Endpoint Protection

Hi all, We were recommended to move from our internal Liveupdate infrastructure to a GUP's based design by our Symantec TAM.  This was because the Liveupdate application on the servers kept failing.

I have a question for the GUP users out there that have a high number of physical site's and subnets.

We have a large geographical location to cover with a small number of head offices (500 - 1000 clients)  and a large number of small sites (1-10 clients). Each small site has at least 3 unique subnets with each head office having possibly 100s of unique subnets. This means we have arround 900 subnets that clients could connect to.

What we would like to do is have GUP server's in our head office sites servicing the clients in there region. So I was looking at doing this using the 'Explicit Group Update Providers for roaming clients'  the explicit GUP From reading the documentation I cannot do this without defining a large number of Explicit GUP rules for the 900 subnets we have, am I missing something? Surely I do not have to define each subnet to point to a explicit GUP?  

I have seen this post which does indicate that what we want is not possible.

http://www.symantec.com/connect/forums/multiple-gup-provider-list-sep-12ru3

We are just wondering how others are approaching there GUP deployments?

Hi Jamit,

we have a similiar situation with our client who has multiple locations to manage. what we do is we will make DNS alteration accordingly in a way that a client in a same region communicate to the closest GUP. say for example: you have HQ in NY,USA and few branch/small offices nearby to that location, create a DNS entry in those branch offices to resolve to the GUP in the HQ. in this way you achieve your goal. Hope this helps you.

Regards,

Praveen

See this download

Generate LiveUpdate Policies that have many GUP Subnets

https://www-secure.symantec.com/connect/downloads/generate-liveupdate-policies-have-many-gup-subnets

Thanks James, I did see that in the other post and I am testing with it now.

I was also wondering what others had done in this scenario.