smpsins

Smart Protection Server Installation

You can install the integrated or standalone Smart Protection Server if the number of clients is 1,000 or less. Install a standalone Smart Protection Server if there are more than 1,000 clients.

Trend Micro recommends installing several Smart Protection Servers for failover purposes. Clients that are unable to connect to a particular server will try to connect to the other servers you have set up.

Because the integrated server and the OfficeScan server run on the same computer, the computer’s performance may reduce significantly during peak traffic for the two servers. Consider using a standalone Smart Protection Server as the primary smart protection source for clients and the integrated server as a backup.

Standalone Smart Protection Server Installation

For instructions on installing and managing the standalone Smart Protection Server, see the Smart Protection Server Installation and Upgrade Guide.

Integrated Smart Protection Server Installation

If you installed the integrated server during OfficeScan server installation:

• Enable the integrated server and configure settings for the server. For details, see Integrated Smart Protection Server Management.

• If the integrated server and OfficeScan client exist on the same server computer, consider disabling the OfficeScan firewall. The OfficeScan firewall is intended for client computer use and may affect performance when enabled on server computers. For instructions on disabling the firewall, see Enabling or Disabling the OfficeScan Firewall.

• Consider the effects of disabling the firewall and ensure that it adheres to your security plans.

Smart Protection Server Best Practices

Optimize the performance of Smart Protection Servers by doing the following:

• Avoid performing Manual Scans and Scheduled Scans simultaneously. Stagger the scans in groups.

• Avoid configuring all endpoints from performing Scan Now simultaneously.

• Customize Smart Protection Servers for slower network connections, about 512Kbps, by making changes to the ptngrowth.ini file.

For the standalone server:

1. Open the ptngrowth.ini file in /var/tmcss/conf/.

2. Modify the ptngrowth.ini file using the recommended values below:

[COOLDOWN]

ENABLE=1

MAX_UPDATE_CONNECTION=1

UPDATE_WAIT_SECOND=360

3. Save the ptngrowth.ini file.

4. Restart the lighttpd service by typing the following command from the Command Line Interface (CLI):

service lighttpd restart

For the integrated server:

1. Open the ptngrowth.ini file in <Server installation folder>\PCCSRV\WSS\.

2. Modify the ptngrowth.ini file using the recommended values below:

[COOLDOWN]

ENABLE=1

MAX_UPDATE_CONNECTION=1

UPDATE_WAIT_SECOND=360

3. Save the ptngrowth.ini file.

4. Restart the Trend Micro Smart Protection Server service.