Symantec Access Management

Expand all | Collapse all

Multiple Policy Servers and Policy Stores - where to run XPSSweeper?

Jump to Best Answer
  • 1.  Multiple Policy Servers and Policy Stores - where to run XPSSweeper?

    Posted 09-25-2017 07:56 PM

    We have 12.52 SP1 here where we have multiple policy stores (SQL Server 2012 with replication among the policy stores). There are 2 policy servers tied to each policy store of which we have 4.

     

    I'm trying to determine how XPSSweeper should best be scheduled :

    (1) Run once per day on one and only one policy server (regardless of which policy store the policy server is tied to)?

    (2) Run once per day on one policy server (at different times) tied to each policy store?

    (3) Run one per day on all policy servers at different times, presumably 30 minutes apart or so (XPSSweeper usually takes about 90 seconds or less to run).

     

    Each policy store has an Admin UI tied to it, so replication handles policy store synchronization. So I'm also wondering if a policy server can get "stale" cached data if it doesn't run XPSSweeper on a regular basis?

     

    Thanks!



  • 2.  Re: Multiple Policy Servers and Policy Stores - where to run XPSSweeper?
    Best Answer

    Posted 09-25-2017 08:25 PM

    Hi Alan,

     

    We usually recommend doing 

    (1) Run once per day on one and only one policy server (regardless of which policy store the policy server is tied to)

     

    XPSSweeper works on the policy store directly. So , you don't need to run individually on each Policy server.

    For the other policy store, the replication should synchronize the changes done with XPSSweeper.

     

    Policy server do regularly synchronize with policy store so you won't be getting stale data.

     

    Regards,

    Ujwol



  • 3.  Re: Multiple Policy Servers and Policy Stores - where to run XPSSweeper?

    Posted 09-26-2017 12:26 PM

    Thank you Ujwol,

     

    Very helpful answer!

     

    - Alan