Endpoint Protection

Hi everybody.
which is the best way for deploy updates? and what is diffrent between them?,
Thanks
Best Regards.
Fatih

You may find some answers here.

https://www-secure.symantec.com/connect/forums/when-use-liveupdate-administrator

Thomas

GUP is used for a large network so that PCs won't get their updates from 1 server. This will greatly affect your bandwidth usage.

The best way to deploy updates would depend on:
How big is your network.
What is the network topology.
Bandwidth available.

I used to run LUA with SAV. Replicated the LiveUpdate share to branch offices with DFSR so I wouldn't have to set up a SAV Server on each site. Since GUP does the same, without any additional administration or software, using GUPs was a no-brainer for me. In fact, toward the end of our SAV days, LUA failed somehow and I couldn't get it working. Reverted for a short time to VDT for all clients at all sites until we could get them on SEP. LUA is just one more thing to go wrong.

Tip for using GUP: If you have a DC on each site, specify the FQDN of the domain as the GUP. DCs will automatically become GUPs, and clients will automatically choose the closest.

Hello.
Yes we have large network. more than 10 locations connect to center with Dsl modems. and connection is change about 512k and 1024. our network topolgy is star type. all servers in same city. there are another servers in another cities. but not much we want to control with star topology. It is usefull for us. total 650 or more computers in diffrent locations.
We have already 4 GUP Server. I wantted to know Am ı choice GUP or LUA?
Thank you
Best Regards.
Fatih

You did the right thing. Just monitor your inventory from time to time if all the PCs get their updates. No PC should have a definition older than 2 days is common practice. If some PCs don't get their updates at a timely interval, add a GUP on their area.

Hi, I remember you can manage updates via GUP i think it can handle 200+ clients if I am not mistaken, but just incase your network clients increase you can always upgrade it to a LU Server.

GUP

The Group Update Provider was a feature request to support designating a particular client to serve as a computer that will get content updates and publish them. This is designed to provide functionality vaguely similar to configuring a legacy Symantec AntiVirus client as a secondary server.

LUA

The LiveUpdate Administration Utility was developed to address the two major concerns of network administrators: high levels of external traffic caused by users using LiveUpdate, and network security. The LiveUpdate Administration Utility allows an administrator to modify LiveUpdate so that network users can download program and virus definition updates from an internal server instead of the Symantec LiveUpdate server over the Internet.

Latest version
Version: 2.2.1
Release Date: Oct 2008
Files to download: LUAESD.exe <ftp://ftp.symantec.com/public/english_us_canada/liveupdate/lua_2.2.1/LUAESD.exe>
readme file: release notes <http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008101508183348>
Administrator's guide: LiveUpdate_Administrator_Users_Guide.pdf <ftp://ftp.symantec.com/public/english_us_canada/liveupdate/lua_2.1/>
To update log into the Administration Utility and hit the liveupdate button in the upper right corner of the window.


Note
In using this update option you have to consider how big your network is and how far can your network go.
Symantec has a continous update you have to check if  lua or gup is feasible on your setup.
But for me I suggest to use GUP instaed of LUA
Because nwith GUP you will conserver more bandwith rather than LUA.

You can also control settings when using a GUP like the ability (or not) to bypass the GUP for updates defined in time (note the option to bypass is disabled by default), the amount of disk space used for content revisions, maximum number of simultaneous connections for content updates and the number of days before unused content is deleted from the GUP.  All settings can help tweak performance for your GUP and the amount of clients at each remote site and how often they are offline (turned off).

I know you said you had 650 total remote computers, but what is your maximum remote computers per site, per GUP?  Paul's statement about GUP's handling up to 200 clients is true (based on my memory unless Symantec changed the spec lately).