Endpoint Protection

 View Only

  • 1.  manage updates when clients move in 2 sites

    Posted Jan 03, 2013 08:46 AM

    Hi everyone.

    I have he following scenario :

    I have 2 management consoles in different locations ; one location has subnet 192.168.0.x , the other has subnet 192.168.2.x ; sites are connected through a vpn .

    Sometimes, epmployees from location A moves to location B for a few days. And vice versa.

    The problem is that when an employee go to the other location, his laptop updates definitions through VPN.

    I need that when a laptop goes to the other location, it updates definitions from the nearest console.

    I tried to configure GUP, but this is not the right way.

    Thank you very much.

    Andrea

     



  • 2.  RE: manage updates when clients move in 2 sites

    Broadcom Employee
    Posted Jan 03, 2013 08:54 AM
    set a location awareness, and have LU policy . Yes, confgure the GUP , so that client should not be contacting the SEPM on VPN, instead let it get the updates from local GUP.


  • 3.  RE: manage updates when clients move in 2 sites

    Posted Jan 03, 2013 08:57 AM

    HI,

    I think it's can be done by Location Awarness

    Check this artical

    Location Awareness using Multiple Management Server Lists

    http://www.symantec.com/connect/articles/location-awareness-using-multiple-management-server-lists

    More about Location Awareness in Symantec Endpoint Protection (SEP)

     

    Article:TECH97369  |  Created: 2009-01-11  |  Updated: 2012-05-14  |  Article URL http://www.symantec.com/docs/TECH97369

    Configuring Location Awareness In SEPM Console

    http://www.symantec.com/connect/videos/configuring-location-awareness-sepm-console

    Best Practices for Symantec Endpoint Protection Location Awareness

     

    Article:TECH98211  |  Created: 2009-01-20  |  Updated: 2012-06-07  |  Article URL http://www.symantec.com/docs/TECH98211

     



  • 4.  RE: manage updates when clients move in 2 sites

    Posted Jan 03, 2013 09:00 AM

    Are these SEPMs setup for replication?

    The management server list will play an important part if so and will need to be configured.

    Configuring a management server list

    https://www.symantec.com/business/support/index?page=content&id=HOWTO81154

    Assigning a management server list to a group and location

    https://www.symantec.com/business/support/index?page=content&id=HOWTO80735



  • 5.  RE: manage updates when clients move in 2 sites

    Posted Jan 03, 2013 09:03 AM

    "Thumbs Up" to Ashish's post above.  Configuring GUPs alone is not enough, you would need to assign a different MSL to each location so that the nearest SEPM is used first.