Hello All,

I will be upgrading my SEP clients from SEP 12.1.671.4971 to SEP 12.1 RU1 MP1. Clients are configured to get definitions and content from a GUP in their local LAN and never from a Live Update Server. Note that I do not have an internal Live Update Server. 

So, my question to the community is: will the client get the one time INITIAL Definitions and Content, as part of the client upgrade, from the GUP they are configured to use in their policy, or are they forced to get those initials defs and content from the Live update Symantec server? 

Thanks

IT Monkey Boy

It should come from the GUP.

You can also create packages with the latest updates:

How to deploy the Symantec Endpoint Protection (SEP) client Release Update 5 or newer with current virus definitions and intrusion prevention signatures.

http://www.symantec.com/business/support/index?page=content&id=TECH104779&locale=en_US

Hello Brian81,

Thanks for your reply.  I did not mention I need the smaller "Basic" install package due to bandwidth concerns. 

You mention that  it "should" come from the GUP.  Is this something you have tested to see if it works this way?  Just curious, because I have found some products not working as supposedly designed, and so I ask about a proof of concept here. 

Many thanks.

IT Monkey Boy

During testing I found that when pushed via SCCM or SEPM, or remote deploy tool, the updates would come from the GUP. I was able to verify with a wireshark capture filter set to port 2963

If you have the ability to try it out on a test client, I would do that. But yes, I know some times things don't go as planned, even though they should ;)

Another option you use is to increase the time that clients try to contact the GUP before timing out & trying the SEPM as per the following screenshot.

After the upgrade, remember to decrease the timeout to the original value again.