updoserdup

OfficeScan Server Component Duplication

When the latest version of a full pattern file is available for download from the Trend Micro ActiveUpdate server, 14 "incremental patterns" also become available. Incremental patterns are smaller versions of the full pattern file that account for the difference between the latest and previous full pattern file versions. For example, if the latest version is 175, incremental pattern v_173.175 contains signatures in version 175 not found in version 173 (version 173 is the previous full pattern version since pattern numbers are released in increments of 2. Incremental pattern v_171.175 contains signatures in version 175 not found in version 171.

To reduce network traffic generated when downloading the latest pattern, OfficeScan performs component duplication, a component update method where the OfficeScan server or Update Agent downloads only incremental patterns. See Update Agent Component Duplication for information on how Update Agents perform component duplication.

Component duplication applies to the following components:

• Virus Pattern

• Smart Scan Agent Pattern

• Virus Cleanup Template

• IntelliTrap Exception Pattern

• Spyware Pattern

• Spyware Active-monitoring pattern

Component Duplication Scenario

To explain component duplication for the server, refer to the following scenario:

1. The OfficeScan server compares its current full pattern version with the latest version on the ActiveUpdate server. If the difference between the two versions is 14 or less, the server only downloads the incremental pattern that accounts for the difference between the two versions.

• If the difference is more than 14, the server automatically downloads the full version of the pattern file and 14 incremental patterns.

To illustrate based on the example:

• The difference between versions 171 and 175 is 2. In other words, the server does not have versions 173 and 175.

• The server downloads incremental pattern 171.175. This incremental pattern accounts for the difference between versions 171 and 175.

2. The server merges the incremental pattern with its current full pattern to generate the latest full pattern.

To illustrate based on the example:

• On the server, OfficeScan merges version 171 with incremental pattern 171.175 to generate version 175.

• The server has 1 incremental pattern (171.175) and the latest full pattern (version 175).

3. The server generates incremental patterns based on the other full patterns available on the server. If the server does not generate these incremental patterns, clients that missed downloading earlier incremental patterns automatically download the full pattern file, which will consequently generate more network traffic.

To illustrate based on the example:

• Because the server has pattern versions 169, 167, 165, 163, 161, 159, it can generate the following incremental patterns:

169.175     167.175     165.175     163.175     161.175     159.175

• The server does not need to use version 171 because it already has the incremental pattern 171.175.

• The server now has 7 incremental patterns:

171.175     169.175     167.175     165.175     163.175     161.175     159.175

• The server keeps the last 7 full pattern versions (versions 175, 171, 169, 167, 165, 163, 161). It removes any older version (version 159).

4. The server compares its current incremental patterns with the incremental patterns available on the ActiveUpdate server. The server downloads the incremental patterns it does not have.

To illustrate based on the example:

• The ActiveUpdate server has 14 incremental patterns:

173.175     171.175     169.175     167.175     165.175     163.175     161.175

159.175     157.175     155.175     153.175     151.175     149.175     147.175

• The OfficeScan server has 7 incremental patterns:

171.175     169.175     167.175     165.175     163.175      161.175     159.175

• The OfficeScan server downloads an additional 7 incremental patterns:

173.175     157.175     155.175     153.175     151.175     149.175     147.175

• The server now has all the incremental patterns available on the ActiveUpdate server.

5. The latest full pattern and the 14 incremental patterns are made available to clients.

See also:

• OfficeScan Server Update Sources

• Update Agent Component Duplication