Endpoint Protection

Hie everone

I have SEP 12.1.5 running in a mixed Ms Windows Environment of 80 Users spread across 7 cities in a WAN Network. There is an accounting system we use that is centrally located and all users access it. I noticed however that since i deployed it, i am experiencing latencies to the various branches. this stops when i take the SEP Server off the network. I tried altering the policies, changing the update frequencies and even leaving them to update overnight however the problem has not changed.

Any ideas.

Thank you very much.

It could be content updates. Are clients configured to come back to the SEPM for updates or do you have GUPs in place?

Hie Brian

I have GUP's in place for users at other branches and all are configured to come back to the SEPM for updates at different times of the day.

Are you able to tell what machines are the cause of the issue?

I noticed that latencies immediately disappear the moment i remove the SEPM off the network.

Hello,

in this way you are also preventing any communication between clients and SEPM, i.e. less SEP related traffic and more bandwidth for the rest.

The biggest part of the traffic between SEP's and SEPM is made by the definitions, ensure to store not less than 30 revisions in the SEPM and consider to throttle the bandwidth usage between GUP's and SEPM in GUP's settings. However, sometimes, it is required to improve the qualitiy of the links.

Hie Beppe

Thank you very much for the reply.

How do i check the revisions?
 

To configure the number of content revisions retained in SEPM follow the below steps:

1. In the Symantec Endpoint Protection Manager console, click Admin > Servers > Local Site.
2. Right-click Local Site and select Edit Properties.
3. Click LiveUpdate.
4. Under "Disk Space Management for Downloads", select the number of content revisions to be retained.

How did you configure GUP's to come back to the SEPM for updates at different times of the day?

Have you configured clients to do not bypass GUP even though definitions are not available? Did you setup bandwidth restirction?

Need to identify what traffic is moved between SEP clients and SEPM? Are they asking for full.zip data instead of delta updates? If that's the case can increase number of content revisions stored in the SEPM.