Endpoint Protection Small Business Edition

hi guy

i troubleshoot some GUP are not up to date, when i open system log i see this error ( see picture ) , this client is GUP and it request download new content update from itself , look like this GUP is loop , because i put  the GUP and client ( in same subnet ) in a group that have same LiveUpdate policy , is it need to put the client and GUP in 2 separate group ( i mean client have live update policy that define GUP is which IP and GUP have live update policy that direct go to SEPM )

because i put the GUP client and client in same group in few year ago and it working fine , but when upgrade to 12 RU5 too many issues with me.

Might be a bug, see here:

https://www-secure.symantec.com/connect/forums/sep-agent-stuck-loop-using-group-update-provider-type-mapped-group-update-providers

Run the symhelp tool on the GUP to see what it shows, if anything.

dear

after i reinstall the client seem working fine, but when i open debug log , i see the client download *.dax so slow , and i try copy that link paste into IE to the bandwith i see it so fast , so i open the SEPM console and see " the maxium bw allowd for GUP download from manager...." is 100 Kbps , 100kbps in here is near 10 kilobyte ,but i want GUP dowload bandwith is 100Kilobyte ,so is it i was config wrong ?

2. i had config the bw.conf to allow bandwith is 100 kilobyte/s , so if i config wrong which config the client will follow , in SEPM console or on file bw.conf

dear Rafeeq

really it will follow bw.conf ?  i see in the debug file it download file full.zip very slow :

2015/01/13 16:06:04.916 [7748:5196] GUProxy - Download loop, 299 bytes were downloaded in this loop
2015/01/13 16:06:04.932 [7748:4520] GUProxy - **downloadHelper.CreateUrlRequest Succeed to GET://192.168.82.1:8014/content/{535CB6A4-441F-4e8a-A897-804CD859100E}/150112020/Full.zip
, begin from 19600454 with size 6250
2015/01/13 16:06:04.932 [7748:4520] GUProxy - Download loop, 6250 bytes were downloaded in this loop
2015/01/13 16:06:04.963 [7748:5196] GUProxy - Download loop, remain 553082132 bytes to download
2015/01/13 16:06:04.963 [7748:5196] GUProxy - **downloadHelper.CreateUrlRequest Succeed to GET://192.168.82.1:8014/content/{07B590B3-9282-482f-BBAA-6D515D385869}/150112020/Full.zip
, begin from 24679413 with size 6250

Well, 100 Kbps is just too slow.

Let's do a calculation:

Worst case is a full content version (about 550 MB). 550 * 1024 = 563,200 KB. If speed is 10KByte/s, you need 56,320 seconds ==> nearly 16 hours.

To get 100 Kbyte/s as you want, insert 800 Kbps.

dear Greg12

but i wonder it will follow the policy that i config in bw.conf or in SEPM console , because i try put the link download in IE , the was download speed is 100KB/s , but in the debug.log the client download speed arround 20KB/s , is it the client use another way to download full.zip so it not effect by bw.conf ????

Well, as I see it, bw.conf will throttle bandwidth to the SEPM, irrespective of GUPs or clients. Both GUPs and clients fetch content from SEPM through port 8014 (default), which is handled by Apache.

So the bandwidth value in bw.conf is the maximum reasonable value you can enter in the GUP configuration form.

If bw.conf is on 100 Kbytes/s, you need to multiply that by 8 (8 bits are 1 byte), so enter 800 kbps (kilobits per second) in the GUP form to max the bw.conf bandwidth.

It's perfectly understandable that the IE download is faster. It is only throttled by the bw.conf setting, but the GUP has to respect the lower value in the GUP form.

dear Greg12

the unit in GUP from is Kbps ( kilobit per second ) and the unit in bw.conf is byte . Is it correct ?  why symantec don't use same unit in it ? 

Yes, it is correct. Check this quite old article, if you re-calculate the example there it's clear that kbps means kilobit per second.

Apache is not a Symantec product, they seem to prefer kilobytes per second. You are right, it's confusing.