Endpoint Protection

Scenario.

1 SEP Manager (North America, multiple subnets)
2 GUPs (one Europe, one Asia, multiple subnets)

All the subnets can reach each other.

I want to provide updates from the "local" provider.
If a client is in North America it must download content from the SEPM, if it's in Asia from the asian GUP and if it's in Europe from the european GUP.

How could I obtain this?

I have to work on both Multiple GUP and Explicit GUP but how could I include the SEPM in the equation?

Check this new GUP feature for 12.1.2

Understanding "Explicit Group Update Providers (GUPs) for Roaming Clients" in Symantec Endpoint Protection (SEP) 12.1.2

Hi Brian, that link has no concern with my question (or if it has, I cannot find it).

I need to use both SEPM and GUPS. Not only GUPs.

All of the clients are in Single Group?

Using location awareness, create 3 different locations using the IP subnet as a condition

America

1st condition - Can connect to SEPM 2nd - Subnet Address 10.x.x.x (has North America IP scheme than connect to SEPM)

Asia

1st condition - Can connect to SEPM 2nd - Subnet Address 10.x.x.x (has Asia IP scheme than connect to Asia GUP)

Europe

1st condition - Can connect to SEPM 2nd - Subnet Address 10.x.x.x (has Europe IP scheme than connect to Europe GUP)

We have more than 7 sites so we cannot use location awarness according to best practices).

No, a lot of groups.

- Are these SEPM groups split over the locations - or is this all mixed up?

All the clients are located in group as locaton wise?

can groups be broken down into sub groups?

If this can help.. yes, why not. What do u have in mind?

At this moment, we've one group for each country and every client belongs to its "headquarter" country.

First you should have clients from Asia, Europe and NAM in different groups.

Create 3 liveupdate policies

1. Assign it to group with NAM clients it should say for liveupdate connet to default management server

2. Assign it to groups in Europe and it should have Europe's GUP configured in the policy and the clients will take defs from that particular GUP.

3. Assign it to groups in Asia and it should have Asia's GUP configured in the policy and the clients will take defs from that particular GUP.

or you can merge 2 and 3 and create a policy with multiple explicit GUPs and the clients will take defs accordingly.

Not good.

In that way, a client in NAM group will always get updates from SEPM even if the client itself is connected to Asian network...

I've to apply a "roaming" policy that include BOTH SEPManager and GUPs.

Explicit GUPs is exactly what I need... but i have to put in it the SEPM also because in NAM i don't have GUP.