tweaks

[terry712]

what is preferred setting fopr policy updates

5 mins default seems abit overkill to me
and what about the 60 min s talk back ?

 

[VictorySabre]

I don't think my settings are necessarily the preferred setting for everyone, but it works fine for me. I have my Agent set to enforce policy every 60 minutes and agent/server communications every 3 hours.

This is for just over 1000 clients, with about 100 located at different offices around the country.

 

[mattmsudawg]

Well I really like to know what's going on with my clients and if something is wrong with them so I set the policy enforcement interval to 5 mins and the agent to server communication interval to 10 mins. I have over 2000 clients connect daily and have no problems with those settings. Yesterday I had over 2000 machines update within 20 mins. That's what I like so much about my settings.

 

[Windexx]

I handle a very large environment and five minutes would kill me by traffic or server utilization. My environment is 1000s of locations and 10000s of users. I set mine to 120 min to reduce the traffic. My ASCII is set to 6 hours and I do not do global updating. Settings may be tweaked depending upon your resources (network and servers) along with the number of clients. You can do the number crunching to see the hit your servers will take. You can then base it upon traffic. Take a look at the newer bandwidth doc that McAfee put out some time back.

Note: Keep the ASCII higher then the enforce policy. You don't want it stepping on one another (ie don't set for the same or very close to the same). Also, the higher the enforce interval the more junk you get in your logs.