Endpoint Protection

I created a new win 2k3 server box specifically to be the GUP.  In SEPM i have configured it to be the GUP and i then assigned the updated policy.  However, the shared updates folder isnt appearing on the GUP workstation.

Here is an article for GUP Troubleshooting

Title: 'Troubleshooting the Group Update Provider (GUP) in Symantec Endpoint Protection (SEP)'
Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2008040113243148?Open&seg=ent

Hey jglass,

Is the GUP flag set to "true" in the SEPM? Right click the GUP box, click edit properties, look on the general tab at the bottom.

Mike

Hello,

Please confirm whether correct GUP is selected, I mean Multiple or Single. If you are using Multiple and in policy Single is selected then Shared Updates Folder is not created.

If you are using Single GUP them make sure policy reflects the same GUP.

I hope this would help.

Thanks,
Arjun Shelke

Right, that's another good observation. What version of SEP are you currently using on the GUP?


Mike

In addition to this, you might want to check whether GUP (server) and clients are in same group.

That field is not there under the general tab for the workstations properties. 

This is the only GUP i have setup.  It is also in the same group as the computers i want it to distribute the updates to.

11.0.4202.75 is the version installed on the GUP.

They are. 

Okay, the shared updates folder is now showing up on the GUP, however, under the General tab for the GUP's properties no field is being displayed that mentions it being a GUP.

How can i verify if my clients are pulling the update from the GUP?  Also, in SEPM, under the GUP's properties it does not show a field identifying it as the GUP.  However, the shared updates folder is on the GUP. 

You can check it from the sylink log


Title: 'How to confirm if Clients are receiving LiveUpdate content from Group Update Providers (GUPs)'
Document ID: 2009110311145748
> Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2009110311145748?Open&seg=ent


or

On the client, look in the registry under
HKEY_LOCAL_MACHINE\Software\Symantec\Symantec EndpointProtection\LiveUpdate.
Check the settings for the following keys:
■ UseLiveUpdateServer
If this key is set to 1, the client uses an internal LiveUpdate server or Symantec
LiveUpdate directly.
■ UseManagementServer
If this key is set to 1, the client uses the management server.
■ UseMasterClient
If this key is set to 1, the client uses a group update provider

Is there a reason why the GUP field isnt displaying under the GUP's properties dialog box?

didn;t you click OK after entering the GUP IP in the SEPM console ( LU policy)!

To configure a Group Update Provider
use the steps

1. In the console, click Policies.
2. Under View Policies, click LiveUpdate.
3. In the LiveUpdate Policies pane, on the LiveUpdate Settings tab, select the policy to edit.
4. In the Tasks pane, click Edit the Policy.
5. In the LiveUpdate Policy window, click Server Settings.
6. On the Server Settings page, under Internal or External LiveUpdate Server, check Use the default management server (recommended). Do not check Use a LiveUpdate server. The Group Update Provider that you configure acts as the default LiveUpdate server.
7. Under Group Update Provider, check Use the Group Update Provider.
8. Click Group Update Provider.
9. In the Group Update Provider dialog box, configure the type of Group Update Provider. Note: Legacy clients can only use a single Group Update Provider. Legacy clients do not support multiple Group Update Providers.
10. In the Group Update Provider dialog box, configure the options to control how content is downloaded and stored on the Group Update Provider computer. Click Help for information about content downloads.
11. Click OK.

link

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2009092901593448?Open&seg=ent

Those are the steps i followed to configure the GUP.  However, under the GUP's properties, it doesnt list it as the GUP.  Yet, it has the shared updates folder with files in it. 

Is there a way that i can set the client/server to only send the update files at certain times?  If possible, id like to set the clients to only pull the updates after business hours.

there is no provosion of time allocated at this moment. But you may use firewall rules to time specific connection to GUP machine.