Our GUP at a remote site isn't receiving updates and as such isn't pushing them out to that site. Everything looks fine, it's connected to the SEPM server, the server can apply the latest policy, so I'm confused. Something odd shows in the system log. "Using Group Update Provider type: Multiple Group Update Providers" is listed every couple of minutes. There are patches in the log where is shows "Downloaded new content update from Group Update Provider failed. Remote file path: http://x:2967/content/{535CB6A4-441F-4e8a-A897-804CD859100E}/140829003/Full.zip"

Any ideas?

Thanks

I haven't. I'll have to try that during morning hours.

Hi,

Thank you for posting in Symantec community.

Check the steps given in these articles:

Test SEP to GUP and GUP to SEPM communication

http://www.symantec.com/docs/TECH153328 

Group Update Provider is not updating all the clients

http://www.symantec.com/docs/TECH140798 

Enable the Sylink logging

http://www.symantec.com/business/support/index?page=content&id=TECH104758

post the logs

Thanks. Should I do Sylink debug or Symhelp? Does Sylink debug continually log?

You can actually enable sylink debugging via symhelp if you wish or just run symhelp to see what it shows.

Sylink debugging will continuously run until you turn it off, although the log will rollover depending on how large you want to set it but it won't grow out of control.

Troubleshooting computer issues with the Symantec Help support tool

http://www.symantec.com/docs/HOWTO80839

How to use the advanced debug logging options for the Symantec Endpoint Protection client in SymHelp

http://www.symantec.com/docs/TECH207795

whats the definition date on SEPM and GUP?

if GUP is outdated then it would request a large chunk of defs from SEPM, in your network do you block anything when size reacheds XX MB ?

When will a client download a full definition set from a Symantec Endpoint Protection Manager or Group Update Provider?

http://www.symantec.com/business/support/index?page=content&id=TECH131528

if your GUP is way too outdated, then update the GUP first with intelligent updater.

if it still does not solve the issue. Post the sylink.log please.

Just so I'm clear, is your GUPs defintions themselves up to date? and the problem is the GUP just won't update the content which the clients receive?

SEPM 9/3/14 r22

SEP/GUP 8/14/14 r25

SEPM checks daily between midnight and 6am.

Basically

And you do have plenty of free space? May want to quickly run the symhelp tool, it will show if definition corruption is present.

There is plenty of space, I made sure to check that first. I ran it, and turned logging on but can't find the sylink debug log file. I did save the sdbz file.

Log should be in C:\sylink.log

Your SEPM may not have delta to update the GUP.. its mising almost a 20 + days def

update your GUP with intelligent updater, check tomorrow it will all be updated.

huh? inteeligent updater don't update gup content for clients and it would update more quickly than one day

Brian, here's the log so far. Hope it helps.

Attachment(s)

Sylink_20.zip   42 KB 1 version

Hello Nathan to back up what I was saying from the log its evident that its trying to download a big chunk

Remaining bytes to download: 460162787 

thats arround 460 MB. 

check the below thread..try it , if you still face the issue will try other steps

https://www-secure.symantec.com/connect/forums/sep-11074001398-not-download-defs-sepm

So run the definitions (latest 20140904-021-v5i32.exe on http://www.symantec.com/security_response/definitions/download/detail.jsp?gid=sep) on the GUP server? Will it require a reboot?

Yea that's the one. No won't require a reboot.

Ok, thanks will give that a try and see how things are next week.

Seems it isn't working still. Hasn't updated since I installed the Intelligent Updater.

Attachment(s)

Sylink_21.zip   1.29 MB 1 version