We have a Citrix XenDesktop environment with over 100 win7 vms. I have setup sophos following sopho's best practice guide and it has worked well for years. I have noticed lately that binary updates and definition updates are causing some problems.
The IO for a single machine isn't bad but multiply it by 100+ vms all at the same time and we see a solid doubling of IO. I since disabled the binary updating and will manually choose when those install. I hoped that would fix the issue but we had a storm that happened the other day and it corrilated perfectly with the update manager pulling down definitions. For about 10 minutes we saw all servers and VM's thrashing the SANs.
I don't see any way to distribute the definition installation across time so that it will spread the load.
This thread was automatically locked due to age.