Hi All,

Do you have any idea on how GUP works on below scenorio,

GUP PC(SEP 12.1.5) - Whether it provides content to 12.1 ru6 clients requesting Reduced or Standard content.

GUP PC(SEP 12.1.6 Standard definition) - Whether it provides content to Reduced 12.1 ru6 clients and as well as to Standard 12.1 Ru6 clients.

GUP PC(SEP 12.1.6 Reduced defintion) -  Whether it provides content to Standard 12.1 ru6 clients and as well as to Reduced 12.1. Ru6 clients.

Thanks in advance!!!

#EDIT

Hi,

Thank you for posting in Symantec community.

If you choose standard-size only, any clients that required reduced size content cannot get content updates from the management server. If you choose reduced-size only any clients that require standard-size content cannot get content updates from the management server.

By default both Standard-size and reduced-size content is selected.

To configure Symantec Endpoint Protection Manager to download reduced-size definitions, click Admin > Servers, select the site, and click Edit Site Properties. On the LiveUpdate tab, change the selection for Content Size to Download.

The reduced-size Windows client is actually designed for embedded systems and VDI environments. The reduced-size client is 80% to 90% smaller than the standard-size client because it uses the most recent virus and spyware definitions only. The reduced-size client provides slightly less protection than the standard-size client definitions. Therefore, install and enable all protection technologies to mitigate this small reduction in Virus and Spyware Protection. These protection technologies include the firewall, Download Insight, Intrusion Prevention, and SONAR. Also, use the system lockdown feature to ensure the highest security on reduced-size clients. System lockdown either allows only applications on a specified list (whitelist) or blocks only the applications on a specified list (blacklist).

In all the 3 this is what happens

When will a client download a full definition set from a Symantec Endpoint Protection Manager or Group Update Provider?
 

https://support.symantec.com/en_US/article.TECH131528.html

Hi Chetan,

Thanks for your quick response. But I need clarification on GUP enabled SEP clients.In SEPM we have enabled both standard and reduced.

We need an idea on how GUP works if it installed with Standard or Reduced definition set.

Thanks You. 

If it's installed with Standard-size defintition set it will receive standard-size definitions only, same applicable for redcued-size definitions.

By default, Symantec Endpoint Protection Manager (SEPM) receives reduced-size Virus and Spyware definitions for the clients.

Can refer this article: Reduced-size clients use the full virus and spyware definition set after an upgrade

http://www.symantec.com/docs/TECH230274

GUP PC(SEP 12.1.5) - Whether it provides content to 12.1 ru6 clients requesting Reduced or Standard content.

Yes, a 12.1.5 GUP is able to provide both standard and reduced content to 12.1.6 clients (I just tested it).

GUP PC(SEP 12.1.6 Standard definition) - Whether it provides content to Reduced 12.1 ru6 clients and as well as to Standard 12.1 Ru6 clients.

GUP PC(SEP 12.1.6 Reduced defintion) -  Whether it provides content to Standard 12.1 ru6 clients and as well as to Reduced 12.1. Ru6 clients.

Technically, the GUP is a small HTTP server listening on default port 2967. So it doesn't matter if the GUP resides on a client with reduced or full AV/AS definitions. And it doesn't matter either if the clients are pulling reduced or full definitions. You have to think GUP and client as two different items. Therefore, both scenarios will work.