Endpoint Protection

We have deployed SEPM and have GUP servers for definition updates. The policy is set in such a way that the clients will reachout to the SEPM console every 2 hours to get updates. Symantec Liveupdate server are blocked on the network firewall and Live Update feature is disabled.

Problem : 
1. If a roaming laptop user connects his laptop which does not have updated definitions to the company network, it make take upto 2 hours to  get the updates. Force update is not possible as Liveupdate is disabled.

2. Laptop users will not be able do a Force Liveupdate as feature is disabled.

Solution required : Can the Liveupdate feature be configured to connect to multiple servers in such a way :

1. Primary - Internal SEPM / GUP

2. Secondary - Symantec Liveupdate servers.

If the user is connected to the company network, the client will receive updates from the internal GUP.

If the user is connected from outisde company network  - the client will receive updates from Symantec Liveupdate servers.

Hello,

What version of SEP are you running? Is that SEP 11.x or SEP 12.1?

For clients moving out of the network, 

For SEP 11.x, 

How to configure mobile computers to automatically download virus definitions when disconnected from the Symantec Endpoint Protection Management console

http://www.symantec.com/docs/TECH104571

For SEP 12.1

Configuring mobile computers to automatically download definitions when disconnected from the Symantec Endpoint Protection 12.1 Management console

http://www.symantec.com/docs/TECH177361

Also, Check this Article:

What happens when both LiveUpdate Server and Default Management server are configured in a LiveUpdate policy?

http://www.symantec.com/docs/TECH140817

Hope that helps!!