Endpoint Protection

Hi,

I have a client where they need to move multiple GUP's and clients to a new SEPM server and i've been trying to figure out the best way to do this and haven't been able to find any articles that i can get straight in my head on how best to approach this.

The GUP is already in a LiveUpdate policy on the first SEPM server (SEPM1) and i want to move it and the clients that connect to it to the new SEPM server (SEPM2). I have exported the policies from SEPM1 and imported them onto SEPM2.

1) Do I set the Liveupdate policy for the required location on the new SEPM server and then push out a new communications file to the required clients?

2) Does the GUP get confused about where it is getting it's updates from if it is listed in both SEPM servers?

3) Or do i have to remove it from SEPM1 as i activate it on SEPM2?

On another note , for clients that roam between locations is it best to use an explicit GUP or should the roaming client just be able to use the GUP local to the site they are visiting?

Cheers,

Rob

client need to communicate to the new SEPM. once connected it will take new LU policy, the LU policy should be configured this machine as a GUP.

hope this helps.

Hi,

I will say you should think how to move SEPM from one server to another server.

https://www-secure.symantec.com/connect/articles/hot-move-sepm-one-server-another-server

About Explicit GUP you need to find out the network flow

Refer this article:

SEP 12.1 RU2 And Explicit Group Update Providers

https://www-secure.symantec.com/connect/articles/sep-121-ru2-and-explicit-group-update-providers

Hello,

1) Do I set the Liveupdate policy for the required location on the new SEPM server and then push out a new communications file to the required clients?

Correct, just include the GUP too in the "required clients"

2) Does the GUP get confused about where it is getting it's updates from if it is listed in both SEPM servers?

No, it can talk to a SEPM only...

3) Or do i have to remove it from SEPM1 as i activate it on SEPM2?

... but you need to remove it from the SEPM1 list to avoid wrong clients try to connect to it

On another note, for clients that roam between locations is it best to use an explicit GUP or should the roaming client just be able to use the GUP local to the site they are visiting?

It depends by the location of the GUPs, the bandwith, etc... there's no answer which is right for everyone in this case.

Thanks for the quick replies guys, much appreciated.

2) Does the GUP get confused about where it is getting it's updates from if it is listed in both SEPM servers?

G - No, it can talk to a SEPM only...

3) Or do i have to remove it from SEPM1 as i activate it on SEPM2?

G - ... but you need to remove it from the SEPM1 list to avoid wrong clients try to connect to it

Giuseppe - If i don't remove it surely any clients missed in the migration will try to contact it but have the wrong SEPM certificate so still check in with SEPM1 but not update.

On another note, for clients that roam between locations is it best to use an explicit GUP or should the roaming client just be able to use the GUP local to the site they are visiting?

G - It depends by the location of the GUPs, the bandwith, etc... there's no answer which is right for everyone in this case.

If a laptop travels from head office out to a different office i want it to be able to update from the local GUP rather than coming back up the line to the SEPM console or it's own GUP in head office, i know it's goign to talk to SEPM as a matter of course but don't want it updating down the wire.

The laptop can connect either by wireless or wired connection and i'm having trouble understanding why you would use an explicit GUP for it.

Cheers,

Robin

Hi,

I found this comment very helpful to finally get me to understand how GUP's work and a great way of creating mutliple and expplicit GUP lists to sort out issues with a wireless LAN having a different subnet to a wired LAN at a remote site that nly has one GUP.

https://www-secure.symantec.com/connect/forums/gups-roaming-workstations#comment-10075921

Cheers,

Robin

I'm glad you found the post useful!  One of my wall-of-text days