CAN GUP IN DIFFTENT GROUP UPDATE CLIENT
Updated: 21 May 2010 | 26 comments
This issue has been solved. See solution.
Can GUP in diffrent Group update the clients.........?
If I put all my GUPS in diffrent Group will it update my clients..........?
Discussion Filed Under:
Comments
Quick Answers...
Hi Hemu,
Check the Following KB which answers all your Questions:
Symantec Endpoint Protection 11.0 Group Update Provider (GUP)
http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/184f7ebb04cd173480257363006d2beb?OpenDocument
Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | SCTS | ITIL v3
Follow me on Twitter: @mithun_sanghavi
Don't forget to mark your thread as 'SOLVED' with the answer that best helped yo
CAN GUP IN DIFFTENT GROUP UPDATE CLIENT
Hi,
As far as your question goes "Can GUP in diffrent Group update the clients.........?" If the Live update policy is the same for the group it can be done else it cannot. Please check the following links and let us know in case you require further help.
http://service1.symantec.com/SUPPORT/ent-security....
http://service1.symantec.com/SUPPORT/ent-security....
http://service1.symantec.com/SUPPORT/ent-security....
Thanks & Regards Sandip C Sali
Dear mithun, No ans of my
Dear mithun,
No ans of my quation is not ther in this KB
Please help me as we have more then 1800 GUPS.......
Things are EASY with File Sharing....... It makes easy for Viruses also...!!
Symantec SEP11 STS
Symantec SNAC 11 STS
Please help to understand
Please help to understand what do u min by same live update police ..........?
police number will be diff for diff group..........
Things are EASY with File Sharing....... It makes easy for Viruses also...!!
Symantec SEP11 STS
Symantec SNAC 11 STS
GUPs are defined by LiveUpdate policy
Hemu,
GUPs are defined by LiveUpdate policy. With policy inheritance a single LiveUpdate policy can be appliced to multiple groups, and if that is the case then multiple groups will be using the defined GUP in that policy. Does that make more sense?
Cass Averill
Install and Migration Docs for SEP 12.1
Install and Migration Docs for SEP 11
u want say that to creat new
u want say that to creat new live update police and applie to both group
Group A :- GUPs
Group B:- Clients........
One more quation....
If i do this way i can't put my all GUPS in one group..........
Things are EASY with File Sharing....... It makes easy for Viruses also...!!
Symantec SEP11 STS
Symantec SNAC 11 STS
only if Group A, B, the GUPs
only if Group A, B, the GUPs group, and any other group that the GUPs are going to manage are all inherited by the same set of policies.
For example, a group setup may look like this:
My Company
|_ Temporary
|_ Workstations
|_ Servers
If all groups except the servers group have policy inheritance turned on, and the have the LiveUpdate policy with the assigned GUP applied to them, then all groups will update to that GUP except for the computers in the Servers group. And this will work fine.
As another example:
My Company
|_ Temporary
|_ Workstations
|_ Location 1
|_ Location 2
|_ Servers
|_ Location 1
|_ Location 2
This setup doesn't work quite the same as you'll have different gups managing different locations so inheritance doesn't work the same. You'll have to turn off policy inheritance on the groups and manually apply the LiveUpdate policy to what groups you want it applied to so that each individual group has the proper LiveUpdate policy.
Cass Averill
Install and Migration Docs for SEP 12.1
Install and Migration Docs for SEP 11
I think u can. You mean you
Am I right?
Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind
aravind1984 right......... i
aravind1984
right.........
i have 1600 sub group
i want to move my all 1600 GUP in one group to maintain it properly........
Things are EASY with File Sharing....... It makes easy for Viruses also...!!
Symantec SEP11 STS
Symantec SNAC 11 STS
Dear Cass, exmp 1 If group is
Dear Cass,
exmp 1
If group is in inheritance how can i assign GUP to workstation group............?
emp 2 is perfect and that is what happning in my n/w rt now......wnat to chage this..........
Things are EASY with File Sharing....... It makes easy for Viruses also...!!
Symantec SEP11 STS
Symantec SNAC 11 STS
For example 1 you would just
For example 1 you would just apply the policy at the My Company level as the other groups have policy inheritance turned on so they would all take the My Company's policies.
For exmaple 2 you would go into the Policies tab in the SEPM, create the policy, once the policy is created you would right-click on the policy and click 'apply' and then choose the groups you wish to apply the policy to. From here you would choose your groups (location1 or location 2 according to the example) you wish to apply the policy to. You will want to be sure these groups have policy ineritance turned OFF.
