Endpoint Protection

I have seen conflicting information on this and was hoping someone can confirm the right answer...

When creating a liveupdate policy, under 'server settings', there is the option to 'use the default management server' and/or 'use a liveupdate server'.  If one chooses both of these options, will clients ALWAYS try the management server first for updates and only contact the LiveUpdate server if the management server is unavailable?  Or is there no priority to this and clients could arbitrarily contact either server for updates?

"will clients ALWAYS try the management server first for updates and only contact the LiveUpdate server if the management server is unavailable?"

Yes.

Well I beg to differ....

sorry  for the confusion kornholio, but I think, if you have both checked the clients would try to get from both...and which ever they could get  first...

Most of the times, I have  seen that the client would take from Internet, if both thse boxes are checked.

Hence, the conflicting information.  

I have configured our environment with Locations to ensure clients only go to the Internet if the SEPM is unavailable.  

But some staff here believe selecting both options as described above will serve the same purpose.  I disagree, but would like Symantec to provide a consistent answer.

I get multiple answers here as well:

http://www.symantec.com/connect/forums/liveupdate-policy-internal-and-external-server

Creating Location specific policy is the only way to achevie that.  Selecting both options does not solve the purpose...

See this:

http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/316caee56807e58e80257412003d0c20?OpenDocument

that's what I needed, thanks very much for the help.

Actually yeah I forgot about that, if you schedule LiveUpdate then it will do both whichever comes first.