Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

GUP, SEPM and Symantec Live update are all configured for virus definitions

Created: 19 Dec 2012 • Updated: 20 Dec 2012 | 4 comments
This issue has been solved. See solution.

 Hi,

I have more than 20 GUP servers globally and one SEPM with more than 10 000 Sep clients and a SQL Server. All my GUP servers are configured as shown below, with all the options checked.

Questions:

  1. Where will the Sep clients download the updates from, Will they get them from SEPM or Liveupdate server or the Gup servers.
  2. What impact will this have on my environment, is it good or bad.

Please advise as I am not sure whether to live these settings as they are or make changes.

Comments 4 CommentsJump to latest comment

pete_4u2002's picture
  1. Where will the Sep clients download the updates from, Will they get them from SEPM or Liveupdate server or the Gup servers.

the policy is assigned to the group, the clients will download from GUP again if you have set by pass GUP tghe clients will get the update from SEPM.is the LU enabled on client, then it will go to Symantec liveupdate for content update.

  1. What impact will this have on my environment, is it good or bad.

use GUP for better bandwidthe utilization.

SMLatCST's picture

That really all depends on what LiveUpdate schedule you have set, and if you are using the LiveUpdate Skipping options.  Generally you are looking at the below behaviour:

  1. Update from assigned GUP
  2. Update from Backup GUP if configured
  3. Update from SEPM if configured

These all happen in accordance with your configured heartbeat interval and all is well and good as far as the GUPs go.

Now, separate from the heartbeat interval, LiveUpdate will also run in accordance with its own schedule.  So, if you have the LU schedule set to run every 4 hours (default), then the SEP Client will connect up to Symantec LiveUpdate on the internet every 4 hours.  At this point, it should either:

  1. Determine it has already got the latest defs (via the GUP and/or SEPM during the heartbeeat) and close the connection, or
  2. Determine newer defs are available and download them

If 2. happens, then it won't download them from the GUP/SEPM.

Finally, it's worth noting that the LU Schdeule settings in 12.1 will (by default) skip the running of LU  altogether on the client, if the client itself is less than 2 days out of date, or has been in contact with the SEPM in the last 8 hours.  This skipping option is not available in SEP11, so these old clients will always run the LU attempt.

SOLUTION
.Brian's picture

Check these whitepapers on GUPs and Sizing and Scalability

AttachmentSize
SEP_GUP_Whitepaper_1.1.pdf 1.41 MB
SEP_Sizing and Scalability Best Practices_v2.3.pdf 688.76 KB

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Eyal's picture

Thank you so much for these explanations guys, I really appreciate them and thank you for the documents Brian.