Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

How to manually update GUP and it's clients.

Created: 06 Sep 2013 • Updated: 02 Dec 2013 | 15 comments
chhowa's picture
This issue has been solved. See solution.

Hi All,

Did anyone of you manually update GUP and it's clients?

If do, can let me know your way?

If don't what is the alternative way?

My place here, the GUP are not allow to connect to internet, they only allow to pulled from SEPM.

These GUPs had 50 clients with them, all the clients are USB Storage-Block, even GUP itself too.

The Bandwidth is low, so if transfer big file(above 100MB), certain application will being affected, worst when connection for transfering file will broken.

appreciate and thanks to all of your ideas.

Thanks

Operating Systems:

Comments 15 CommentsJump to latest comment

Rafeeq's picture

Not possible  can update only with SEPM

Clients will update using delta updates not full updates 

pete_4u2002's picture

machine can be updated using Intelligent updater or jdb file, however if other machines in the network to be updated, GUP should be talking to SEPM.

Jeshrel's picture

Hi,

Update SEPM an intellegen updater and then open SEPM -> clients -> GUP group( group in which GUP is present) and then right on the GUP-> run command on computer-> Update content

That should update the GUP.

SMLatCST's picture

"Thumbs Up" to Rafeeq.

You cannot force an update of the GUP's shared def cache.  The shared def cache is only updated/populated as the GUP receives requests for content.

You can forcefully update the SEP Client acting as the GUP (pete has mentioned one method), but this will not update the shared defs cache (and so has no benefit to your internal network load).

Chetan Savade's picture

Hi,

Thank you for posting in Symantec community.

I would be glad to answer your query.

GUP is having 50 clients or 500 clients shouln't create any issue if clients are not allowed to bypass GUP if it's not available.

Check why GUP is not updated?

Check these articles:

Test SEP to GUP and GUP to SEPM communication

http://www.symantec.com/docs/TECH153328

Troubleshooting the Group Update Provider (GUP) in Symantec Endpoint Protection (SEP)

http://www.symantec.com/docs/TECH104539

Once GUP updated all the machine will receive updates & bandwidth can't be the concern on the same LAN.

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

chhowa's picture

Hi All,

Thanks for your reply.

Hi Jeshrel,

The GUP is not responding, however GUP is still taliking to SEPM.

Hi Chetan,

The port that communicate with SEPM had telent and are open. Had run all the test on KB still unable resolve the GUP is unable to sent out any request update out from GUP itself.

Hi Pete,

If we used JDB file or inteligent updater, we had to deployed on each client that is not updated. currently my site here had 8 GUP with 50 clients tie to each GUP, about 400 clients i need to deployed manually. If there any other way?

Hi Rafeeq/SMLatCST,

Yes, you are right. is there any other alternative way? Because these GUP is situated different state and also due to bandwidth constrain, i had problem transfer the jdb file to them.

I humbly thanks for everyone of here give me advice. Thanks to all of you.

Thanks

CHHOWA

pete_4u2002's picture

best way is to allow the connection between SEPM and SEP clients including GUP client.

Chetan Savade's picture

Hi,

Thanks for the update.

All 8 GUP's are affected? 

Could you please restart the SEPM installed machine and GUP machine?

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

Jeshrel's picture

Hi,

What if i copy the shared cached from one system and update it on another will that update the GUP?

%programfiles%\symantec\symantec endpoint protection\12.1.xxxx\bin\sharedupdate(32 bit)

%programfiles(x86)%\symantec\symantec endpoint protection\12.1.xxxx\bin64\sharedupdate(64bit)

SMLatCST's picture

Anything stored in the cache is only valid until the next set of definitions are released, so copying these across is probably not as important as investigating why it's not updating natively.  There's a GUP trobleshooting guide below:

http://www.symantec.com/docs/TECH104539

StephanK's picture

Hi Chowa,

I don't know if I got your request right, but the Update-Status on the GUPs SEP has nothing to do with the definitions it distributes.

Actually the GUP runs a mini-http-Server which acts as a "Definition-proxy". There is no further logic behind it. Your Clients request Content from SEPM and have GUP download it for them.

AFAIK you cannot manually interfere in this process as you would have to distribute Delta-Files.

IF your SEPM-GUP-client-Connection works, there will be no large Files downloaded from SEPM to GUP. Although Full-Updates can happen whenever a Client was offline for too long to build a Delta (This can be adjusted by the number of Definitions kept on your SEPM.

Regards

Stephan

chhowa's picture

Dear All,

Thanks for your all replies, currently my issue had solve. Thanks for your guidance.

Chetan Savade's picture

Hi,

Thanks for the update and good to know issue has resolved.

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you OR update with the steps helped to resolve this issue.

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

chhowa's picture

Dear All,

It seems winhttp registry on the GUP was corrupted, therefore perform below steps had solve my issue

1)Delete WinHttpSettings under below two locations. If unable to find you can move on to next one.



HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections  key.

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Connections



2)Go to HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\InternetSettings\connections



Delete the registry keys "DefaultConnectionSettings" and "SavedLegacySettings".



3)Restart the machine.

 

Thanks for Symantec Technical Support that assist us for this case.

Thanks all of you involve in this forum too

SOLUTION
.Brian's picture

+1

Thanks for checking back in to share this valuable info.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.