How to check the client is working as GUP?

This issue has been solved. See solution.
KS Choi's picture
KS Choi
November 27th, 2009

Dear,
Is there any way to check the client is working as a GUP?
In the perspective of client there's one indirect way to check whether the path "C:\Program Files\Symantec\Symantec Endpoint Protection\SharedUpdates" and contents exist. Any other way?
Thanks in advance for your knowledge.

Filed under: , , ,
0 votes
Prachand's picture
Prachand
15 weeks 3 days ago

Title: 'Troubleshooting the

Solution

Title: 'Troubleshooting the Group Update Provider (GUP) in Symantec Endpoint Protection'
Document ID: 2008040113243148
> Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2008040113243148?Open&seg=ent

Prachand Kumar
MCSE-2003 Symantec Technical Specialist (SCTS)

0 votes
SOLUTION
Prachand's picture
Prachand
15 weeks 3 days ago

Look at the sylink log it

Look at the sylink log it will give you the information if the gup is working or not.

Requesting the GUP for the update
 
 
 
05/22 00:06:28 [3504] <mfn_MakeGetLUFileIISUrl:>Requested Content Path is: /content/{812CD25E-1049-4086-9DDD-A4FAE649FBDF}/80521036/delta80520034.dax
05/22 00:06:28 [3504] <GetLUFileRequest:>IIS URL: /content/{812CD25E-1049-4086-9DDD-A4FAE649FBDF}/80521036/delta80520034.dax
05/22 00:06:28 [3504] <GetLUFileRequest:>http://<GUPNAME>:2967/content/{812CD25E-1049-4086-9DDD-A4FAE649FBDF}/80521036/delta80520034.dax
 
 
 
Example of a Sylink log from a client to a GUP requesting an update:
 
                  <LUThreadProc>Starting LU download.
                  03/24 14:29:04 [2232] <LUThreadProc>Got a valid context from GetCurrentServerEx
                  03/24 14:29:04 [2232] <LUThreadProc>Setting the session timeout on LUSession to 2 min.
                  03/24 14:29:04 [2232] <mfn_MakeGetLUFileIISUrl:>Requested Content Path is:                        
                  /content/{C60DC234-65F9-4674-94AE-62158EFCA433}/80324005/delta80323019.dax
                  03/24 14:29:04 [2232] <GetLUFileRequest:>IIS URL: /content/{C60DC234-65F9-4674-94AE-62158EFCA433}/80324005/delta80323019.dax
                  03/24 14:29:04 [2232]                
                  <GetLUFileRequest:>http://192.168.2.5:2967/content/{C60DC234-65F9-4674-94AE-62158EFCA433}/80324005/delta80323019.dax
                  03/24 14:29:04 [2232] <GetLUFileRequest:>NEW download: C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF5.tmp
                  03/24 14:29:04 [2232] <UpdateLUFileList:>Updating existing Download File List with : {C60DC234-65F9-4674-94AE-62158EFCA433}80324005
                  03/24 14:29:04 [2232] <UpdateLUFileList:>Updating existing Download File List Temp file name from: to C:\Program Files\Symantec\Symantec                      Endpoint Protection\LiveUpdate\LUF5.tmp
                  03/24 14:29:04 [2232] 14:29:4=>Sending HTTP REQUEST to download LU file
                  03/24 14:29:05 [2232] 14:29:5=>HTTP REQUEST sent
                  03/24 14:29:05 [2232] <GetLUFileRequest:>IIS return=200
                  03/24 14:29:05 [2232] <mfn_DoGetLUFile200>Downloading LU file from server. Moniker: {C60DC234-65F9-4674-94AE-62158EFCA433}Server                File Path:/content/{C60DC234-65F9-4674-94AE-62158EFCA433}/80324005/delta80323019.daxLocal Path:C:\Program                        
                  Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF5.tmp
                  03/24 14:29:05 [2232] <mfn_DoGetLUFile200>Content Length => 35403
                  03/24 14:29:05 [2232] <UpdateLUFileList:>Updating existing Download File List with : {C60DC234-65F9-4674-94AE-62158EFCA433}80324005
                  03/24 14:29:05 [2232] <UpdateLUFileList:>Updating existing Download File List Temp file name from: C:\Program Files\Symantec\Symantec                      Endpoint Protection\LiveUpdate\LUF5.tmp to C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF5.tmp
                  03/24 14:29:05 [2232] <mfn_DoGetLUFile200>LU Content Downloaded. Moniker: {C60DC234-65F9-4674-94AE-62158EFCA433} Target                                   Seq:80324005 Full version:0 Delta Base Seq:80323019
                  03/24 14:29:05 [2232] <PostEvent>going to post event=EVENT_LU_DOWNLOAD_COMPLETED
                  03/24 14:29:25 [2224] <CSyLink::mfn_DownloadNow()>
                  03/24 14:29:25 [2224] </CSyLink::mfn_DownloadNow()>
                  03/24 14:29:30 [2232] <PostEvent>done post event=EVENT_LU_DOWNLOAD_COMPLETED, return=0
 

Prachand Kumar
MCSE-2003 Symantec Technical Specialist (SCTS)

0 votes
DominikG's picture
DominikG
15 weeks 3 days ago

Client Tab

You can go to client tap in SEPM and look into the properties of the client (right click on it), if Group Update Provider is listed with "true".
This of course does not give you any information if the GUP is working correctly. This only shows that the client is recognized as GUP.

best regards

Dominik

Support Engineer
PMCS GmbH & Co. KG
MCP, MCTS, STS

0 votes
Pray4's picture
Pray4
15 weeks 3 days ago

port 2967

Telnet to the SEP11 GUP on port 2967. This indicates that the GUP ports is opened.

0 votes
sandip_sali's picture
sandip_sali
15 weeks 3 days ago

GUP

Please check the versions of SEP on the clients as well the eversion of SEPM. If it is RU5 it has enhanced features for GUP. In case the SEPM is RU 5 & the clients are at a lower version the clients might have issue in ascertaining the GUP in the same and different subnet.

http://service1.symantec.com/SUPPORT/ent-security....

Thanks & Regards

Sandip C Sali

0 votes