Endpoint Protection

 View Only
  • 1.  Central LUA Server

    Posted Jan 07, 2014 04:11 AM

    Wishing you a very Happy New Year to Everyone!!!!

    We have somewhere around 15 LUA servers in different offices serving as Download and Distribution center for local SEP client. Being a SEP Administrator i want to montior the activity/performance of all the LUA servers or simply you can say i want a single administration console which will have access to all the LUA server.

    Is there any solution from Symantec like SPC for LUA? Everyones advises are appriacited.

     



  • 2.  RE: Central LUA Server

    Broadcom Employee
    Posted Jan 07, 2014 04:22 AM

    15 numbers of LUA is too many in numbers

    When to use LiveUpdate Administrator?
    http://www.symantec.com/docs/TECH154896

     

    SPC won't support LUA connector. However LUA can manage the download and distribution LUA ( in scheduling and configuring).



  • 3.  RE: Central LUA Server

    Posted Jan 07, 2014 04:27 AM

    Unfortunately nothing like SPC for LUA is available. 15 LUAs seems bit much. Only thing that can be achieved is from one LUA to monitor and administer its remote distribution centers.



  • 4.  RE: Central LUA Server

    Trusted Advisor
    Posted Jan 07, 2014 04:29 AM

    Wow 15 LUA's that's a lot only usually need one.

    Have you ever thought of phasing out the LUA's and using GUPs instead? You can then use the Content Distributuion tool to monitor the GUPs in one place as there is no tool to monitor multiple LUa's in a single GUI. 

    Group Update Provider: Sizing and Scaling Guidelines

    http://www.symantec.com/business/support/index?page=content&id=TECH95353

    Best Practices with Symantec Endpoint Protection (SEP) Group Update Providers (GUP)

    http://www.symantec.com/business/support/index?page=content&id=TECH93813

    Configuring the Group Update Provider (GUP) in Symantec Endpoint Protection 11.0 RU5

    http://www.symantec.com/business/support/index?page=content&id=TECH96419&locale=en_US

    Guide to create the GUP for remote location

    https://www-secure.symantec.com/connect/downloads/create-gup-symantec-can-help-conserve-bandwidth-clients-remote-location

    How to Setup a Group Update Provider (GUP)

    http://www.symantec.com/business/support/index?page=content&id=TECH105005&locale=en_US

    Tips For Installing SEP In A Low Bandwidth Environment

    https://www-secure.symantec.com/connect/articles/tips-installing-sep-low-bandwidth-environment

    Symantec Endpoint Protection (SEP) Group Update Providers (GUPs) Selection

    https://www.symantec.com/business/support/index?page=content&id=TECH198702

    Troubleshooting the Group Update Provider (GUP) in Symantec Endpoint Protection (SEP)

    http://www.symantec.com/docs/TECH104539

    How can we check which content SEP 12.1 clients are downloading from GUP?

    https://www-secure.symantec.com/connect/articles/how-can-we-check-which-content-sep-121-clients-are-downloading-gup

    How to confirm if SEP Clients are receiving LiveUpdate content from Group Update Providers (GUPs)

    http://www.symantec.com/business/support/index?page=content&id=TECH97190

    SEP Content Distribution Monitor (for GUP health-checking)

    https://www-secure.symantec.com/connect/downloads/sep-content-distribution-monitor

    How to analyze Debug logs from GUP to determine which clients are taking definitions from GUP

     https://www-secure.symantec.com/connect/articles/how-analyze-debug-logs-gup-determine-which-clients-are-taking-definitions-gup

     

    Video’s created on Group Update Provider on the Symantec Connect website.

     https://www-secure.symantec.com/connect/videos/group-update-providers-part-1

    https://www-secure.symantec.com/connect/videos/group-update-providers-part-2

     

    GUP content monitoring tool video

    https://www-secure.symantec.com/connect/videos/sep-content-distribution-monitor-introduction

     



  • 5.  RE: Central LUA Server

    Posted Jan 07, 2014 04:37 AM

    Hi Guys...

    I understand its too many in numbers but due to the network size we cannot gurantee the avaialbility of GUP thus had to implement LUA in place.

    Sabestian: one LUA to monitor and administer its remote distribution centers. R u talking about

    http://www.symantec.com/connect/articles/configuring-distribution-center-lua

     

     



  • 6.  RE: Central LUA Server

    Posted Jan 07, 2014 04:42 AM

    Hi Ajit Jha,

    Most organizations need only one or two LUA 2.x servers.  (I gather that these 15 servers are within the organizations of different companies/distinct and unconnected network environments.)  As there's generally no need for a console which would collect the data from large numbers of LUA servers, there's no SPC or similar console for them.

    One cheap-and-cheerful solution would be to configure the emailing of notifications from each of the LUA servers.  Have one central email account receive the alerts from each server whenever there is a failure of a task to complete.  Also configure it to send mails when tasks complete successfully.  Mail filtering rules in Outlook (or another mail client) can route those mails into folders for you.  Open those filters, sort by date and at a glance you can tell which of the servers has successfully completed jobs, when, and which servers have what errors.

    Have the web interface of the 15 LUA servers bookmarked, or (should port 7070 be blocked at each company's firewall) have a Remote Desktop Connection ready to go with the logon details of each, should you need to go in and take a closer look at any of them.

    Hope this helps!!  Please keep the thread up-to-date with news if this has answered your question or if there's anything else needed.

    Mick

     

     

     



  • 7.  RE: Central LUA Server

    Trusted Advisor
    Posted Jan 07, 2014 04:44 AM

    Assuming best practices are followed, a Group Update Provider (GUP) is officially supported providing content updates for up to 10,000 connected SEP Clients. That said, if a GUP is running on a machine that also performs other functions, such as a Domain Controller, Web Server or File Share, shared resource utilisation impact should be considered. 

    15 GUPs would provide enough support for 150,000 clients plus any machine (with SEP installed) can be enabled or disabled as a GUP. The content distribution tool would advise of availablity of the GUPs. There are also search criteria within the SEPM to search for enabled GUP's. 



  • 8.  RE: Central LUA Server

    Posted Jan 07, 2014 04:46 AM

    Yes for example, but that would be quite a different architecture to what you have in place already. Instead of 15 separate LUAs this would be a one LUA with several remote distribution centers - centralized with mgmt from one place, download happening only on this one and then distributed to remote sites. Some more info to remote distribution centers:

    https://www-secure.symantec.com/connect/articles/liveupdate-administrator-how-configure-remote-distribution-center

    https://www-secure.symantec.com/connect/videos/liveupdate-administrator-how-configure-remote-distribution-center



  • 9.  RE: Central LUA Server

    Posted Jan 10, 2014 09:29 AM

    Hi Ajit Jha,

    Just a ping to see if you have any further questions?  This thread is still marked "needs solution."

    Many thanks,

    Mick



  • 10.  RE: Central LUA Server

    Posted Jan 13, 2014 12:27 AM

    Hi All,

    I am in process of achiveing my solution, we are working on it in a test lab and will update it soon.

    Thank you everyone for yiur ideas and comments.