South Africa Security and Compliance User Group

 View Only
  • 1.  SEP12RU6 full definitions - prevent setting on console

    Posted Jun 30, 2015 05:56 AM

    We just recently upgraded our SEPM from RU4 to RU6 on the lab environment. I noticed that under the Admin >> Servers >> SEPM server >> server properties ..there is an option to prevent full definitions from being distributed. Does this then mean that I can restrict my SEPM from creating full defintions completely?

    Screen.jpg



  • 2.  RE: SEP12RU6 full definitions - prevent setting on console
    Best Answer

    Posted Jun 30, 2015 06:00 AM
    It will stop sending full.zip to clients


  • 3.  RE: SEP12RU6 full definitions - prevent setting on console

    Posted Jun 30, 2015 06:01 AM

    Great, what will the effect be if I have 2-3 SEPM's ?

    Also, how can one throttle updates between the GUP and clients (is this on the roadmap to be included within the console)?
     



  • 4.  RE: SEP12RU6 full definitions - prevent setting on console

    Posted Jun 30, 2015 06:04 AM

    This setting will prevent the SEPM on which it is enabled to send Full.zip to any client (no matter their build).

    When client sends a content request to SEPM for a full.zip, Apache returns a 503 error (Service Unavailable). Same goes for a GUP - the GUP will receive a 503 error and will not be able to retrieve any Full.zip.

    This setting is in case of content storm that would overload the newtork.



  • 5.  RE: SEP12RU6 full definitions - prevent setting on console

    Posted Jun 30, 2015 06:09 AM
    Gup is also a client..it will cache the delta defs only ..no client will get full.zip..objective is to use reduced network utilization.. Try to store more revisions on sepm..load will b less


  • 6.  RE: SEP12RU6 full definitions - prevent setting on console

    Posted Jun 30, 2015 06:11 AM

    So, if you prevent a full.zip request, does it then start creating incrementals to come up to date then or not?



  • 7.  RE: SEP12RU6 full definitions - prevent setting on console

    Posted Jun 30, 2015 06:31 AM

    No it won't. The full.zip request means that the SEPM is not able to provide "incrementals" (delta files) because the client content version does not match a content version of the SEPM. (In most cases, clients have too old content.)

    However, in the LU policy it's now (12.1.6) possible to enable the client to download delta files from LU servers if the SEPM is only able to provide full.zip files. And you can enable notifications for full.zip downloads.

    The new option for preventing full downloads is sort of a troubleshooting tool for temporary use.



  • 8.  RE: SEP12RU6 full definitions - prevent setting on console

    Posted Jul 01, 2015 01:39 AM

    Can you explain exactly how the LU policy (ru6) is best configured ?



  • 9.  RE: SEP12RU6 full definitions - prevent setting on console

    Posted Jul 01, 2015 05:35 AM

    Can you explain exactly how the LU policy (ru6) is best configured ?

    Enable the delta files download from LU server with [LU settings policy] > Windows Settings/Advanced Settings > Let clients download smaller packages from a LU server

    Of course this only works if LU server download is enabled.

    Notifications for full downloads can be created under Monitors > Notifications > Notification Conditions > Add ... > Network Load Alert: requests for full definitions

    Unfortunately, in 12.1.6 all full definitions are triggering alerts while only AV/AS definitions are critical for bandwidth.