Académique Documents
Professionnel Documents
Culture Documents
Solutions Guide
Riverbed Technical Marketing
LiveUpdate
LiveUpdate is the Symantec technology for automatically updating Symantec virus definitions and products. The LiveUpdate
client is included with Symantec Endpoint Protection product and is installed automatically. Periodically, the LiveUpdate client
connects to a LiveUpdate server to check for new updates that apply to the Symantec products that are installed on the computer.
If any updates are found, the LiveUpdate client prompts the user to download and install the update.
LiveUpdate offers the option to use either a Symantec LiveUpdate server or, for host computers that are connected to a private
network, an internal Central LiveUpdate server. Each LiveUpdate client can be configured separately to use either server. When
a Symantec server is used, LiveUpdate clients connect using HTTP or FTP to a server that is located at a Symantec LiveUpdate
site. If an internal Central LiveUpdate server is used, clients communicate with it for new updates. Using a Central LiveUpdate
server means that clients do not need to connect to an external network for virus definitions and product updates. This reduces
the LiveUpdate traffic between the local network and Symantec LiveUpdate sites.
Figure 1 shows the various deployment scenarios for the Symantec Endpoint Protection 11.0 and LiveUpdate.
Requirements
Figure 2 illustrates the test configuration used for this simple deployment.
Symantec
LiveUpdate
WAN
T1 / 100 ms
RTT latency
DATACENTER /
SYMANTEC ENDPOINT
PROTECTION
BRANCH OFFICE /
USERS
Cold Run
Without Steelhead
0.00
500.00
1000.00
1500.00
2000.00
2500.00
Cold Run
Without Steelhead
0
50000
100000
150000
200000
250000
Test Scenario 2: Optimizing Deployment of New Virus Definitions over the WAN
In this test, new virus definitions were deployed from the Symantec Endpoint Protection Manager to the clients over the WAN.
By default, Symantec uses port 8014 for this communication (see figure 6).
Figure 6 Communication Port 8014 for Symantec Endpoint Protection Manager and Clients
Test results show that Riverbed Steelhead appliances dramatically accelerate deployment of new virus definitions and significantly
reduce WAN bandwidth utilization. The deployment of new virus definitions resulted in over 95% data reduction in bandwidth
utilization (see figure 6). Depending on data types and WAN configuration, your results may vary.
Cold Run
Without Steelhead
0
50000
100000
150000
200000
Conclusion
The test results presented indicate that Riverbed Steelhead Appliances are essential to the Enterprise when running Symantec
Endpoint Protection. Client software and new virus definitions are quite large and can place a heavy burden on the WAN.
Customers can expect significant data reduction and improved performance when deploying client software, and significant data
reduction when deploying new virus definitions over the WAN. Deploying Steelhead Appliances showed significant data reduction
up to 99% and improved performance up to 10 times faster when deploying client software.
About Riverbed
Riverbed Technology is the IT infrastructure performance company. The Riverbed family of wide area network (WAN) optimization
solutions liberates businesses from common IT constraints by increasing application performance, enabling consolidation, and
providing enterprise-wide network and application visibility all while eliminating the need to increase bandwidth, storage or
servers. Thousands of companies with distributed operations use Riverbed to make their IT infrastructure faster, less expensive
and more responsive. Additional information about Riverbed (NASDAQ: RVBD) is available at www.riverbed.com