SAVCE System Center Console 1

[swasser]

Once a new virus definition file is applied to the server. How long should it take for that definition file to be applied to its clients? There are approximately 2500 clients assigned to this server and it doesn't seem to update the clients automatically. Any ideas would be greatly appreciated.

Stan

 

[CCESAV]

The number of clients that a parent server will distribute definitions at a time is determined in the Server Tuning Options. Basically, you can increase the number of clients that get updated at a time (threads). For 2,500 clients I recommend you set the thread count somewhere around 15-20.

From Symantec:

Situation:
Symantec AntiVirus can perform multithreaded updates so that multiple clients can receive virus definition or setting updates simultaneously. You want to know how to configure the number of updates that a Symantec AntiVirus server can push simultaneously.

Solution:
You can change the number of threads by setting the ClientUpdateThreadPool value in the registry.

About the ClientUpdateThreadPool value
Symantec AntiVirus checks the ClientUpdateThreadPool value every three minutes for changes. If the ClientUpdateThreadPool value does not exist in the registry, then Symantec AntiVirus uses the default value.

In Symantec AntiVirus 8.1 build 821 and earlier, the maximum number of threads is 40. In Symantec AntiVirus 8.1 build 825 and later, the maximum number of threads is 1,200. For all versions of Symantec AntiVirus, the default number of threads is five, and the minimum is one. Each thread tries to update one secondary server or one managed client. Secondary servers are updated before clients.

In some environments, a ClientUpdateThreadPool value higher than 30 can result in poor system performance and is not recommended. The following conditions may allow for a higher number of threads:

A large amount of network bandwidth is available.
You use a dedicated Symantec AntiVirus parent server. This means that the parent server does not serve any major functions other than the role of Symantec AntiVirus parent server.

In Symantec AntiVirus 10.1 and later, you can set the ClientUpdateThreadPool value in the Symantec System Center. Follow the directions for your version of Symantec AntiVirus.

To set the ClientUpdateThreadPool value in Symantec AntiVirus 10.1 and later
Start Symantec System Center and unlock your server group.
Right-click the server that you want to configure, and then click All Tasks > Symantec AntiVirus > Server Tuning Options.
In the "Number of threads to use during rollout" box, type the number of threads that you want the parent server to use.
The default setting is five threads. The maximum setting is 1,200 threads.
Click OK.

To create and set the ClientUpdateThreadPool value in Symantec AntiVirus 10.0 and earlier
In the Registry Editor, go to the following key:

HKEY_LOCAL_MACHINE\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion


On the Edit menu, click New > DWORD Value.
Type ClientUpdateThreadPool for the value's name and then press Enter.
The value name is case sensitive.
In the right pane, double-click the ClientUpdateThreadPool value.
Under Base, click Decimal.
In the Value data box, type the number of threads that you want the parent server to use.
Click OK.
Exit the Registry Editor.

Document ID: 2002120509542148
Last Modified: 06/21/2006
Date Created: 12/05/2002