When using the Cloud version of Symantec Endpoint Protection Small Business Edition (SEP SBE) in environments where bandwidth is limited it may be favorable to limit the number of machines which connect to the internet for updates, in which case we recommend enabling Local Update Hosts (LUH). Clients defined as LUHs download virus definitions and software updates from the internet and redistribute them locally to the rest of the machines on their network.
Note: Local update hosts use port 3128 so it must be accessible
Once network topology has been considered and specific clients have been designated to serve as Local Update Hosts they will need to be defined in the cloud management console and have the Local Update Host service installed, to do so:
The default System Policy in the cloud management console will direct clients to communicate with any available LUH in the environment. It is possible for the network to be configured in such a way that using this setting will result in clients trying to connect to LUHs in different physical locations or on different network segments, increasing their bandwidth usage and defeating the purpose of implementing LUHs.
There are three different options available for LUH configuration in the System Policy:
In situations where there are client machines in multiple locations which should be limited to using specific LUHs, we recommend creating a group for each location and creating a System Policy for each group to define which particular LUHs should be used.
For instructions on creating groups and moving clients into them see TECH212340.
In order to create individual System Policies determining which LUHs are to be used by clients in a particular group and assign them use the following process:
This process will need to be repeated for each group in the environment.
Make sure to consider network topology before implementing LUH configurations. We recommend configuring at least one LUH at every physical location to ensure that clients aren't crossing network segments attempting to contact LUHs at different locations.