SEP 14.3 RU6 separates the Manager service (Java-based) from the Embedded Database (Sybase SQL Anywhere 17) or external DB (MS SQL / Oracle).
| Deployment Scale | vCPU | RAM (Manager) | RAM (DB) | Disk (DB) | IOPs required | |------------------|------|---------------|----------|-----------|----------------| | <500 clients | 4 | 8 GB | 4 GB | 100 GB | 250 (HDD) | | 500–2k clients | 6 | 12 GB | 8 GB | 300 GB | 1000 (SSD) | | 2k–5k clients | 8 | 16 GB | 16 GB | 500 GB | 3000 (NVMe) | | >5k | 16+ | 32 GB | 32+ GB | 1 TB+ | 5000+ | symantec endpoint protection 143 ru6 system requirements top
Critical insight: The semessages table in the DB logs every client-server communication. In RU6, default retention is 90 days – on a 3k client site, this table alone grows to 180 GB. Prune it to 30 days or offload to a data warehouse. SEP 14
The Symantec Endpoint Protection Manager (SEPM) is the centralized console used to manage policies, definitions, and client reporting. SEPM is a Java-based web application that runs on Apache Tomcat. Prune it to 30 days or offload to a data warehouse
In VDI environments (Citrix, VMware Horizon), redirect the scan cache to a non-persistent RAM disk or separate persistent volume. RU6’s cache is stored per-machine – for clones, this balloons storage. Use vdd.cacheLocation="T:\" via a custom GPO registry key.
Share
Tweet
