Disabling Peer to Peer for Laptops

[User27605043]

Noting that when on a Laptop that Updating security would hang, I found that it is recommended to disable Peer to Peer servers on Laptops or Computers using VPN.

(From best practices:

We recommend that you enable peer-to-peer servers on PCs or virtual systems. Enabling peer-to-peer server on laptops or other mobile devices is not recommended.
We recommend that you disable peer-to-peer servers on the systems that have poor network connectivity or are connected using VPN.)

____

Looking at the Agent settings for Peer to Peer I note there are two check boxes.

Enable Peer-to-Peer Communication
Enable Peer-to-Peer Serving

Should both of these be unchecked or only one of them. Or is the wrong location?

Thanks for the help.

[cdinet · Accepted solution]

Uncheck both

[User27605043 · Accepted solution]

Quick question, what is the up side to leaving it on for other systems? I note that the default Large Environment Agent policy has it unchecked.

[cdinet]

It can cause increased traffic in a large environment.  Also, there are some issues with some versions of agents where when peer to peer is enabled, the update task just stalls at the point of checking for peer content.  It can be advantageous in smaller environments to make content more available if a repository is not up to date for some reason.

[User27605043]

Thanks for the replies everyone.

OK I am getting it now. It appears that any machine with multiple IP addresses is adversely affected by the Peer-to-Peer being on.

From what I read in the guide, it recommends using Peer-to-Peer to reduce load on the ePO server.

Question: Is there a way to determine all computers in ePO with multiple IP addresses?

It is either that or turn off the feature Globally.

[ninov_n]

There is a way to build a query to list all duplicated machines and their respective IP address assigned:

Query

[cdinet]

The agent will report only one NIC at a time, so any reports won't show a system with 2 nics.  It is best to leave it disabled for now.  If you want to reduce traffic to epo, you can use agent handlers to offload some communication traffic and distributed repositories for updates.

[ninov_n]

Hello,

It is best practice to disable both options in case you have a VPN connection for machines with that policy applied.