Endpoint Protection

I have many gups defined for subnets in one policy.  One of the subnet 10.189.0.0/16 is defined as subnet 10.189.0.0 and the gup for that is 10.81.62.xx defined as #1 in the policy of 900 lines.  I can telnet from the client subnet to gup on port2967 and the gup is able to download updates from the SEPM as well.  However some of my clients in the 10.189.0.0 subnet shows 0 matches for gups in the system log and cannot update from the GUP.  Please advise.

Have you enabled sylink logging on an affected client to see what is going on?

http://www.symantec.com/docs/TECH104758

try these steps on one of the affected client

Back up registry
1. Click Start, and then click Run.
2. In the Open box, type regedt32, and then click OK.
3. Locate HKEY_USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\.
4. Right Click on Connections from the menu, click Export.
5. In the Save inbox, select a location in which to save the .reg file, type a file name in the File name box, and then click Save. 

Remove DefaultConnectionSettings & SavedLegacySettings
1. Delete the following registry keys:
HKEY_USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\DefaultConnectionSettings
HKEY_USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings
2. Reboot the system.

Note: Windows will detect the keys have been removed and re-generate the keys to the current values.