Hello,

We have a large environment where we would like to do the following:

1. Create a group that has all of the GUPs
2. Those gups should be assigned to other groups that has clients (we name our groups as locations)

Can this be done or the gups have to be in the same group as the clients?  If this can be done, can anyone suggest a good reading?

You would need to create a policy to define the GUPs and than apply to the groups.

If using 12.1.2, than you use the explicit GUP. You can create one policy and add all your GUPs to it than apply.

Understanding "Explicit Group Update Providers (GUPs) for Roaming Clients" in Symantec Endpoint Protection (SEP) 12.1.2

The tool here from Elisha will help you create it quickly:

https://www-secure.symantec.com/connect/downloads/generate-liveupdate-policies-have-many-gup-subnets

You can assign the policy of on that group where you need to define.

Best Practices with Symantec Endpoint Protection (SEP) Group Update Providers (GUP)

Group Update Provider: Sizing and Scaling Guidelines

https://www-secure.symantec.com/connect/blogs/best-practices-and-troubleshooting-group-update-providers

Earlier it has to be in the same group, but now its changed. client can update any subnet.

Hello,

Yes, it surely could be done.

In SEP 11.0.RU5 or later (including SEP 12.1), any client that identifies itself to SEPM as a GUP will be added to the globallist.xml, regardless of whether they were configured as Single or Multiple GUP initially.

This globallist will be presented to clients that are configured to use a GUP. This list is applied in ascending order by the client, so if the IP Addresses are in the same subnet as the requesting client, the first one on the list will be used by that client.

In this design, clients will only attempt to contact GUPs in their own local subnet. These GUPs will never cross a router or a gateway, so if there is a router or a gateway in between the two networks then clients will only use the local GUP.

I would suggest you to check this Article:

About the types of Group Update Providers http://www.symantec.com/docs/HOWTO80957

Hope that helps!!

To assign GUP(Which are in one group) to each location

Define a liveupdate policy with multiple GUP and assign it to all groups(location). 

Note:-Ensure that you have define GUP in each subnet.