Endpoint Protection

Hi All,

In my set up i have nearly 900 gup systems. In some branches SEP daily update is fine. All PCs are updating properly. But in some branch systems are not updating from GUP.  I have 8 to 10 system in a branch and out of those PC one will be the GUP.

 My problem is if the client is contacting the GUP after 20 days it will not take the update from GUP. I should do a manual update in that client.

I am attaching the live update setting for my branch.

If I change the settings of “Delete content update if unused (days)” to 30 will it solve my problem?

hi

Hi Mayya,

Delete content update if unused i.e Controls when the individual content updates that are downloaded to the Group Update Provider become eligible for deletion.

The content updates take up disk space on the Group Update Provider computer. You should configure the option to delete unused content updates. Content updates are considered unused if the clients have not requested the updates.

If GUP doesn't have older definitions he would request from SEPM.

Reference: http://www.symantec.com/business/support/index?page=content&id=TECH96419

Check settings for content revisions under SEPM

Hi Chetan,

Thanks for the update.

In my server it is set to 30 days. So when the client try to download the update after 20 days from GUP and if the GUP dont have that update it wil request to the SEP server for the same update. is it like that ? Or when client request for a update from GUP, GUP will provide the latest update which it has.  Plz clarify ..

I also agree with chetan. this option will definately help you because the cache memory come overlimit so not getting update. but when you can change it with 3 days. After 3 days same will be clear and new files will be genrate

Hi Mayya,

Your server keeps definitions for 10 days not 30 days.

You have set it to 30 revisison & Symantec releases 3 definitions per day.

So when the client try to download the update after 20 days from GUP and if the GUP dont have that update it wil request to the SEP server for the same update. is it like that ? 

--> Yes, it's correct

When client request for a update from GUP, GUP will provide the latest update which it has

--> No, it's not correct.  

It's not required to change content revision, you can keep 30 (10 days) revisions.

Even though SEPM doesn't have defintions for 20 days older, he will download it from internet and will provide to GUP.

I hope it will help you.

I don't think Changing delete content to 30 will solve the issue.

I understand that there are no machines updating in a particular branch. Is the GUP in the same location? Is the GUP updated?

Try to telnet port 2967 from the client to the GUP, if the GUP is updated.

Hi All,

Thanks for the update.

Thing is all my branches are running at link of 24 Kbps or 64Kbps link. So downloading a full update is challenge in business hour. And PC will be switched off in the night.

In this scenario if  a client contacts GUP after 20 days GUP will try to download update from SEP server which will choke my branch bandwidth.

 To overcome this if i set the  “Delete content update if unused (days)” to 30 in GUP system  will it help me?

Hi Raj,

It is not that all systems are not updating. In some branch i don’t have any problem. GUP and clients are up to date. And i am able to telnet to 2967.

To overcome this if i set the  “Delete content update if unused (days)” to 30 in GUP system  will it help me?

yes. more the number of content revision on SEPM more the chances of having delta passed on GUP> More the content on GUP the definition will be available for client which contacts GUP for update.

Hi Mayya,

If that is the case, then as mentioned by Pete below, increasing the "delete content if unused" will definitely help.

Thanks to All,

I have changed the setting in the live update. I will update if it is working for me.