Setting

Description

Internal or External LiveUpdate Server

Select one of the following options:

• Use the default management server

Downloads the content updates from the Symantec Endpoint Protection Manager. This option is recommended for most organizations. The option is the simplest and requires no configuration other than applying the policy to a group. Select this option if you use a Group Update Provider.

• Use a LiveUpdate server

Downloads the content updates from either the default Symantec LiveUpdate server over the Internet, or from an internal LiveUpdate server. You can specify multiple internal LiveUpdate servers for failover support.

If you enable both options, clients try to retrieve updates from both sources. You typically do not enable both options unless you have a specific reason. If the server provides named update versions to clients, and the clients have previously downloaded the latest updates from a LiveUpdate server, the clients do not download and install the named (previous) versions.
 

Group Update Provider (GUP)

Use one or more Group Update Providers

Specifies one or more computers to act as a LiveUpdate server for the group. For example, you might want to create a Group Update Provider to conserve bandwidth to clients in a remote location over a slow link. In this scenario, the Group Update Provider downloads the latest updates from the server. The Group Update Provider then updates the clients in the group. If the Group Update Provider is offline, the clients contact the server for the updates.

The Group Update Provider can reside in any group.

Note: The Group Update Provider is available only for Windows clients.

Third Party Management (TPM)

Enable third-party content management

Enables third-party tools such as Microsoft SMS to provide updates to client computers securely.

To use this feature, you must set up the Symantec Endpoint Protection Manager to use as a staging server for content. This staging server does not require that the clients be connected to it. Configure the server to download updates on a periodic schedule. If you use continuous, the server downloads the latest updates when they are posted.

By default, the updates appear in the Default group's clients' content outbox folders. These folders are organized by content type. You can then pick up one or more content packages from the content outbox folder and deliver it to the client's inbox folder.

To ensure that only third-party management tools update client computers, disable the other LiveUpdate server options on this page.

Note: Third-party content management settings are applied to Windows clients only.

LiveUpdate Proxy Configuration

Configure a proxy server to use for LiveUpdate from the default Symantec LiveUpdate server or from a specified internal LiveUpdate server.

This proxy server is used only for LiveUpdate and not for any other external communications.