You notice SEP installed on DCs are not updating, looking at the Event viewer the client service crashes frequently
Event 1000 showing a lots of events as below:
Windows Server DC.
SEP 14.3 + builds
SepMasterService consuming all heap memory and engines not handling memory allocation failure well.
As workaround you might try to add memory monitor settings as per: https://knowledge.broadcom.com/external/article/170255/endpoint-protection-client-fails-to-upda.html
You might use different value
MemoryMonitor = 500 (default 350)
MemoryMonitorFreq = 1 (default 8)
MemoryMonitorRetry = 0 (default 60)
If the SepMasterService crashes so often, please use a Frequency of 1-2 hours instead of default 8. the Memory Monitor of 500 instead of 350.
If the SepMasterService keeps crashing even with memory Monitor settings above, follow the workaround described below: