Video Screencast Help

GUP not Update

Created: 16 Apr 2013 | 9 comments

Hi team,

In my scenario 14000 client's and 900 Gup.

Issue: alternate day few GUP update or Gup updated but client not taking update fron GUP In 12.1 RU2 .

 so my Backdated  client count increases can give what is excat sloulation .

So we will troubaleshoot .

Operating Systems:

Comments 9 CommentsJump to latest comment

ᗺrian's picture

Enable sylink logging on the affected client and post the log here for review

How to enable Sylink debugging for the Symantec Endpoint Protection 11.x and 12.1 client in the Windows Registry

padding: 1px;padding-bottom: 3px ;font: 12px Arial; text-align: left;">Article:TECH104758 padding: 1px;font: 12px Arial; text-align: left;"> |  padding: 0px;font: 12px Arial; text-align: left;">Created: 2008-01-18 padding: 1px;font: 12px Arial; text-align: left;"> |  padding: 1px;font: 12px Arial; text-align: left;">Updated: 2013-02-26 padding: 1px;font: 12px Arial; text-align: left;"> |  padding: 1px;font: 12px Arial; text-align: left;">Article URL

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Mithun Sanghavi's picture


I hope all the GUP client machines are not Windows XP machines.

From where does the GUP take update (SEPM / LUA)?

By default (As per Microsoft), Windows XP has a maximum limit of 10 inbound concurrent connections and for Windows 7 it is 20 inbound concurrent connections.

Are the GUP clients are of the same version as of SEPM?

Also post sylink logs from one of GUP server (as suggested in above comment).

I would suggest you to check these Articles:

Group Update Provider is not updating all the clients

Please test the Connection between SEPM <<>> GUP <<>> Clients.

Troubleshooting the Group Update Provider (GUP) in Symantec Endpoint Protection (SEP)

SEP Content Distribution Monitor (for GUP health-checking)

SEP Content Distribution Monitor - Introduction

Hope that helps!!

Mithun Sanghavi
Associate Security Architect


Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

SameerU's picture


Please check whether the port 2967 is opened bi-directionally.


Ambesh_444's picture


Could you check if the GUP clients are updated with Latest definitions?

Is the Port 2967 open on the Machines?

First identify whether definitions are reallly corrupted or not.

Check this article: How to determine if virus definitions of Symantec Endpoint Protection client (SEP) 11 or 12 Small Business Edition, are corrupted   

How to clear out corrupted definitions for a Symantec Endpoint Protection Client manuall

Troubleshooting the Group Update Provider (GUP) in Symantec Endpoint Protection (SEP)

Which communication ports does Symantec Endpoint Protection use?

How to confirm if SEP Clients are receiving LiveUpdate content from Group Update Providers (GUPs)

Thank& Regards,


"Your satisfaction is very important to us. If you find above information helpful or it has resolved your issue. Please don't forget to mark the thread as solved."

consoleadmin's picture

When this problem has occured?

Have you check the port 2967 is open or not?

Have you check the share folder is updated with latest content or not?


AjinBabu's picture


Weather GUP clients are getting updated?

Can you check the communication between GUP and Clients?

Check the shared updates folder on GUP?



Jwelina's picture

hi Anil,

please check.

Though Proxy is configured if you could please go through articles below might help

Here are few Articles which may help you...


Here are the Symantec Knowledgebase Articles for the same:

1) How to configure a Symantec Endpoint Protection Manager (SEPM) 12.1 client to use a proxy for LiveUpdate

2) How to setup the Symantec Endpoint Protection Manager to use specific proxy settings for LiveUpdate

3) Configuring Symantec Endpoint Protection Manager to connect to a proxy server to access the Internet

4) Specifying a proxy server for client submissions and other external communications

5) What is the ISAPI proxy setting?

6) How to bypass the IIS proxy after upgrading to Symantec Endpoint Protection Manager 12.1

Anil kondalkar's picture

Hi Team ,

Please find the attached sylink moniter log.

GUP_Log.txt 216.49 KB
Client_Log.txt 433.8 KB