Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 1 subscriber
  • Views 1213 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Console Pushing major amount of data to endpoints

packman73

Came in this morning to find our 420+ WAN sites essentially offline because Sophos was pushing some sort of update down to the endpoints and overwhelmed the circuits.  We use a Web CID for distribution and have our updating policy setup for bandwidth throttling which doesn't appear to work.  Has anyone else seen this?  This is one of the reasons we moved from Trend to Sophos is because we had this issue with Trend.

:22647


This thread was automatically locked due to age.
  • 0

    Hello packman73,

    first of all, it is not a push but a pull done by the clients. The bandwidth setting is also a client setting, therefore the bandwidth in use is [bandwidth set in policy]*[number of clients updating]. Keep in mind the limit is an average so you might experience spikes exceeding this value.Are these 420+ sites 420+ off-site clients or sites with several (many) clients each? From essentially offline I assume the connections are private with a limited bandwidth. 

    The available options depend on your topology (and your answer to the questions). Setting up child-SUMs in at least some of the locations (if there are many clients per location) is one for example.

    Christian

    :22651
  • 0

    The bandwidth throttling is set to 64Kb on the updating policy for the WAN sites.  We understand that it's 64Kb/client.  The minimum number of clients/site is 4, maximum is 6.  Minimum circuit is a T1, each site has it's own circuit.

    :22659
  • 0

    I just wanted to make sure that there is no misunderstanding.

    Well, basic math tells me that with this setting a T1 should not be brought to its knees. With only a handful of clients at each site additional SUMs don't make sense. I suggest you take this to Support - there is a How to/How do I article for each of the current versions so I assume this featue is still considered important.

    Christian

    :22679