you need to create an MSL for the groups.

from admin guide

Adding a management server list

If your enterprise has multiple Symantec Endpoint Protection Managers, you can

create a customized management server list. The management server list specifies

the order in which clients in a particular group connect. Clients first try to connect

to management servers that have been added with the highest priority.

If management servers with the highest priority are not available, then clients

try to connect to management servers with the next higher priority. A default

management server list is automatically created for each site. All available

management servers at that site are added to the default management server list

with the same priority.

If you add multiple management servers at the same priority, then clients can

connect to any of the management servers. Clients automatically balance the load

between available management servers at that priority.

You can use HTTPS protocol rather than the default HTTP for communication.

If you want to secure communication further, you can customize the HTTP and

HTTPS port numbers by creating a customized management server list. However,

you must customize the ports before clients are installed or else the

client-to-management server communication is lost. If you update the version of

the management server, you must remember to re-customize the ports so that

the clients can resume communication.

After you add a new management server list, you must assign it to a specific group

or location or both.

See

“Assigning a management server list to a group and location” on page 161.

Managing communication between management servers and clients

Adding a management server list

158

To add a management server list

1

In the console, click Policies.

2

Management Server Lists

In the Policies page, under View Policies, click Policy Components >.

3

Under Tasks, click Add a Management Server List.

4

name for the management server list and an optional description.

In the Management Server Lists dialog box, in the Name text field, type a

5

servers and the clients, select one of the following options:

To specify which communication protocol to use between the management

■

Use HTTP protocol

■

Use this option if you want management servers to communicate by using

HTTPS and if the server is running Secure Sockets Layer (SSL).

Use HTTPS protocol

6

authority, check

If you require verification of a certificate with a trusted third-party certificateVerify certificate when using HTTPS protocol.

7

To add a server, click Add > New Server.

8

type the IP address or host name of the management server.

In the Add Management Server dialog box, in the Server address text field,

9

for this server, do one of the following tasks:

If you want to change the port number for either the HTTP or HTTPS protocol

■

The default port number for the HTTP protocol is 80.

Check Customize HTTP port number and enter a new port number.

■

The default port number for the HTTPS protocol is 443.

If you customize the HTTP or HTTPS port numbers after client

deployment, clients lose communication with the management server.

Check Customize HTTPS port number and enter a new port number.

10

Click OK.

11

management server you just added, click

If you need to add a management server that has a different priority than theAdd > New Priority.

12

Repeat steps 7 through 10 to add more management servers.

13

In the Management Server Lists dialog box, click OK.

also this could be helpful link

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007082112135948

Installing And Configuring Endpoint Protection Manager For Fail Over and Load Balancing

http://service1.symantec.com/SUPPORT/ent-security....