Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
ritenm
Participant

Deployment of policy server for large enterprise

Hi

My concern is if i want to deploy policy server for large enterprise so how many policy server can support in one Endpoint Management Server R80.20 in MPLS environment. 

 

 

 

0 Kudos
3 Replies
G_W_Albrecht
Legend
Legend

According to Endpoint Security Management Server Administration Guide R80.20 p.74ff:

Installing and Configuring an Endpoint Policy Server 

We recommend that you use a distributed deployment that contains external Endpoint Policy Servers on dedicated computers. 

• Install at least one Endpoint Policy Server for each remote site. 

• For larger sites, install many Endpoint Policy Servers to improve performance. 

An Endpoint Policy Server is a Log Server that you configure as an Endpoint Policy Server.

 

An Endpoint Security Management Server will support and communicate with a large number of Endpoint Policy Servers that communicate with the Endpoint Clients.

0 Kudos
ritenm
Participant

Thank you so much for your prompt reply. I have other concern also related to policy server.

Can i segregate network wise policy server. e.g. Mumbai policy server should communicated Mumbai client only like that way.
0 Kudos
Wolfgang
Leader
Leader

Yes, that's possible.

Have a look at the documentation for "Endpoint Policy Server Proximity Analysis"

######snip from CP_R80.20_EndpointSecurity_AdminGuide.pdf#############

In a large network, multiple Endpoint Policy Servers can be available for an endpoint client. In such an environment, the client does an analysis from a list of Endpoint Policy Servers to find the server closest to it. The client sends a specified HTTP request to all Endpoint Policy Servers on the list. The server that replies the fastest is considered to be closest.

##########################################################

Wolfgang

0 Kudos