Endpoint Protection

We've decided to create a new server to use with SEPM 12.1.5. Everything is fine except no clients (12.1.4) are updating. I've tried to push the updates but nothing. The clients can see the server. The clients are still at 3/20/2015. Would that be an issue for SEPM to handle? Do I need to manually update with a newer def file for it to work?

Attachment(s)

debug.zip   4 KB 1 version

Any version of 12.1 SEPM should be able to update any version of 12.1 clients.

You can enable sylink debugging to see the communication though to see what is going on

I didn't know if 3/20 was too far back for it to handle.

I added the log to the original post.

From the logs I can see that it is communicating to SEPM without any issues. But it does say that its not able to find a suitable GUP. Make sure the GUP's are properly configured and they are active & up. also make sure that port 2967 is open on the GUP's

Error MSG:

2015/04/07 13:17:23.428 [2208:3172] SyLinkEventFunc - EVENT_LU_REQUIRE_STATUS: No cached content information was returned. Request full package
2015/04/07 13:17:23.428 [2208:3172] GUProxy: Failed to find a suitable GUP
2015/04/07 13:17:23.428 [2208:3172] GUProxy: SetDownloadStatus for /content/{07B590B3-9282-482f-BBAA-6D515D385869}/150406032/Full.zip status 6

We have GUPs setup, but for remote sites. Our local was going to use the SEPM. Should we set the SEPM as a GUP?

SEPM should not be set as a GUP. You can setup another machine as a GUP for local or have them grab updates from the SEPM

Ok, just wanted to make sure.

I've attached a new debug log.

Attachment(s)

debug_5.zip   4 KB 1 version

Please post the sylink.log from the client.

Follow this document for enabling it

http://www.symantec.com/business/support/index?page=content&id=TECH102412

As this is GUP LU configuration - is the option to fallback to SEPM for updates in case of GUP unavailablity - disabled or enabled in the policy?

If this option is disabled and the clients cannot reach any GUP = download of updates will fail.

Check assigned LU setting policy -> Server Setting -> Group update Provider -> Maximum time that the clients try to download updates from a GUP before trying the default management server (never = disabled)

Attached is the Sylink log

Attachment(s)

Sylink_29.zip   51 KB 1 version

It was set to Never. I changed to 30mins.

We use our setup to make sure the PCs hit the GUPs at the remote sites, then the SEPM.

At our local, we want them to hit the SEPM.

Can you  check the cache size of GUP by default its 500 MB but here clients are trying to download 600 + MB.

etRemainingBytesToDownload> Remaining bytes to download: 656200532

This is what I found in one of the simillar post,  from the Sylink, it seems like you have set Multiple GUP but configuration seems to be wrong

Retrived GUP for content download.. GUP type: Multiple Group Update Providers last GUP type: Invalid Group Update Provider type

if you set it with a single GUP, it should work fine.

Ours is set to 750MB.

Also, we don't use a GUP at the local site since it has the SEPM. Would we need a SEPM and GUP in same network of 100 PCs?

GUP is more useful on remote subnets where you want to conserver bandwidths, for 100 pc on same submet I would let it go to SEPM