Configuring Multiple GUPs in SEP 11.0 RU5 release, has added a certain dynamics's to the way virus definitions are provided to the clients. The figure below is a representation of various possibilities of configuring a Group Update Provider: As shown above, you can either configure a Single GUP or Multiple GUPs in SEPM. When to use multiple GUPs:
Hi Rob,
If you want create single GUP, then all machines should be in single group and same nework (i think). otherwise you have to create mutliple group provider list for all sites
--
madhu
Hi,
I'm new to GUP's and am having a little trouble understanding if i should put the multiple IP addresses into one rule or creating a rule for each IP address for machines that i want to be the GUP's.
I have nine machines i want to be GUP's and they are in 9 different geographic locations but all connected to the SEPM 12.1.2 via the WAN.
Can someone let me know if I just create one rule with all of the IP addresses or multiple rules with single IP addresses.
Many thanks in advance!
Rob
Moved Post to Forums
Its the latter - if a client fulfils those conditions it will advertise to SEPM that it can be used as a GUP - when other clients call updates the update file will download to this machine in a directory called central updates (or something simialr), client on same subnet will then update from this GUP.
If all your computers are eligiable to become GUP I believe they will download updates from SEPM being applying to themselves.
Do we usually have a roaming GUP
* Multiple rule sets are OR'ed. A client must match one rule set. This can be useful while roaming across multiple locations. Your client will pass 1 rule set in a location and 2'nd Rule set in a different one, so the IP addresses of GUP will change automatically.
* Multiple rules are AND'ed. A client must match all the rules that are specified in a rule set. * Multiple values for a rule condition are OR'ed. A client must match one value. For example, you might create RuleSet 1 that includes an IP address rule with several IP addresses. You then create RuleSet2 that includes a host name rule and an operating system rule each with multiple values.A client computer must match either RuleSet1 or RuleSet2."
* Multiple rules are AND'ed. A client must match all the rules that are specified in a rule set.
* Multiple values for a rule condition are OR'ed. A client must match one value. For example, you might create RuleSet 1 that includes an IP address rule with several IP addresses. You then create RuleSet2 that includes a host name rule and an operating system rule each with multiple values.A client computer must match either RuleSet1 or RuleSet2."
I hope the Whole rule set is to identify a machine as GUP and not for a client to contact a particular GUP
Will wait for a response :)
Thanks
SEP GUP Policy - Best practices
It's working Now...
but i wan't to know GUP working only Same network or another Network.
Hi Ashish,
This is an article, I would suggest you to open a new Forum Thread and post the iformation there, so we can discuss this on the forums.
Also, let me know the result of
netstat -ano | findstr "2639" on the GUP machine.
Regards,
Aniket Amdekar
Thaks For your Reply !
When i am Telnet port no 2967 local host not sucess ang gup machine sharefolder not available.I have attach Syslog file
Please confirm a few things:
1. Policy defines that client as a GUP
2. The client has received the latest policy.
3. Check the presense of the folder sharedupdates inside the SEP folder.
4. On the GUP machine, run the following command:
netstat -ano | findstr "2639"
5. Check the PID. Then in task manager, enable the column for PID and confim that SEP GUP machine is Listening on that port.
6. If not, check sylinkmonitor logs.
Kindly Share Which Type we will telnet 2967 port
i am not able to telnet 2967 port
We have Complete All of setting but i have not able to Telnet port 2967.without telnet my Gup not working.
The site where I have SEPM installed also contains clients.
I know I need to install GUP on all other sites where SEPM is not installed.
So I asume the clients on the site where SEPM is installed will just use SEPM to receive updates because none the the GUPs are local for the clients or is it recommended to also install GUPs in the same site as SEPM
Jason
Hello,
YOU ARE A GUP MASTER... FROM VIDEO's TO ARTICLES ON GUP...
"CATCH THAT... YOU ARE TO THE POINT..."
Is there a way of knowing a client is using a gup for updates via the SEP client or SEPM?
So what your saying is if I uncheck "inherit policies and settings from parent group" then each group will need its own GUP? I have Servers that I have set in different groups being that I have different scan times and a very different set of centralized exceptions for each group. 90% of these servers are all in the same colo but you are saying that I would have to have 1 GUP for each Group? This does not make sense. I thought that the Client goes out and finds the GUP on their list that is closest to them i.e. their subnet and uses that GUP...if said GUP goes down they default to next nearest GUP or they go to SEP Management Console. This is what I hope. I plan on using a registry key as the way that GUPS get created please tell me I am not going to need a GUP per group can multiple groups use the same GUP? Another question I have is what is the name of the folder that the SEP creates on the GUP to push data down to the clients and is this folder and its contents deleted after it finishes? How much space does this need as we configure servers to have more data on D drive rather than C.
So I have to configure like 100 GUP policies now??? That doesn't sound right.
For instance...
SITEA ---COMPUTERS ----DESKTOPS -----LABA -----LABB ----LAPTOPS ----STAFF -----STUDENTS
According to his advice I would have to go to each of those groups and setup a GUP???? I am running RU5 and supposley can handle one policy with many GUPS???????
Also, I only have 1 server at most of my remote sites. This is the only box with a static IP and it is also a Domain Controller so this machine for one is on a different VLAN and another it is in a differetn folder all together then SITEA, etc......
Is there any way around this? I really really really really need to get the GUP's working. Symantec is killing our bandwidth at about 3 sites.
Any ideas????????
10/10/2009 9:48:47 AM Information Start using Group Update Provider (proxy server) @ 172.X.X.X:2967.
Is it possible to use wild characters in rule set? For example can I set the rule as ip address of gup should be 10.3.*.12