These best practices are specific to Symantec Endpoint Protection (SEP) clients installed in non-persistent VDI (NPVDI) environments, and the Symantec Endpoint Protection Manager (SEPM) servers that service them. Before following the steps, see Virtualization best practices for Endpoint Protection.
Common challenges of non-persistent VDI environments include:
|State information for the SEP client and environments characteristics refresh||
VDI environments use available resources more efficiently, which leaves less overhead for increased loads
The following configuration recommendations ensure that SEP clients, in non-persistent VDI environments, generate no network or disk I/O from advanced SEP features that do not benefit non-persistent clients.
Add these steps to the routine maintenance schedule for base images. Symantec recommends that you perform these maintenance tasks at least once a week.
NOTE: Due to recent changes in SEP version 14.3 RU5, the path used for SMC was changed to HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\, therefore you must also add these same subkeys in the new path to be honored.
Follow the general best practices below for periodic image maintenance and testing.
Link to tech docs best practices: