Hi,

here are some best practices:

http://service1.symantec.com/SUPPORT/ent-security....

Usually the LUA is not required to meet your requirements, one SEPM and several GUP's are enough in most of the situations.
Come back here to get further suggestions regarding your architecture.

Regards,

Hi Laurent,

In a pure SEP environment (no SAV, Scan Engine or or Symantec products that also need updates) the SEPM itself, with GUPs properly onfigured, should be capable of providing content updates for you.  If there are additional Symantecd products, then one LUA 2.2 server may be best.

If you do go the LUA route, configure the SEPM to receive all of its updates from the LUA.  Do not install both products on the same server- that's not supported!  (See LiveUpdate Administrator 2.x and Symantec Endpoint Protection Manager on the Same Physical Server for details why).

Final note: read SEP's documentation carefully on the topic of "sites."  There is, for instance, no need for a seperate SEPM and replicating database in every branch office! 

Best of luck!

Thanks and best regards,

Mick

I'd agree with Mick, if you don't have any other Symantec products that need updating then go for the SEPM to update via the web & use GUP's.

You can configure SEPM to automatically adjust incase of problems & everything can be backed up . Where as Liveupdate has to be manually adjusted for problems and you cannot backup the settings incase of disaster

What are Group Update Provider ?
How to configure them ? Please give links.

Where dit they find definitions updates ?

Have a look at this :

http://service1.symantec.com/support/ent-security....

and this document tells you a little about the GUP : http://service1.symantec.com/support/ent-security....

Ok, I find much informations and I will be back to you if problem