Query regarding EPM server for branch location

[Blason_R]

Hi Team,

I have three locations which are connected through MPLS while my EPM server is at Central location, wondering from where my users at Branch location will fetch the AV/AM updates? from my EPM server or Internet? Being on MPLS I do not want all the users talk to my centralized EPM server which I feel could exhaust my bandwidth.

So, is there any alternate config available where those users can fetch updates from CP Cloud service or any other idea that I may not be aware of?

TIA

Blason R

[G_W_Albrecht]

Please look into the Endpoint Security Administration Guide R80.30 p.17 for:

Endpoint Policy Servers

Endpoint Policy Servers improves performance in large environments by managing most communication with the Endpoint Security clients. Managing the Endpoint Security client communication decreases the load on the Endpoint Security Management Server, and reduces the bandwidth required between sites. The Endpoint Policy Server handles heartbeat and synchronization requests, Policy downloads, Anti-Malware updates, and Endpoint Security client logs.

An Endpoint Policy Server is a Log Server that you configure as an Endpoint Policy Server. See p. 87 in the guide for details.

[Blason_R]

Thanks let me have a look. This is bit confusing then? So I need to have EPM and EPS where EPM will reside at Central location while EPS will be at Remote Location, is that so?

[Blason_R]

I guess we do  not need to have EPS server as there is a option in policy to take update from External CheckPoint Signature Server instead of local ChekPoint server.

TIA

Blason R

[G_W_Albrecht]

The EPS receives a heartbeat signal from every client -- this can be made easier using a policy server. 

[Blason_R]

Agree and undoubtedly but eventually it has cost attached to it.