Video Screencast Help

Comments 9 CommentsJump to latest comment

Mithun Sanghavi's picture


Could you check if the GUP clients are updated with Latest definitions?

Is the Port 2967 open on the Machines?

Troubleshooting the Group Update Provider (GUP) in Symantec Endpoint Protection (SEP)

Which communication ports does Symantec Endpoint Protection use?

How to confirm if SEP Clients are receiving LiveUpdate content from Group Update Providers (GUPs)

Hope that helps!!

Mithun Sanghavi
Associate Security Architect


Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Vikram Kumar-SAV to SEP's picture

1. how many such GUPs ?

2. Are clients and GUPs in same subnet?

3. Is GUP downloading Delta Definitions ?

4. From a client machine can you telnet port 2967 ?

5. What is the version of SEP clients and GUP ?

6. Is GUP client working properly (Disk Space, SMC service restarted etc)

I guess one of these questions will also answer your basic question

Vikram Kumar

Symantec Consultant

The most helpful part of entire Symantec connect is the Search use it.

Sumit G's picture

Have you create a new gup. if it new then pls find the attach document for the guidance to create it.

kindly note that gup will be work in that condition if gup policy also assign on same folder where gup placed

to check the health of GUP. find the link


Sumit G.

pete_4u2002's picture

what is the LU policy set?

are clients able to connect to SEPM if GUP not available?

Baljeet Singh's picture

Dear open the 2967 port in GUP (Group Update Provider) server for SEP client machines.

Create a Policy in Live update provider server.

If the GUP server not provide the update to client machine after half hour automatically client machines taking update management server.

If you want client taking update only by GUP server mark on never...under the GUP server live update policy.

And also install the server package on SEP GUP server machine..Not install the full feature package.

Chetan Savade's picture


First identify whether GUP definitions are corrupted or not.

Check this article: How to determine if virus definitions of Symantec Endpoint Protection client (SEP) 11 or 12 Small Business Edition, are corrupted   

How to clear out corrupted definitions for a Symantec Endpoint Protection Client manuall


In some instances, Symantec Technical Support may recommend the use of an unsupported tool that automates the removal of corrupted SEP definitions. For details please see Using the "Rx4DefsSEP" utility at

If GUP is updated, run Sylink monitor tool on 2-3 affected clients & submit those logs to review.

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

Sumit G's picture

Hi- Your issue has been resolve or still pending?


Sumit G.