Endpoint Protection

 View Only

  • 1.  SEP GUP - Will it updates clients from RU5 to RU6?

    Posted Apr 13, 2011 06:57 AM

    Hi everyone,

    This is my first post so I will just take this chance to say hello.

    I have a question regarding the group update providers for SEP / SEPM. At present we have approximately 19 SEPM on remote sites, some service approximately 3 computers.

    My question is, if we were to decommission the SEPM's on the remote site and replace these with GUP's instead to save resources all round, do the GUP's have the ability to roll out new client versions? Primarily RU5 to RU6, then RU6 to RU6 MP3...

    All sites have 2mb links in place so I do not see an issue with clients contacting back for policy updates as the policy rarely changes.

    Any advice on this / thoughts would be appreciated. At the moment the SEPM services seem to stop randomly and replication isn't overly successful.

    Thanks

    Mike

     



  • 2.  RE: SEP GUP - Will it updates clients from RU5 to RU6?

    Broadcom Employee
    Posted Apr 13, 2011 07:24 AM

    Hi Mikez1,

    Welcome to the Symantec security forum.

    GUP can only provide definitions. GUP can not upgrade clients version.

    http://www.symantec.com/business/support/index?page=content&id=TECH96419&locale=en_US

    http://www.symantec.com/business/support/index?page=content&id=TECH96417&locale=en_US

    If you are looking for other source to upgrade clients rather than SEPM then go through following link

    How to upgrade a client from a non-manager server using the "Download the client package from the following URL (http or https)" option

    http://www.symantec.com/business/support/index?page=content&id=TECH106181



  • 3.  RE: SEP GUP - Will it updates clients from RU5 to RU6?

    Posted Apr 13, 2011 07:28 AM

    NO, it can only update defs, not packages...



  • 4.  RE: SEP GUP - Will it updates clients from RU5 to RU6?

    Trusted Advisor
    Posted Apr 13, 2011 10:40 AM

    Hello,

    GUP provides Virus Definitions across the Machines which are in the network and nothing much than that.

     

    A brief overview of content delivery via the GUP:

    1. SEP client checks in with SEPM on heartbeat schedule to determine if there's new content.
    2. If there is, the SEP client then polls the GUP to see if the GUP already has it.  Usually the SEP client is looking for the delta file (the difference between what the client has (the older date) and what it needs (the newer date).
    3. If the GUP has it, then the GUP delivers it to the SEP client.  If the GUP does not have it, the GUP requests it from the SEPM.  If the SEPM does not have a revision old enough to match what the client has, the full definition set (full.zip) is sent instead.
    4. After the download from the SEPM is complete, the GUP serves it to the client and stores it in case any other clients request it.  The GUP will store it until the "delete content updates if unused (days)" condition is met, at which time it is removed.

     

    Upgrading Clients with Latest version is Symantec Endpoint Protection Manager's Job.

    Again, the same could be done Manually. You can choose Autoupgrade option from SEPM.

     

     

    Upgrading clients by using AutoUpgrade
     
    http://www.symantec.com/business/support/index?page=content&id=TECH96789

     



  • 5.  RE: SEP GUP - Will it updates clients from RU5 to RU6?

    Posted Apr 17, 2011 06:32 AM

    Hi,

    GUP can only provide AV definitin update.

    But to upgrade clients without SEPM you can use client deployment utility (can be found in SEPM DVD under tools folder). Using that utility you can deploy new SEP package to all local clients (LAN where SEPM is not present) and it will upgrade the version of SEP client.



  • 6.  RE: SEP GUP - Will it updates clients from RU5 to RU6?

    Posted Apr 18, 2011 09:23 AM

    I really don't understand why Symantec have not developed this as a 'out of the box' feature.

    We have been using Symantec Endpoint since it was first released and have always wanted a mechanism to upgrade remote clients using the GUP's since a lot of our remote sites have 50+ users with a small link back to the our head office, often just 1 or 2MB.

    We end up having to write login scripts to upgrade the clients from local file servers.

    I've been asked by my Manager to investigate other AV solutions and I have always tried my best to stay with Symantec but I think this might be the reason we go with another provider.



  • 7.  RE: SEP GUP - Will it updates clients from RU5 to RU6?

    Broadcom Employee
    Posted Apr 18, 2011 09:29 AM

    I too think this feature should be added, however as conveyed to me, GUP act as mini HTTP host not full feature, may be next versions have this feature.

    Do you know any other AV which does this kind of remote install?



  • 8.  RE: SEP GUP - Will it updates clients from RU5 to RU6?

    Broadcom Employee
    Posted Apr 18, 2011 09:55 AM

    Hi Binary,

    Have you checked this 

    If you are looking for other source to upgrade clients rather than SEPM then go through following link

    How to upgrade a client from a non-manager server using the "Download the client package from the following URL (http or https)" option

    http://www.symantec.com/business/support/index?page=content&id=TECH106181



  • 9.  RE: SEP GUP - Will it updates clients from RU5 to RU6?

    Posted Apr 18, 2011 10:09 AM

    Hi Chetan,

    We have but this is not an option as 75% of our users are mobile and will be in a different location day to day.

    The location awareness function in GUP would be an ideal way for us to upgrade our clients.

    It's a shame that Symantec don't realise this.