SEP11 questions

[Migration User]

Dears, greeting!

 

If someone would help me with my question I will much appreciate.

The questions are:

1. What network load is seen during:

• Antivirus updates uploading to the client side;
• Policies update uploading to the client side (all SEP components are used).

2. What HW requirements do we have in case of real system that should manage more than a thousand clients in real-time? I think here mostly the question about DB.

Thanks a lot in advance.

BR,

Anton

[Mithun Sanghavi]

Hello,

The following are estimates of the size of packages that are sent between the Symantec Endpoint Protection client and manager:

• Heartbeat (with no updates to be exchanged) - When there is no traffic to be exchanged (i.e. no profile to download and no logs to update) then the heartbeat will be between 2 and 3 KB/s.
• Policies (i.e. AV/AS, Firewall, OS Protection, Host Integrity) - Typically varies between 20 and 80 KB, but can increase if detailed rules are included, or OS protection templates are used. Generally, once you set your policies to suit your network needs, you do not modify them on a regular basis.
• IPS Signature Updates - Files range between 50 and 100 KB. Symantec supplies updates approximately every quarter unless a specific threat or vulnerability needs to be addressed.
• AV Signatures - 50 to 100 KB daily for clients, assuming that the signatures are updated successfully every day.
• Logs - Logs are compressed at the client before they are uploaded to the Symantec Endpoint Protection Manager. Approximately, 800 log entries take up 1KB of file space.

Reference :http://www.symantec.com/docs/TECH102211

All the Answers to your queries would be answered in the Articles below:

1) Sizing and Scaling Guidelines Document

https://www-secure.symantec.com/connect/downloads/sep-sizing-and-scalability-recommendations-v23

https://www-secure.symantec.com/connect/downloads/gupsizingandscalingguidelines

2) Disk Space Management procedures for the Symantec Endpoint Protection Manager

http://www.symantec.com/docs/TECH96214

3) Microsoft SQL Server requirements for Symantec Endpoint Security 11.0 and Symantec Network Access Control 11.0

http://www.symantec.com/docs/TECH102704

4) How to use SEPM Database sizing tool 

https://www-secure.symantec.com/connect/articles/how-use-sepm-database-sizing-tool

Hope that helps!!

[Migration User]

Thanks a lot for detailed answer! This info is more then enough.