Determining CPU speed and system architecture capacity
Symantec Protection Engine server performance can benefit from the following features:
Higher CPU speed
CPU bottlenecks occur when \Processor\%Processor Time performance counter numbers are high while the network adapter and disk I/O remain below capacity. In this case (which is the ideal CPU-maximized system), reaching 100% means that the CPU power must be increased. CPU power can be increased by upgrading to a faster CPU or by adding more processors.
While Symantec Protection Engine can benefit from faster CPU speeds, increasing the CPU speed does not ensure a linear increase in performance. Because of the large and frequent memory access effect, an increase in CPU speed can result in wasted, idle CPU cycles when waiting for memory.
Hyper-threading capabilities can also aid in lowering CPU utilization levels when no more than 60% of the CPU capacity is consumed. At higher CPU utilization levels, enabled hyper-threading consumes the same processing power as the disabled hyper-threading.
Larger processor cache
Large amounts of data can require frequent memory access. An L2/L3 cache improves performance when large amounts of memory are accessed.
Improved system architecture
Symantec Protection Engine transfers large data loads between network devices, memory, and the CPU. Therefore, the system elements around the CPU also have an effect on server performance. A faster memory front side bus and faster I/O buses improve overall performance.
Determining network capacity
Every network device that exists on a connection has a capacity limit. Such devices include the client and server network adapters, routers, switches, and hubs that interconnect them. Adequate network capacity means that none of these network devices are saturated. You should monitor network activity to ensure that the actual loads on all network devices are below their maximum capacity.
In most cases, the Internet connection bandwidth sets the limit for the volume of Internet traffic. Weak performance during peak traffic hours can be the result of over-utilization of the Internet link. If Symantec Protection Engine is connected only to LANs, you must have the proper infrastructure to support maximum traffic requirements. If the network is 1 Gbps or greater, consider enabling jumbo frames on the switch and on all of the Symantec Protection Engine servers.
You should also ensure that the entire networking infrastructure is appropriately rated. For example, if you connect the computers that contain gigabit network interface cards, ensure that the network interface cards are in full duplex mode. Also ensure that the network interface cards are configured at their maximum possible bandwidth.
Determining disk storage capacity
Symantec Protection Engine uses disk space primarily for storing temporary files for scanning and for storing logs. A shortage of disk space might severely affect the scanning functionality of Symantec Protection Engine. If you experience disk space shortages, consider adding more physical disks.