Configuring Group Update Providers

Article:HOWTO80900  |  Created: 2012-10-24  |  Updated: 2014-09-21  |  Article URL http://www.symantec.com/docs/HOWTO80900
Article Type
How To


Subject


Configuring Group Update Providers

You configure Group Update Providers in the LiveUpdate Settings policy.

You can configure the LiveUpdate Settings policy so that clients only get updates from the Group Update Provider and never from the server. You can specify when clients must bypass the Group Update Provider. You can configure settings for downloading and storing content updates on the Group Update Provider computer. You can also set up different types of Group Update Providers.

You can configure the maximum amount of time that clients try to download updates from a Group Update Provider before they try to get updates from their default management server. If you set this time to 15 minutes, this means that the client computer must try to download continuously for 15 minutes with no success.

Note:

If the Group Update Provider runs a non-Symantec firewall, you might need to modify the firewall to permit the TCP port to receive server communications. By default, the Symantec Firewall policy is configured correctly.

You can configure only one single Group Update Provider per LiveUpdate Settings policy per group. To create a single Group Update Provider for multiple sites, you must create one group per site, and one LiveUpdate Settings policy per site.

You can configure multiple Group Update Providers by specifying the criteria that clients use to determine if they qualify to act as a Group Update Provider.

You can configure an explicit list of Group Update Providers for roaming clients to use.

See Using Group Update Providers to distribute content to clients

See About the types of Group Update Providers

To configure a Group Update Provider

  1. In the console, click Policies.

  2. Under Policies, click LiveUpdate.

  3. On the LiveUpdate Settings tab, right-click the policy that you want and then click Edit.

  4. In the LiveUpdate Settings Policy window, click Server Settings.

  5. Under Internal or External LiveUpdate Server, check Use the default management server.

  6. Under Group Update Provider, check Use a Group Update Provider.

  7. Click Group Update Provider.

  8. Do one of the following tasks:

    Note:

    Legacy clients can only use a single Group Update Provider. Legacy clients do not support multiple Group Update Providers.

  9. In the Group Update Provider dialog box, configure the options to control how content is downloaded and stored on the Group Update Provider computer.

    Click Help for information about content downloads.

  10. Click OK.

To configure a single Group Update Provider

  1. In the Group Update Provider dialog box, under Group Update Provider Selection for Client, click Single Group Update Provider IP address or host name.

  2. In the Single Group Update Provider IP address or host name box, type the IP address or host name of the client computer that acts as the single Group Update Provider.

    Click Help for information about the IP address or host name.

  3. Return to the procedure to configure a Group Update Provider.

To configure multiple Group Update Providers

  1. In the Group Update Provider dialog box, under Group Update Provider Selection for Client, click Multiple Group Update Providers.

  2. Click Configure Group Update Provider List.

  3. In the Group Update Provider List dialog box, select the tree node Group Update Provider.

  4. Click Add to add a rule set.

  5. In the Specify Group Update Provider Rule Criteria dialog box, in the Check drop-down list, select one of the following options:

    • Computer IP Address or Host Name

    • Registry Keys

    • Operating System

  6. If you selected Computer IP Address or Host Name or Registry Keys, click Add.

  7. Type or select the IP address or host name, Windows registry key, or operating system information.

    Click Help for information on configuring rules.

    See About configuring rules for multiple Group Update Providers.

  8. Click OK until you return to the Group Update Provider List dialog box, where you can optionally add more rule sets.

  9. Click OK.

  10. Return to the procedure to configure a Group Update Provider.

When you configure an explicit list of Group Update Providers, you can specify that Symantec Endpoint Protection clients with IP addresses that fall on a particular subnet should use a particular Group Update Provider. Note that a client may have multiple IP addresses and that Symantec Endpoint Protection considers all of its IP addresses when it matches the Group Update Provider to use. So, the IP address that the policy matches to is not necessarily bound to the interface that the client uses to communicate with the Group Update Provider.

For example, suppose that a client has IP address A, which it uses to communicate with the Symantec Endpoint Protection Manager and with the Group Update Provider. This same client also has IP address B, which is the one that matches the Explicit Group Update Provider that you have configured in the LiveUpdate Settings policy for this client. The client can choose to use a Group Update Provider based on the address B, even though that is not the address that it uses to communicate with the Group Update Provider.

To configure an explicit list of Group Update Providers

  1. In the console, click Policies.

  2. Under Policies, click LiveUpdate.

  3. On the LiveUpdate Settings tab, click Add a LiveUpdate Settings policy, or right-click the policy that you want and then click Edit.

  4. In the LiveUpdate Settings Policy window, click Server Settings.

  5. Under Internal or External LiveUpdate Server, check Use the default management server.

  6. Under Group Update Provider, check Use a Group Update Provider.

  7. Click Group Update Provider.

  8. In the Group Update Provider dialog box, under Group Update Provider Selection for Client, click Explicit Group Update Providers for roaming clients, and then click Configure Explicit Group Update Provider List.

  9. Click Add.

  10. In the Add Explicit Group Update Provider dialog box, type in the client subnet that you want to map these Group Update Providers to.

  11. Under Explicit Group Provider Settings, select the Type of mapping you want to set up: based on the IP address, the host name, or the Group Update Provider's network address.

  12. Type in the necessary settings for the type of mapping you selected, and then click OK.


Legacy ID



v39061844_v81626096


Article URL http://www.symantec.com/docs/HOWTO80900


Terms of use for this information are found in Legal Notices