Endpoint Protection

I've been reading up using GUP in an effort to limit bandwidth issues. Something that is unclear is if I want Symantec to auto-choose the GUP client I can set my search value for something like Windows 7 as the only requirement. This poses my two questions:

1)If I use a generic setting like that what is the # of clients Endpoint will try to make GUP devices? So I have 20 devices in a group is 1, 2 or all 20 devices?

2)If have approx 18sites each with there own or a subnet portion of these subnet range. Can I specify a single rule and have it auto-adjust or should I create subnet specific groups and then then make live update policies / site?

If you create a policy and use a condition that all machines match, they will all become GUPs.

This article provides some examples:

http://www.symantec.com/docs/TECH198702

Here's my 2 pence worth 

1. Using a generic setting like the OS will enable the GUP function on all clients that match.  In your example, you'd end up with 20 GUPs, but only one would be used at any one time.  When more than one GUP exists on a subnet, the GUP with the lowest IP address is used:
   http://www.symantec.com/docs/TECH122515
2. I'm not clear on what you mean here.
   * If you have 18 sites and 18 subnets, then just use the Multiple GUP option and nominate a GUP in each site/subnet.
   * If you have 18 sites and more than 18 subnets, then use the Multiple GUP option to nominate 1 GUP per physical site, and use the Explicit GUP option to point the clients in subnets-without-a-GUP at the GUP in their physical site (i.e. the closest one).
   Either of these options would allow you to apply the same policy to all clients.  How you choose to execute that assignment is up to you, but different groups and/or locations per physical location isn't necessary.