Video Screencast Help

LiveUpdate via GUPs and SEPM

Created: 12 Feb 2013 | 13 comments
diabolicus23's picture

Scenario.

1 SEP Manager (North America, multiple subnets)
2 GUPs (one Europe, one Asia, multiple subnets)

All the subnets can reach each other.

I want to provide updates from the "local" provider.
If a client is in North America it must download content from the SEPM, if it's in Asia from the asian GUP and if it's in Europe from the european GUP.

How could I obtain this?

I have to work on both Multiple GUP and Explicit GUP but how could I include the SEPM in the equation?

 

Comments 13 CommentsJump to latest comment

.Brian's picture

Check this new GUP feature for 12.1.2

Understanding "Explicit Group Update Providers (GUPs) for Roaming Clients" in Symantec Endpoint Protection (SEP) 12.1.2

Article:TECH198640  |  Created: 2012-10-19  |  Updated: 2012-11-15  |  Article URL http://www.symantec.com/docs/TECH198640

 

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

diabolicus23's picture

Hi Brian, that link has no concern with my question (or if it has, I cannot find it).

 

I need to use both SEPM and GUPS. Not only GUPs.

.Brian's picture

Using location awareness, create 3 different locations using the IP subnet as a condition

America

1st condition - Can connect to SEPM 2nd - Subnet Address 10.x.x.x (has North America IP scheme than connect to SEPM)

Asia

1st condition - Can connect to SEPM 2nd - Subnet Address 10.x.x.x (has Asia IP scheme than connect to Asia GUP)

Europe

1st condition - Can connect to SEPM 2nd - Subnet Address 10.x.x.x (has Europe IP scheme than connect to Europe GUP)

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

diabolicus23's picture

We have more than 7 sites so we cannot use location awarness according to best practices).

Sumit G's picture

All of the clients are in Single Group?

 

Regards

Sumit G.

SebastianZ's picture

- Are these SEPM groups split over the locations - or is this all mixed up?

diabolicus23's picture

At this moment, we've one group for each country and every client belongs to its "headquarter" country.

Sumit G's picture

All the clients are located in group as locaton wise?

Regards

Sumit G.

diabolicus23's picture

If this can help.. yes, why not. What do u have in mind?

Vikram Kumar-SAV to SEP's picture

First you should have clients from Asia, Europe and NAM in different groups.

Create 3 liveupdate policies

1. Assign it to group with NAM clients it should say for liveupdate connet to default management server

2. Assign it to groups in Europe and it should have Europe's GUP configured in the policy and the clients will take defs from that particular GUP.

3. Assign it to groups in Asia and it should have Asia's GUP configured in the policy and the clients will take defs from that particular GUP.

or you can merge 2 and 3 and create a policy with multiple explicit GUPs and the clients will take defs accordingly.

Vikram Kumar

Symantec Consultant

The most helpful part of entire Symantec connect is the Search button..do use it.

diabolicus23's picture

Not good.

In that way, a client in NAM group will always get updates from SEPM even if the client itself is connected to Asian network...

I've to apply a "roaming" policy that include BOTH SEPManager and GUPs.

Explicit GUPs is exactly what I need... but i have to put in it the SEPM also because in NAM i don't have GUP.