This content has been marked as final. Show 5 replies
As you already know with a new DAT fil at least about 40 meg will be replicated and there is no way to get around that because currently the amount as doubled because they must support and download signatures for VS80 (engine in mode 1) and compressed signatures for VS85 (engine in mode 2). When all McAfee products support the engine 5200 in mode 2 they can drop the support for the old DATs and replication traffic will only be half.
The question in your case is if you really need distributed repositories. A cVSE85 lient which only updates to the newest signature version downloads only the last incremental file which is about 20-50 kb in size.
So when it only comes to updating you must have a lot of clients to get over your 40 meg replication traffic.
If you get additional cost for every ISDN dialup I would advise you to schedule a clients to communicate and update at the same time so that the line is only opened once for updating your AV software.
Thanks for the reply.
I have 8.5i running on the clients, and have trialled the updates. These update quickly over ISDN when connecting to the central repository, which is very useful to us in the dial-up environment.
However, I have some clients that sit behind a server, and rely on it's connection to our central server for their updates, hence the need for regional/distributed repositories. It is these I need to find a quicker solution for, as the current DAT replication is taking too long.
I can't rely on the sites themselves to manually initiate the call at a scheduled time to recieve their update, the staff are not very IT literate. I plan on scheduling a replication task every hour, so it will update the repository if they are connected at that time.
With the current regional distributed repository task taking 1hr to complete a DAT update, this will mean the server is permanently replicating.
Is there any way around this problem?
Thanks in advance,
What do you exactly mean by "the clients sit behind a server" ?
Also I was thinking of scheduling an update task via ePO which runs at a special time for these clients ...
Sorry for the confusion.
We have a central exchange server that the majority of the client PC dial in to, to pick up their mail from the mailboxes on the central server.
We also have a few exchange servers that sit in our regional offices which dial in to pick up their mail. These then have 4-5 client PC's that pick up their mail from these regional servers.
These clients 'behind the servers' rely on the server to dial in to the central exchange server to pick up their mail. We can't schedule in a specific task for these as the people using the regional servers dial in as-and-when they want to pick up any mail. They are not permanently connected as it is ISDN.
Confusing isn't it?
So, we want to make these regional servers act as distributed repositories for EPO to replicate with. Unfortunately the DAT update takes 1hr 1min over ISDN, so even scheduling an hourly task gets complicated.
At the moment we email the .exe files from the McAfee website out once a week. We can't do it daily as it takes forever to download the files now they are 30MB+ in size.
The clients PC's running 8.5i update in a couple of minutes from the EPO server, it is these problem clients attached to the servers that we need to fix.
I think the only way we can do it is to get these PC's to dial in to the central EPO too, which is a bit more work for us, but might be quicker in the long run.
The company won't pay for the ISDN network to be replaced!
Thanks in advance,
but these clients behind the exchange server will never be able to communicate with yout epo server to get policies and tasks. Therefore they need a direct connection to your epo servers communication port.
So these clients are standalone client. As you must configure them locally you can configure them to update from an ftp repository and fill this repository manually. Then you only have to copy the files you need for VS8.5 updating.