useful to install one machine at each remote site as a SAV secondary server and setup the clients as clients of that server.

That way the SAV Primary (existing server) will send virus definitions once over the WAN to each site, and then the clients will update via LAN.

(In regards to the encrypted question; whether actually encrypted or not there is no option to change the way the server delivers content via VDTM.)

The updates to SEP clients are only 60mb in the case when the clients definitions are further out of date than the versions that the SEP Manager has stored.
If you set your retention levels correctly this should only happen in very rare occassions.
Normal incremental updates should be no more than 100-200K to each SEP client per day.

You should also use Group Update Providers (GUP) at each remote site as it will save bandwidth.
When a SEP client requests the definition update it is sent to the GUP which then caches it for all future requests of the same definition.

cheers

Z

Pls tell us the version of Antivirus you are using...

If its SAV You cant change... If its SEP Its depends on you setting(SEPM IIS Site) and you can change....

Since its a http traffic you can use other devices for compression.... But i m not sure how much it wil help.


As Zer0 said if the clients are having latest updates it should not affect the bandwidth (In both 10X and SEP)