McAfee ENDPOINT ENCRYPTION ENTERPRISE - BEST PRACTICES GUIDE Dokumentacja Pobierz pdf (Strona 18)

18



ObjectDirectoryPhysicalLocation

ConsiderationshouldbemadetothelocationoftheObjectDirectory.



ThedefaultfinalfolderfortheEndpointEncryptionObjectDirectoryisinafoldercalledSBDATA.Ifpossible,

useaseparatefixeddriveorpartitiontotheOSforexample,OSandapplicationonC:databaseonD:.Thisis

usuallydecid

edatthetimeofinitialinstallationandcanbemodifiedatanothertime.



ObjectDirectoryAccess

CheckthateveryadministratorthatneedstologontotheObjectDirectorygoesthroughtheEndpoint

EncryptionDatabaseserver,notdirectthroughlocalconnection.Wherepossible,donotallowthedatabaseto

beshared.



SearchingforObjects

LimittheuseoftheFindfunctionin20K+databasesduringnormalworkinghoursasitcanslowaccessfor

othersystemsanduserobjects.AnotheralternativeistoworkonarecentcopyoftheObjectDirectoryto

performsearches,andoncethelocationisfound,theycanbenavigatedtodire

ctlyintheliveObjectDirectory.



ClearingDeletedObjects

ClearobjectsfromDeletedItemsregularlywhennotneeded.Deleteditemsarefolderscontainingolddeleted

users,systems,andotherobjectsandarefoundthroughtheSystemtabintheEndpointEncryptionManager.

Theseobjectscanslowsearchesdown.Iftheseobjectsareneededforauditing,theywillneedtobere

tained

byfirstbackingupthewholedatabase(SBDATAfolder)andthenstoring,dated,carefullyforthatpurpose.

Thenemptythedeleteditemsfromthecurrentlivedatabasetohelpspeedofaccess.Seethemoredetailed

ObjectDirectoryMaintenancesectionbelow.



SBSERVER.INI

ThisfileisfoundinthemaininstallationfolderforyourEndpointEncryptionManager.Itcanbeusedtoadjust

themaximumnumberofconnectionstheEndpointEncryptionserverwillacceptandthebehaviorwhenthe

maximumisreached.



SBServerinicontents:

[Connections]

Max=200

AcceptAtMax=No



Thedefaultsettingsareusuallyfineformostimplementati

onsbutMax=200canbesettoahighervalue

dependingonthenumberofincomingconnections.Thisshouldonlybechangediftheserverhasahigh

specificationandisrecommendedbyaMcAfeeEndpointEncryptionconsultant.Inaddition,thiswouldneed

tobetestedtodetermineifth

isimprovessynceventsandserverload.(PleaseseeEndpointEncryption

ManagerAdministrationGuidesuppliedwithEndpointEncryptionManagerforfurtherdetailsonSBServer.ini).



1 2 ... 13 14 15 16 17 18 19 20 21 22 23 24 25 26

Komentarze do niniejszej Instrukcji

Brak uwag

McAfee ENDPOINT ENCRYPTION ENTERPRISE - BEST PRACTICES GUIDE Dokumentacja Strona 18

Komentarze do niniejszej Instrukcji

Powiązane produkty i podręczniki dla Serwery McAfee ENDPOINT ENCRYPTION ENTERPRISE - BEST PRACTICES GUIDE