Object Directory Physical Location; Object Directory Access; Searching For Objects; Clearing Deleted Objects - McAfee ENDPOINT ENCRYPTION ENTERPRISE - BEST PRACTICES GUIDE Manual

Object Directory Physical Location
Consideration should be made to the location of the Object Directory.
The default final folder for the Endpoint Encryption Object Directory is in a folder called SBDATA. If possible,
use a separate fixed drive or partition to the OS for example, OS and application on C: database on D:. This is
usually decided at the time of initial installation and can be modified at another time.
Object Directory Access
Check that every administrator that needs to log on to the Object Directory goes through the Endpoint
Encryption Database server, not direct through local connection. Where possible, do not allow the database to
be shared.
Searching for Objects
Limit the use of the Find function in 20K+ databases during normal working hours as it can slow access for
other systems and user objects. Another alternative is to work on a recent copy of the Object Directory to
perform searches, and once the location is found, they can be navigated to directly in the live Object Directory.
Clearing Deleted Objects
Clear objects from Deleted Items regularly when not needed. Deleted items are folders containing old deleted
users, systems, and other objects and are found through the System tab in the Endpoint Encryption Manager.
These objects can slow searches down. If these objects are needed for auditing, they will need to be retained
by first backing up the whole database (SBDATA folder) and then storing, dated, carefully for that purpose.
Then empty the deleted items from the current live database to help speed of access. See the more detailed
Object Directory Maintenance section below.
SBSERVER.INI
This file is found in the main installation folder for your Endpoint Encryption Manager. It can be used to adjust
the maximum number of connections the Endpoint Encryption server will accept and the behavior when the
maximum is reached.
SBServer ini contents:
[Connections]
Max=200
AcceptAtMax=No
The default settings are usually fine for most implementations but Max=200 can be set to a higher value
depending on the number of incoming connections. This should only be changed if the server has a high
specification and is recommended by a McAfee Endpoint Encryption consultant. In addition, this would need
to be tested to determine if this improves sync events and server load. (Please see Endpoint Encryption
Manager Administration Guide supplied with Endpoint Encryption Manager for further details on SBServer.ini).
18