Endpoint Protection

 View Only

  • 1.  Explicit Group Update Provider list on SEP 11.x clients

    Posted Jan 14, 2013 05:06 AM

    Hi

    If I configure explicit GUPs based on subnet in SEP 12.1.2. Will my SEP 11.7 clients honor these rules or do all the clients need to be on SEP 12.1.2 before i implement this functionality?

    Regards

    Torb



  • 2.  RE: Explicit Group Update Provider list on SEP 11.x clients

    Broadcom Employee
    Posted Jan 14, 2013 05:20 AM

    The workflow could be summarized as follows:

    • The Administrator uses a 12.1.2 SEPM to create mapping via a Policy: This Maps "client subnet" to  "GUP to use". 
    • A SEP 12.1.2 Client parses the new policy and extracts relevant data from the GUP list to select the new GUP Type. 
    • The SEP 12.1.2 Client then verifies:

    "Am I in the subnet that is supposed to use the Explicit GUP?"

    "Which subnet is the Explicit GUP in - is it in a different subnet than mine?"

    "Who is the actual GUP?" 

    • The Client will first try to use available local GUPs before using any of the Explicit GUPs
    • The GUP itself need not be a 12.1.2 Client.

    check this link

    http://www.symantec.com/business/support/index?page=content&id=TECH198640



  • 3.  RE: Explicit Group Update Provider list on SEP 11.x clients

    Posted Jan 14, 2013 05:29 AM

    I'm guessing that the text "A SEP 12.1.2 Client parses the new policy and extracts relevant data from the GUP list to select the new GUP Type." means that only 12.1.2 Clients can use Explicit GUPS and that all clients need to be upgrade to 12.1.2 before implementing the functionality.

     

    Regards

    Torb



  • 4.  RE: Explicit Group Update Provider list on SEP 11.x clients

    Posted Jan 14, 2013 05:31 AM

    Should be of SEP 12.1 , SEPM and client should be of same version.

     



  • 5.  RE: Explicit Group Update Provider list on SEP 11.x clients

    Posted Jan 14, 2013 05:32 AM

    Essentially, as the logic is done by the SEP Client itself (not the GUP), it's the clients that have to be on 12.1RU2, not the GUP



  • 6.  RE: Explicit Group Update Provider list on SEP 11.x clients

    Broadcom Employee
    Posted Jan 14, 2013 05:36 AM

    the above post says the GUP /client need not to be manadatory 12.1 ru2. it's been taken from the explicit GUP kb article.

    • The GUP itself need not be a 12.1.2 Client.

    check this link

    http://www.symantec.com/business/support/index?page=content&id=TECH198640



  • 7.  RE: Explicit Group Update Provider list on SEP 11.x clients

    Posted Jan 14, 2013 05:38 AM

    Hi,

    pete has describe well about Explicit GUPs in the above post. The article shared in the link has detailed description with the Scenario.

    Also check

    http://www.symantec.com/business/support/index?page=content&id=TECH196741&actp=search&viewlocale=en_US&searchid=1358159794259

    http://www.symantec.com/business/support/index?page=content&id=TECH198702&actp=search&viewlocale=en_US&searchid=1358159794259



  • 8.  RE: Explicit Group Update Provider list on SEP 11.x clients
    Best Answer

    Broadcom Employee
    Posted Jan 14, 2013 07:23 AM

    Hi

    If I configure explicit GUPs based on subnet in SEP 12.1.2. Will my SEP 11.7 clients honor these rules or do all the clients need to be on SEP 12.1.2 before i implement this functionality?

    --> Refer the following chart.

    Table: How the explicit type of Group Update Provider can be used based on the software versions in the network


    Symantec Endpoint Protection Manager Version

    Client Versions

    Group Update Provider Client Version

    Types of Group Update Provider that you can use

    12.1.2 and higher

    12.1.2 and higher

    11.0.5 and higher

    You can configure both static and dynamic explicit Group Update Providers.

    12.1.2 and higher

    12.1.2 and higher

    11.0.0 to 11.0.4

    You can configure an 11.0.4 client computer as a single Group Update Provider. You can then use it in an explicit Group Update Provider list as a static Group Update Provider.

    12.1.2 and higher

    12.1.1 and lower

    Any

    You can configure single or multiple Group Update Providers, but not explicit Group Update Providers because the clients do not support them.

    12.1.1 and lower

    Any

    Any

    You can configure single or multiple Group Update Providers, but not any type of explicit Group Update Provider because they are not available in the Symantec Endpoint Protection Manager.

     

    Check this article: About the types of Group Update Provider

    http://www.symantec.com/docs/HOWTO80957