Detailed RAP Enabled Results

Using the aforementioned methodology, and the configuring DLP as explained in the configuration section and enabling RAP, a maximum endpoint server capacity test was performed. In the tested scenario, 5 simulator VMs were used running 22,500 endpoints, and another VM running another 130 endpoints for incident injection for a total of 22,630 endpoints, of which 22,601 registered.

Configuration components with their size for this test are as follows:

• Resource resolver - a subset of the imported user directory is saved on the client – 1MB.
• Policy – all active policies relevant to the client is also downloaded. This includes additional classifier files such as scripts, dictionaries and DLibs – 2.5MB.
• Profile – Holds the endpoint profile relevant to the client, defines communication with the endpoint server, update timers etc. – 42KB.
• Fingerprints – The endpoint client holds relevant fingerprint database (FPNE) to allow fingerprint classification – 27MB.

This brings the total configuration size to about 30.5MB per client.

Each of these components is updated individually so if for example between update intervals only the Policy component changes, only it will be updated, not downloading the other up-to date components. In this test the update interval was set to 60 minutes.

In addition, every endpoint client pings the endpoint server in a set interval. In this test value of 10 minutes was used.