Endpoint Protection

Hi,

I am attempting to setup a SEPM server to manage clients in a private network.
See attached network diagram for details. (symantec_setup.PNG)

The server managing the clients does not have internet access and is behind a strict firewall.

The problem I'm having is that I am not sure of the best way for the SEPM server to retrieve virus definitions from the internet.  
Should I install SEPM on the server with internet access, then sychronise the two SEPM servers?
The other option I noticed was the "Group Update Provider" in the live update server settings policy, can this option be used in this instance?

Any direction or comments appreciated,

Thanks

Perrin

UPDATE: Added corrupt.PNG and EventAuditLog.xls, see below for comments

instead of having another SEPm, install Liveupdate administratoron server habving internet. THE SEPM installed will communicate with liveupdate amdinistrator to get the updates.

or internet connected server can be made as SEPm and the one of the machine in the restricted zone can be made GUP, clients can connect to GUP fpr update. But the clients need to comunicate to internet connected SEPM, hence i would suggest LUAdministrator  on internet connected machine and only SEPm neeeds to be connected to LU admin.

Cheers
Pete

 thanks pete,

i have gone with the LUA on the internet connected server solution, rather than using GUP.

The problem I have now is that I cant seem to get LUA to download virus definitions, it says that they are Corrupt.  I can download product updates etc fine, its just the virus updates.

I have been trawling the internet and banging my head against the wall all day trying to solve this but to no avail.

Any ideas?

strange. Where di dyou see this message " virus definition corrupt"?

Post us the exact message and the task you doing at that time.



Cheers
Pete

The message was in the activity monitor, after clicking Run Now on the Download Schedule I had created. (see screenshot in original post - corrupt.PNG)
- I have also added the eventauditlog.xls to the original post as well

I have tried many different Download Schedules, and have narrowed it down to the virus defs, all product updates, etc, update correctly.

Thanks,