Endpoint Protection

 View Only

  • 1.  Thin client server processing peak because of Symantec client

    Posted Aug 25, 2017 04:13 AM

    Hi,

    We have a thin client server running under Windows server 2012 r2. Problem we are having is that processing peaks, once we disable symantec client everything return back to normal. We upgraded to SEPM14 but still having same problem. Will installation of Embedded or VDI client installation settings for Windows solve the issue?

    Please help with this issue. Thanks!



  • 2.  RE: Thin client server processing peak because of Symantec client

    Posted Aug 25, 2017 06:06 AM

    Does this happen during a content update? What shows in the System log at the time this happens? And what is the exact 14 version this occurs with?



  • 3.  RE: Thin client server processing peak because of Symantec client

    Trusted Advisor
    Posted Aug 28, 2017 12:03 PM

    Is this issue resolved?

    If not, have you tried installing a Embedded or VDI client ?

    https://support.symantec.com/en_US/article.HOWTO125352.html

    • Uses virus and spyware definitions in the cloud.

    • Installs only the latest virus and spyware definitions.

      The client is approximately 80 percent to 90 percent smaller on disk than dark network Windows clients because they download only the latest definitions

    • The embedded/VDI client includes more size optimizations than the standard client:

      • The installer cache does not save after installation completes. This change means you cannot remove or modify the installation through the Control Panel unless you first copy the installation package to the client computer.

      • The embedded client employs NTFS compression on more folders than the standard client.

    • Handles AutoUpgrade with full installation packages; cannot use deltas.

    • For any embedded clients that are not connected to the cloud, Symantec recommends that you install and enable all protection technologies. These protection technologies include the firewall, Download Insight, intrusion prevention, and SONAR. Symantec also recommends that you use system lockdown to ensure the highest level of security.

    Note: If you configure embedded images for Windows Embedded Standard 7 and later with templates, all templates except for Minimum Configuration work well with Symantec Endpoint Protection. The supported write filter is the File Based Write Filter (FBWF) with the Registry Filter. If the write filter status is incompatible with the installation, the Symantec Endpoint Protection installer alerts you to the changes you need to make.

     

    Symantec Endpoint Protection support for Windows Embedded

     

    Regards,



  • 4.  RE: Thin client server processing peak because of Symantec client

    Posted Aug 29, 2017 07:17 AM

    We are still having the issue, though we have installed 'Embedded or VDI client installation settings for Windows'. Please see attached screen shot. I have opened a case with Symantec.



  • 5.  RE: Thin client server processing peak because of Symantec client

    Posted Aug 29, 2017 07:19 AM

    Seems there should be a registry adjustment as there are too many services openeing there. I'd inquire about their best practices for this.



  • 6.  RE: Thin client server processing peak because of Symantec client

    Trusted Advisor
    Posted Sep 05, 2017 01:41 AM

    Hello,

    In this case, check the article attached below:

    VDI Best Practices with SEP v14

    http://www.symantec.com/docs/HOWTO124251

    Regards,