Endpoint Protection

Hi team,

In my scenario 14000 client's and 900 Gup.

Issue: alternate day few GUP update or Gup updated but client not taking update fron GUP In 12.1 RU2 .

 so my Backdated  client count increases can give what is excat sloulation .

So we will troubaleshoot .

Enable sylink logging on the affected client and post the log here for review

How to enable Sylink debugging for the Symantec Endpoint Protection 11.x and 12.1 client in the Windows Registry

Hello,

I hope all the GUP client machines are not Windows XP machines.

From where does the GUP take update (SEPM / LUA)?

By default (As per Microsoft), Windows XP has a maximum limit of 10 inbound concurrent connections and for Windows 7 it is 20 inbound concurrent connections.

Are the GUP clients are of the same version as of SEPM?

Also post sylink logs from one of GUP server (as suggested in above comment).

I would suggest you to check these Articles:

Group Update Provider is not updating all the clients

http://www.symantec.com/docs/TECH140798

Please test the Connection between SEPM <<>> GUP <<>> Clients.

http://www.symantec.com/docs/TECH153328

Troubleshooting the Group Update Provider (GUP) in Symantec Endpoint Protection (SEP)

http://www.symantec.com/docs/TECH104539

SEP Content Distribution Monitor (for GUP health-checking)

https://www-secure.symantec.com/connect/downloads/sep-content-distribution-monitor

SEP Content Distribution Monitor - Introduction

https://www-secure.symantec.com/connect/videos/sep-content-distribution-monitor-introduction

Hope that helps!!

Hi

Please check whether the port 2967 is opened bi-directionally.

Regards

Hello,

Could you check if the GUP clients are updated with Latest definitions?

Is the Port 2967 open on the Machines?

First identify whether definitions are reallly corrupted or not.

Check this article: How to determine if virus definitions of Symantec Endpoint Protection client (SEP) 11 or 12 Small Business Edition, are corrupted

How to clear out corrupted definitions for a Symantec Endpoint Protection Client manuall

http://www.symantec.com/business/support/index?page=content&id=TECH103176&locale=en_US

Troubleshooting the Group Update Provider (GUP) in Symantec Endpoint Protection (SEP)

http://www.symantec.com/docs/TECH104539

Which communication ports does Symantec Endpoint Protection use?

http://www.symantec.com/docs/TECH163787

How to confirm if SEP Clients are receiving LiveUpdate content from Group Update Providers (GUPs)

http://www.symantec.com/docs/TECH97190

When this problem has occured?

Have you check the port 2967 is open or not?

Have you check the share folder is updated with latest content or not?

https://www-secure.symantec.com/connect/forums/definitions-are-corrupted-gup

https://www-secure.symantec.com/connect/forums/sep-121-clients-not-updating-gup#comment-7060641

HI, 

Weather GUP clients are getting updated?

Can you check the communication between GUP and Clients?

Check the shared updates folder on GUP?

Regards

Ajin

hi Anil,

please check.

https://www-secure.symantec.com/connect/forums/gup-not-providing-update-clients-clients-are-able

Though Proxy is configured if you could please go through articles below might help

Here are few Articles which may help you...

Hello,

Here are the Symantec Knowledgebase Articles for the same:

1) How to configure a Symantec Endpoint Protection Manager (SEPM) 12.1 client to use a proxy for LiveUpdate

http://www.symantec.com/docs/TECH167247

2) How to setup the Symantec Endpoint Protection Manager to use specific proxy settings for LiveUpdate

http://www.symantec.com/docs/TECH102335

3) Configuring Symantec Endpoint Protection Manager to connect to a proxy server to access the Internet

http://www.symantec.com/docs/HOWTO55201

4) Specifying a proxy server for client submissions and other external communications

http://www.symantec.com/docs/HOWTO55363

5) What is the ISAPI proxy setting?

http://www.symantec.com/docs/TECH163729

6) How to bypass the IIS proxy after upgrading to Symantec Endpoint Protection Manager 12.1

http://www.symantec.com/docs/TECH162324

Hi Team ,

Please find the attached sylink moniter log.

Attachment(s)

Client_Log.txt   433 KB 1 version

GUP_Log.txt   216 KB 1 version

Hi

Please refer the link below

http://www.symantec.com/business/support/index?page=content&id=TECH91509&actp=search&viewlocale=en_US&searchid=1366197425415

Regards