Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

How to check the client is working as GUP?

Updated: 21 May 2010 | 5 comments
KS Choi's picture
KS Choi
0 0 Votes
Login to vote
This issue has been solved. See solution.

Dear,
Is there any way to check the client is working as a GUP?
In the perspective of client there's one indirect way to check whether the path "C:\Program Files\Symantec\Symantec Endpoint Protection\SharedUpdates" and contents exist. Any other way?
Thanks in advance for your knowledge.

discussion Filed Under:
, , ,

Comments

Prachand's picture
27
Nov
2009
0 Votes 0
Login to vote
Prachand
Trusted Advisor

Title: 'Troubleshooting the

Title: 'Troubleshooting the Group Update Provider (GUP) in Symantec Endpoint Protection'
Document ID: 2008040113243148
> Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2008040113243148?Open&seg=ent

Prachand Kumar MCSE-2003 Symantec Technical Specialist (SCTS)

SOLUTION
Prachand's picture
27
Nov
2009
0 Votes 0
Login to vote
Prachand
Trusted Advisor

Look at the sylink log it

Look at the sylink log it will give you the information if the gup is working or not.

Requesting the GUP for the update
 
 
 
05/22 00:06:28 [3504] <mfn_MakeGetLUFileIISUrl:>Requested Content Path is: /content/{812CD25E-1049-4086-9DDD-A4FAE649FBDF}/80521036/delta80520034.dax
05/22 00:06:28 [3504] <GetLUFileRequest:>IIS URL: /content/{812CD25E-1049-4086-9DDD-A4FAE649FBDF}/80521036/delta80520034.dax
05/22 00:06:28 [3504] <GetLUFileRequest:>http://<GUPNAME>:2967/content/{812CD25E-1049-4086-9DDD-A4FAE649FBDF}/80521036/delta80520034.dax
 
 
 
Example of a Sylink log from a client to a GUP requesting an update:
 
                  <LUThreadProc>Starting LU download.
                  03/24 14:29:04 [2232] <LUThreadProc>Got a valid context from GetCurrentServerEx
                  03/24 14:29:04 [2232] <LUThreadProc>Setting the session timeout on LUSession to 2 min.
                  03/24 14:29:04 [2232] <mfn_MakeGetLUFileIISUrl:>Requested Content Path is:                        
                  /content/{C60DC234-65F9-4674-94AE-62158EFCA433}/80324005/delta80323019.dax
                  03/24 14:29:04 [2232] <GetLUFileRequest:>IIS URL: /content/{C60DC234-65F9-4674-94AE-62158EFCA433}/80324005/delta80323019.dax
                  03/24 14:29:04 [2232]                
                  <GetLUFileRequest:>http://192.168.2.5:2967/content/{C60DC234-65F9-4674-94AE-62158EFCA433}/80324005/delta80323019.dax
                  03/24 14:29:04 [2232] <GetLUFileRequest:>NEW download: C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF5.tmp
                  03/24 14:29:04 [2232] <UpdateLUFileList:>Updating existing Download File List with : {C60DC234-65F9-4674-94AE-62158EFCA433}80324005
                  03/24 14:29:04 [2232] <UpdateLUFileList:>Updating existing Download File List Temp file name from: to C:\Program Files\Symantec\Symantec                      Endpoint Protection\LiveUpdate\LUF5.tmp
                  03/24 14:29:04 [2232] 14:29:4=>Sending HTTP REQUEST to download LU file
                  03/24 14:29:05 [2232] 14:29:5=>HTTP REQUEST sent
                  03/24 14:29:05 [2232] <GetLUFileRequest:>IIS return=200
                  03/24 14:29:05 [2232] <mfn_DoGetLUFile200>Downloading LU file from server. Moniker: {C60DC234-65F9-4674-94AE-62158EFCA433}Server                File Path:/content/{C60DC234-65F9-4674-94AE-62158EFCA433}/80324005/delta80323019.daxLocal Path:C:\Program                        
                  Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF5.tmp
                  03/24 14:29:05 [2232] <mfn_DoGetLUFile200>Content Length => 35403
                  03/24 14:29:05 [2232] <UpdateLUFileList:>Updating existing Download File List with : {C60DC234-65F9-4674-94AE-62158EFCA433}80324005
                  03/24 14:29:05 [2232] <UpdateLUFileList:>Updating existing Download File List Temp file name from: C:\Program Files\Symantec\Symantec                      Endpoint Protection\LiveUpdate\LUF5.tmp to C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF5.tmp
                  03/24 14:29:05 [2232] <mfn_DoGetLUFile200>LU Content Downloaded. Moniker: {C60DC234-65F9-4674-94AE-62158EFCA433} Target                                   Seq:80324005 Full version:0 Delta Base Seq:80323019
                  03/24 14:29:05 [2232] <PostEvent>going to post event=EVENT_LU_DOWNLOAD_COMPLETED
                  03/24 14:29:25 [2224] <CSyLink::mfn_DownloadNow()>
                  03/24 14:29:25 [2224] </CSyLink::mfn_DownloadNow()>
                  03/24 14:29:30 [2232] <PostEvent>done post event=EVENT_LU_DOWNLOAD_COMPLETED, return=0
 

Prachand Kumar MCSE-2003 Symantec Technical Specialist (SCTS)

DominikG's picture
27
Nov
2009
0 Votes 0
Login to vote
DominikG
Accredited

Client Tab

You can go to client tap in SEPM and look into the properties of the client (right click on it), if Group Update Provider is listed with "true".
This of course does not give you any information if the GUP is working correctly. This only shows that the client is recognized as GUP.

best regards

Dominik

Consultant
PMCS.helpLine Software Gruppe
www.pmcs.de

follow us on Twitter: PMCS_NBU ; PMCS_BE ; PMCS_EV

Pray4's picture
27
Nov
2009
0 Votes 0
Login to vote
Pray4

port 2967

Telnet to the SEP11 GUP on port 2967. This indicates that the GUP ports is opened.

sandip_sali's picture
27
Nov
2009
0 Votes 0
Login to vote
sandip_sali
Technical Support

GUP

Please check the versions of SEP on the clients as well the eversion of SEPM. If it is RU5 it has enhanced features for GUP. In case the SEPM is RU 5 & the clients are at a lower version the clients might have issue in ascertaining the GUP in the same and different subnet.

http://service1.symantec.com/SUPPORT/ent-security....

Thanks & Regards Sandip C Sali

Technical Support

Symantec.com

Store

Community Stats

Total Content Items
Members
259,054