McAfee ENDPOINT ENCRYPTION ENTERPRISE - BEST PRACTICES GUIDE Specifications Page 18

  • Download
  • Add to my manuals
  • Print
  • Page
    / 26
  • Table of contents
  • BOOKMARKS
  • Rated. / 5. Based on customer reviews
Page view 17
18
ObjectDirectoryPhysicalLocation
ConsiderationshouldbemadetothelocationoftheObjectDirectory.
ThedefaultfinalfolderfortheEndpointEncryptionObjectDirectoryisinafoldercalledSBDATA.Ifpossible,
useaseparatefixeddriveorpartitiontotheOSforexample,OSandapplicationonC:databaseonD:.Thisis
usuallydecid
edatthetimeofinitialinstallationandcanbemodifiedatanothertime.
ObjectDirectoryAccess
CheckthateveryadministratorthatneedstologontotheObjectDirectorygoesthroughtheEndpoint
EncryptionDatabaseserver,notdirectthroughlocalconnection.Wherepossible,donotallowthedatabaseto
beshared.
SearchingforObjects
LimittheuseoftheFindfunctionin20K+databasesduringnormalworkinghoursasitcanslowaccessfor
othersystemsanduserobjects.AnotheralternativeistoworkonarecentcopyoftheObjectDirectoryto
performsearches,andoncethelocationisfound,theycanbenavigatedtodire
ctlyintheliveObjectDirectory.
ClearingDeletedObjects
ClearobjectsfromDeletedItemsregularlywhennotneeded.Deleteditemsarefolderscontainingolddeleted
users,systems,andotherobjectsandarefoundthroughtheSystemtabintheEndpointEncryptionManager.
Theseobjectscanslowsearchesdown.Iftheseobjectsareneededforauditing,theywillneedtobere
tained
byfirstbackingupthewholedatabase(SBDATAfolder)andthenstoring,dated,carefullyforthatpurpose.
Thenemptythedeleteditemsfromthecurrentlivedatabasetohelpspeedofaccess.Seethemoredetailed
ObjectDirectoryMaintenancesectionbelow.
SBSERVER.INI
ThisfileisfoundinthemaininstallationfolderforyourEndpointEncryptionManager.Itcanbeusedtoadjust
themaximumnumberofconnectionstheEndpointEncryptionserverwillacceptandthebehaviorwhenthe
maximumisreached.
SBServerinicontents:
[Connections]
Max=200
AcceptAtMax=No
Thedefaultsettingsareusuallyfineformostimplementati
onsbutMax=200canbesettoahighervalue
dependingonthenumberofincomingconnections.Thisshouldonlybechangediftheserverhasahigh
specificationandisrecommendedbyaMcAfeeEndpointEncryptionconsultant.Inaddition,thiswouldneed
tobetestedtodetermineifth
isimprovessynceventsandserverload.(PleaseseeEndpointEncryption
ManagerAdministrationGuidesuppliedwithEndpointEncryptionManagerforfurtherdetailsonSBServer.ini).
Page view 17
1 2 ... 13 14 15 16 17 18 19 20 21 22 23 24 25 26

Comments to this Manuals

No comments