Deployment of policy server for large enterprise

[ritenm]

Hi

My concern is if i want to deploy policy server for large enterprise so how many policy server can support in one Endpoint Management Server R80.20 in MPLS environment. 

[G_W_Albrecht]

According to Endpoint Security Management Server Administration Guide R80.20 p.74ff:

Installing and Configuring an Endpoint Policy Server 

We recommend that you use a distributed deployment that contains external Endpoint Policy Servers on dedicated computers. 

• Install at least one Endpoint Policy Server for each remote site. 

• For larger sites, install many Endpoint Policy Servers to improve performance. 

An Endpoint Policy Server is a Log Server that you configure as an Endpoint Policy Server.

An Endpoint Security Management Server will support and communicate with a large number of Endpoint Policy Servers that communicate with the Endpoint Clients.

[ritenm]

Thank you so much for your prompt reply. I have other concern also related to policy server.

Can i segregate network wise policy server. e.g. Mumbai policy server should communicated Mumbai client only like that way.

[Wolfgang]

Yes, that's possible.

Have a look at the documentation for "Endpoint Policy Server Proximity Analysis"

######snip from CP_R80.20_EndpointSecurity_AdminGuide.pdf#############

In a large network, multiple Endpoint Policy Servers can be available for an endpoint client. In such an environment, the client does an analysis from a list of Endpoint Policy Servers to find the server closest to it. The client sends a specified HTTP request to all Endpoint Policy Servers on the list. The server that replies the fastest is considered to be closest.

##########################################################

Wolfgang