Endpoint Protection

Hello~  We have installed the Symantec Endpoint Protection manager on a Windows 2008 R2 64bit server with 4GB of memory, 4 processors at 2.0GHz and the server utilizes a gigabit network...  It seems to me that the Endpoint Management Console runs very slowly...  At times it can take 30 seconds up to a minutes for the pages to load from the server.  This happens with both the web console and is even more slow with the installed console.

Is there something withing IIS or the Management Console that we can tweek to speed it up?  We are using the Trailware and would like to go Full version but this is very slow for us.

Thanks for anyone who can assist us...

Hi

Please check the link below

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008052709295248

that shoudl take care of it.

Andy.

Have a read of this kb article

Tuning the Performance of the Symantec Endpoint Protection Manager console

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008061813510348

Somewhere around 1 GB semi-statically should help improve performance.

Please test this on a test environment before implementing on a production network. 

Which is the version you are using?In RU 6a(11.0.6) there was some performance improvement was present.

Migrating to Symantec Endpoint Protection 11.0 RU6

Which version have to installed for Trial?

Title: 'Symantec Endpoint Protection Trialware Migration'
Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2008070914541748?Open&seg=ent
 

Please don't take this wrong - but I'm going to laugh right now because how long have I been complaining about this VERY ISSUE and gotten no results?

Same here, friend, same here. Slow as a one-legged turtle. And YES, of course, I HAVE applied ALL of the so-called fixes and tuning and YES, I run the very latest, and YES, it was clean-installed on brand new VMWare servers (2008 R2) this last time, so it's not an upgrade over 10 other upgrades, and no, NO difference, it's still slow as that turtle I mentioned.

It can take several seconds to just move from one tab to another, a VERY long time to move from displaying one group of computers to another.

And no, the WEB-based console really isn't any faster, and worse, it's got some serious issues of it's own, making it nearly unusable at the resolutions we run here, as well as constantly resetting the page it's on if you so much as move the browser a single pixel.

SEP is great, but the console architecture is, well, pretty slow and cumbersome and the web-based is a huge disappointment to me.

To make it even usable, I run it on TWO computers so I can click someone on one, while it takes time to load, I can view or get something started on the other. Need to get to something quickly? Don't count on it. 

In short, I agree 100%, it's very slow.

This is interesting, as I run the SEPM on a 2008 R2 server with 8GB RAM and have no slowness whatsoever. Nor, on my 2K3 Virtual server with a SQL database running on the Host OS.

there's a LOT of times I wish someone there could remote in to my PCs and see just how slow this is.

IS your SQL on the same machine as the SEPM service?

Do you run the console on the SERVER or client (I've tried both, although rules for security and stability state do NOT run software or consoles on SERVERS, run consoles only on clients - so no one has to be logged in to a server - check out best practices for servers) Doesn't matter what machine or if it's a client or a server, the console is just as slow on any computer I attempt to run it on.

*- although W7 seems to be quite a bit better than Vista and even better than server 2008 at running the console in JAVA.

Do you have a DEDICATED SQL server if it's not on the same machine as the SEPM service, or does it share duties - meaning serve other production databases? FEW REAL world folks can afford a SQL server dedicated only to SEP so real folks have to put the SEPM database on a SQL server that's also doing other things. MS licenses expenses and all for Server OS and SQL licenses.

In other words, since you are a Symantec employee - I'd love to know if you can have all the resources you want and have dedicated machines for every database and HOW MANY clients does your setup service? OR, are you like us and have to share a SQL server with other apps, and service 300 or even thousdands of clients? How many clients is SEPM taking care of in your case? Symantec has some healthy resources, state government does not........ and I've seen no details of the setup there.

I am using version 11.0.6100...

Hi Maheshroja,

Thanks for the tip... I adjusted the size as recommended in article and didn't really notice much a performance improvement.

We do have an SQL Express server but when I choose to do the installation I installed the server and database on the same server using the default installation... Is there a better way to run it...?  I figured that since we only have 100-200 computers the server and builtin database should be sufficient...

@ShadowsPapa:

Yeah, SQL and the SEPM are on the same machine which is also running VMWare Workstation. Granted I don't have hundreds of clients. But I dont experience a huge amount of slowness. Did you do the Fast CGI trick too?

@Ryan:

You are correct, the embedded database is best for your situation, as SQL Express is not supported with the SEPM. Just make sure you have enough Free RAM to support both SQL and the SEPM, as I know SQL can be a huge memory hog if you don't limit the amount of RAM it can use.

SEPM console has always been slow. I guess we just got used to it.

Especially slow is the monitors pane, when the summary tab loads and you want to click on the logs tab, it's a long wait...

Ted G,

Maybe your console only has a limited amout of machines and data.

If you want to speed up the Home, Monitors, and Reports pages, configure FastCGI in IIS. 

How to configure the Symantec Endpoint Protection Manager to use FastCGI in IIS 7.0/7.5.

I did this a year ago - no difference.

yup did fast cgi long long time ago when it was first talked about, and my guess is "I've tried it all" since I've been complaining about the speed since day one in quite a few threads here.

I have to say that the FastCGI has helped out quite a bit... Loading of the Home, Monitors and Reports sections is much better however there is still some lag on the Clients section... I think it may have speeded up the Clients section a little but the others are much better for sure. 

Thank you...

Any other ideas on how we could possible speed up the loading of Client information?

I join your conversation because this morning we note that accessing or generating "reports" and "logs" pane was very long. After searching, we note that the internet access for the server was down (fw rule accidently dropped). When the access was restablished, console had a normal behaviour. We reproduced this behaviour.

I don't know if it help but I want to share this experience and may try to have an explanation.

Thanks in advance