This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Clients not downloading updates from the local update manager server

We have very low bandwidth between HQ and remote offices. Did some research and found that we can set up additional update manager so we set one up. On SEC, I can see that the remote PCs are all showing the correct Primary server (I did not set a secondary server). The policy also sync fine.

However, users still reported that they experience super slow connection. I checked the connectivity with our NetFlow server and found that the top 5 conversations are the remote PCs dowloading from the SEC at HQ (http, 50.77 MB, 49.52 MB, 48.47 MB, 45.7 MB, and 43.44 MB). That amount of simultaneous downloads slows the connection to a crawl.

I understand that one of the PC is the update manager and it's downloading by design. What I cannot figured out is why the other four PCs still downloading from the SEC. I greatly appreciate any help I can get with this issue. I opened a case with Sophos before I found out about the additional update manager server. I opened up another case with them. Hopefully I get a better result this time.

:56310


This thread was automatically locked due to age.
  • Hello ryanp,

    the update logs on the endpoints should show the location actually used.

    Are you perhaps using Patch? If so, the endpoints (by default) connect to, report to, and download from port 80 on the management server). In this case please see Configuring a caching proxy to reduce Patch data network traffic.

    Christian

    :56325
  • Hello Christian,

    That's exactly the answer. We have Patch Module installed initially but decided to go with a different solution. Sophos support actually gave me the same answer this time around, but I didn't get a chance to update this thread. I also didn't appreciate that it took them months without being able to give me an answer (seem pretty simple). The fact that they didn't even bother to review what modules we have and just keep looking at the log is what annoyed me the most. I ended up disable Patch in SEC.

    Thanks again for your reply and the link.

    Ryan

    :56443