Cass Averill
Install and Migration Docs for SEP 12.1
Install and Migration Docs for SEP 11
Dear Cass i have 1600
Dear Cass
i have 1600 GUPS........
and 57000 clients.........
if i creats police on mycompany for live update i have to creat 1600 diff polcies for 1600 group.......
and then i can assen them to group.......
please suggest.......
Things are EASY with File Sharing....... It makes easy for Viruses also...!!
Symantec SEP11 STS
Symantec SNAC 11 STS
That is correct, each GUP has
That is correct, each GUP has to have a policy created for it.
Cass Averill
Install and Migration Docs for SEP 12.1
Install and Migration Docs for SEP 11
If u want to apply different
Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind
hmmmmmmmmm i think i have to
hmmmmmmmmm
i think i have to do this but i think this will effect my SEPM performance
let me discus this with my AVP and symantec support..........
ill do this 2mrrow...
Things are EASY with File Sharing....... It makes easy for Viruses also...!!
Symantec SEP11 STS
Symantec SNAC 11 STS
thnx all for support will get
thnx all for support
will get back to u 2mrrow...........
Things are EASY with File Sharing....... It makes easy for Viruses also...!!
Symantec SEP11 STS
Symantec SNAC 11 STS
Hi Hemu, If you are palnning
Hi Hemu,
If you are palnning to move all the 1600 GUP's in one group I dont think you will be able to use the GUPs to update all the clients in other 1600 groups.
hi kavin it is realy deficult
hi kavin
it is realy deficult for me and my team to mantain GUP as SEPM dont have GUP reporting.............
Things are EASY with File Sharing....... It makes easy for Viruses also...!!
Symantec SEP11 STS
Symantec SNAC 11 STS
I think it is better to check
Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind
GUP best
GUP best practices...
http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/230d1cf8e23d01e2882574a90062d485?OpenDocument
MR5 has a lot of GUP
MR5 has a lot of GUP enhancements including the ability to set GUP's based on wildcard rules (* and ?).
Eg. any machine with the name SRV****01 will become a GUP.
So SRVASIA01, SRVAUST01, etc.
You can also set a GUP based on the existence of a registry key, so you could just send a reg key out to all systems you want as GUP's.
Or even set the GUP based on operating system type, so all windows servers would become GUP's.
All of these can also be combined in and AND/OR fashion.
SEP clients will then download the master GUP list and choose the GUP on their own subnet.
MR5 is due in september some time...
cheers
Z
I think GUP is just a content
I think GUP is just a content cache.. whether it is in same group or some other group it should be able to server the client....
Its the policy on the clients which decides whom to contact manager or GUP. When GUP gets the request it download the x delta updates from manager it is pointing to and serves it to the clients.
Regards,
Srinivas H.P.
HCL Infosystems Ltd
Internet link is slow.. clicked "save" multiple times....
Internet link is slow.. clicked "save" multiple times....
Sorry...
Can I or any Admin delete this.....
Is there any way to avoid this kind of multiple same entries... ?
Regards,
Srinivas H.P.
HCL Infosystems Ltd
Hi, can I set schedule
Hi, can I set schedule wherein the GUP will get update from SEPM...let's say this GUP will get update at 4:00 AM? Base on my observation the GUP client update kicks in when there is client requesting update from GUP. Also, the SharedUpdate content started to populate when there is client requesting for update. Can we set schedule to both of this? Thanks!
Jerry, The GUP is still a
Jerry,
The GUP is still a client, and all clients request updates on the heartbeat (with the exception of if they are scheduled to access the LiveUpdate servers online via a schedule). You can set the heartbeat interval (ie. every 5 minutes, 30 minutes, 8 hours, etc), but outside of that you do not set a schedule for the heartbeat. The client will heartbeat in on the set interval, on bootup, when the services are restarted, or on command through the GUI.
the SharedUpdate conent will populate when clients request for an update. Clients request for updates from the GUP on the same schedule as above, but because of the LiveUpdate policy identified above, instead of requesting the definitions from the SEPM itself, they request them from the GUP. So no, there is no set schedule outside of a minute/hour interval you can set via the heartbeat.
Cass Averill
Install and Migration Docs for SEP 12.1
Install and Migration Docs for SEP 11
The group can have the same
The group can have the same LU policy applied to it - this way, YES even if the gup and client are in different groups/folders, it will still get used.
O,lder version of SEP, may have different behaviour, but the above is true for MR/RU5
Would you like to reply?
Login or Register to post your comment.