When to use replication with Endpoint Protection Managers

Products

• Endpoint Protection

Issue/Introduction

Recommended decision tree for when to utilize replication with Symantec Endpoint Protection Manager (SEPM)

Resolution

It is possible to create multiple Symantec Endpoint Protection Manager (SEPM) sites and replicate data between them. Most customers do not need, and will not benefit from multiple SEPM sites. Use the following guidelines to determine if you will benefit from a multi-site replication configuration.

Number of clients

A single SEPM site can manage approximately 250,000 clients Given adequate resources (5 SEPM servers, serving 50,000 clients each, with a 4 hour heartbeat interval).  A second site can be used to accommodate environments with more than 250,000 clients.

 

Wide Area Network (WAN) bandwidth restrictions

In environments where WAN bandwidth can only be used at specific times, you can create multiple sites and replicate over the WAN on a daily or weekly schedule.

Note: Creating multiple SEPM sites and replicating over a WAN connection does not provide a significant bandwidth reduction over directly managing clients and using Group Update Providers (GUP) over a WAN connection.

 

Hot site failover/regulatory compliance

If you are required to meet a specific Service Level Agreement for regulatory reasons, creating a secondary SEPM site and keeping it updated through Replication is one way to ensure clients will be able to reach a manager in the event of a complete SEPM site failure.

 

Common replication misconceptions

There are several commonly held beliefs about Replication which are often cited when making the decision to create multiple sites. Below is a list of some of the most common misconceptions about Replication:

1. Replication provides real-time reporting capabilities across multiple sites.
2. One SEPM per site
3. Multiple sites with replication allows for separate domains of control.
4. SEPM replication can be configured to be completely "one way".
5. Replicating across slow WAN links is preferable to client heartbeats across slow WAN links.
6. Replicating across the WAN reduces bandwidth cost of client-to-SEPM communications.
7. SEPM replication uses the built-in Microsoft SQL server database replication technology.
8. SEPM sites are analogous to Active Directory sites.