topic Re: Query regarding EPM server for branch location in Endpoint

Query regarding EPM server for branch location

Blason_R — Thu, 27 Jun 2019 05:01:49 GMT

Hi Team,

I have three locations which are connected through MPLS while my EPM server is at Central location, wondering from where my users at Branch location will fetch the AV/AM updates? from my EPM server or Internet? Being on MPLS I do not want all the users talk to my centralized EPM server which I feel could exhaust my bandwidth.

So, is there any alternate config available where those users can fetch updates from CP Cloud service or any other idea that I may not be aware of?

TIA

Blason R

Re: Query regarding EPM server for branch location

G_W_Albrecht — Thu, 27 Jun 2019 07:10:33 GMT

Please look into the Endpoint Security Administration Guide R80.30 p.17 for:

Endpoint Policy Servers

Endpoint Policy Servers improves performance in large environments by managing most communication with the Endpoint Security clients. Managing the Endpoint Security client communication decreases the load on the Endpoint Security Management Server, and reduces the bandwidth required between sites. The Endpoint Policy Server handles heartbeat and synchronization requests, Policy downloads, Anti-Malware updates, and Endpoint Security client logs.

An Endpoint Policy Server is a Log Server that you configure as an Endpoint Policy Server. See p. 87 in the guide for details.

Re: Query regarding EPM server for branch location

Blason_R — Thu, 27 Jun 2019 07:19:13 GMT

Thanks let me have a look. This is bit confusing then? So I need to have EPM and EPS where EPM will reside at Central location while EPS will be at Remote Location, is that so?

Re: Query regarding EPM server for branch location

Blason_R — Thu, 27 Jun 2019 10:48:56 GMT

I guess we do not need to have EPS server as there is a option in policy to take update from External CheckPoint Signature Server instead of local ChekPoint server.

TIA

Blason R

Re: Query regarding EPM server for branch location

G_W_Albrecht — Thu, 27 Jun 2019 11:26:26 GMT

The EPS receives a heartbeat signal from every client -- this can be made easier using a policy server.

Re: Query regarding EPM server for branch location

Blason_R — Thu, 27 Jun 2019 11:27:44 GMT

Agree and undoubtedly but eventually it has cost attached to it.