Video Screencast Help
Search Video Help Close Back
to help
Not able to make it to Vision this year? Get a sampling in the Best of Vision on Demand group.

Do GUPs have to be in the same folder as the clients they are updating?

Updated: 21 May 2010 | 11 comments
Davinci_uk's picture
0 0 Votes
Login to vote
This issue has been solved. See solution.

I would like to put GUPs inb their own group purely for orgnsiation reasons, but does they have to be in the same folder as the other clients that will update from them?  I am thinking no, but you never know.

Comments

Rafeeq's picture
08
Dec
2009
0 Votes 0
Login to vote

Hi

yes has to be in same group

http://www.symantec.com/connect/forums/multiple-gup-sepmr5

Best practices for Group Update Provider (GUP) from Symantec Endpoint Protection MR3 or earlier builds

http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/230d1cf8e23d01e2882574a90062d485?OpenDocument

Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq

Prachand's picture
08
Dec
2009
0 Votes 0
Login to vote

If you are taking about

If you are taking about GUP in RU5 the answer in NO
In RU5 the GUP is no more GROUP dependent. The GUP is dependent on the SUBNET. the client will  get update from the GUP that is in its subnet, irrespective of the group they are in

Prachand Kumar MCSE-2003 Symantec Technical Specialist (SCTS)

Davinci_uk's picture
08
Dec
2009
0 Votes 0
Login to vote

Thanks Pra

Thanks Pra

Rick Bywalski's picture
08
Dec
2009
0 Votes 0
Login to vote

Yes and No

As Prachand pointed out there were major changes with RU5 and I have not personally had a chance to test all of them out.

Prior to RU5  you needed atleast on client in the group with the GUP to force it to activate and pull definitions down.    This also would be what caused the updated definitions to pull down too.   Once activated machines from other groups could be made to point to it because it was alread a GUP.  Works but doesnt sound like it will do what your wanting to do.   I will have to test out what Prachand says yet and see if it works as I am using a sever as my gup and would prefer to have it following a different scan schedule than it is now.

pete_4u2002's picture
08
Dec
2009
0 Votes 0
Login to vote

Enter subject (optional)

GUP can be part of different group, but it needs to be in same LAN as that of client takingthe updates from GUP.

Davinci_uk's picture
09
Dec
2009
0 Votes 0
Login to vote

Its all fine, answered

Its all fine, answered perfectly.

Was having an issue with a GUP that I had grouped outside of the main group.

But is working fine - yes, we are using RU5 and muktple GUP options.

Davinci_uk's picture
10
Dec
2009
0 Votes 0
Login to vote

NOTE - THEY DO NOT BEED THE

NOTE - THEY DO NOT BEED THE SAME GROUP.

THEY HOWEVER DO NEED TO BE IN THE SAME POLICY AS THE DESKTOPS I.E. WHERE THE GUPS ARE DEFINED

Davinci_uk's picture
10
Dec
2009
0 Votes 0
Login to vote

If they are not in the same

If they are not in the same policy, they will not appear in the globalist.xml and hence SEPM cannot tell the clients to use GUP xxxx...etc

norman's picture
10
Dec
2009
1 Vote +1
Login to vote

No need for same group and no need for same policy

GUPs do not have to be in the same group.

Example - you have a group that contains a bunch of systems that you would like to act as GUPs for other groups.  Typically, this occurs if you are using AD sync for group management.  You create an LU  policy for that group which specifies "localhost" as the GUP.  This makes all clients in that group a GUP.  You can then apply an LU policy to other groups which refer to one or more of the GUPs in your GUP group.  Simple and it works - RU5 or earlier.

Jeremy Dundon's picture
10
Dec
2009
2 Votes +2
Login to vote

This is correct

As long as 2 conditions are fulfilled then clients can update from GUPs. (RU5)

1. The GUP gets a LiveUpdate settings policy that identifies it as a GUP, and reports its status to the SEPM.

AND

2. The client gets a LiveUpdate settings policy that tells it to use the GUP list, and there is one in its subnet.