Clientupdate causes 200 MB traffic per Client - is there no incremental update possible?

Question

hi there.

we're using Sophos Complete Security Suite with centralized update manager and >1000 clients spread in our country. i believe there must be a chance to let them update their virus signatures incrementally. atm every single client causes a traffic of about 200 MB which bursts our company connection to the other branches.

sadly, setting up one update manager in every branch is not an option. how can we reduce the traffic to every single client?

This thread was automatically locked due to age.

QC · Accepted Answer

Hello hgms, let them update their virus signatures incrementally this is done throughout the day (called threat detection data , the .IDEs in the AV directory). From time to time these "individual" updates have to be consolidated and pruned (the .VDBs),  thus every month or so there's a major update which delivers a larger amount of data. Furthermore engine updates and updates to other components (AutoUpdate and RMS) result in a larger download (but they are  infrequent - and this month the VDBs and the software updates were in separate updates, nevertheless as they happen at the same time for all endpoints they can generate a significant amount of traffic). setting up one update manager in every branch is not an option Why? What speaks against it? Depending on the number of endpoints a SUM doesn't even need to run on a server OS. While there are (rather tedious) ways the spread the traffic you can only reduce it if you let the branch endpoints update locally. Christian  :56892