hi 

my company buy 7500 license ( 7500 for SEP + 7500 for SNAC ) but currently SEPM show 8200 client with a large number out of update , so another 700 client still update definition from GUP or not and what will be effec for the client over license  , and SNAC license show me error ( see picture) , pls help me

it will update

When the license goes out of compliance the Symantec Endpoint Protection product goes into enforcement mode. There are two types of enforcement

1)  Hard Enforcement: SEP 12.1 Small Business Edition

• Content update downloads stop for both server and clients.In Small Business Edition it's 1:1 mapping with CAT server.
• UI changes and log notifications are started.

2)  Soft Enforcement: SEP 12.1 Enterprise Edition

•  Content update downloads continue from all the sources.
•  UI changes and log notifications are started. 
• https://www-secure.symantec.com/connect/articles/sep-121-and-license-concept

It's will update defination.

I suggest you can enable below setting,If some client not connect specify time will automatic delete and increase SEPM license.

For SEPM 12.1 RU1 (version number 12.1.1000) or later :

1: In the SEPM go to Admin > Domains
2: Select Domain and under Tasks "Edit Domain Properties"
3: Under the General tab change the option "Delete clients that have not connected for" to be 1 day then click OK
4: Go to Admin > Servers
5: Right-click on the entry with the database servers name and instance, possibly localhost, under Local site and go to "Edit Database Properties"
6: Under the General tab change the options and check on "Rebuild indexes" and "Truncate the database transaction logs"

http://www.symantec.com/business/support/index?page=content&id=TECH168121

dear James007

if change to  "1 day " for "delete client not conected " ,,,is it will make some client out of group and when they come online again , it will automatic in default group , right ?

and how many percent lic can over , like 10% or 20%...that the client still update....

Yes, it will update even if its 100% over, you should always use correct number of license.

It's going default group but you may select "Use the client's last-used Group setting" under reconnection preference for clients not to move.

How to configure client Reconnection Preferences in Symantec Endpoint Protection 11 RU6 or 12.1

currently i face this problem ,  another is up to date except AV denition , can you help me to check ?

how many clients are having this problem?

Run intelligent update, it will update the definition

Using Intelligent Updater files to update content on Windows computers

http://www.symantec.com/business/support/index?page=content&id=HOWTO55187

Run the symhelp tool and check issue.

Download the Symantec Help (SymHelp) diagnostic tool to detect Symantec product issues

hi

now i have 2000 client have this problem , from this client i can telnet to GUP port 2967 , but from the log in this client , there are show " download new content update from GUP failed. remote file path : http://............dax " , i check that the GUP the client connect to , that GUP is up todate ,   so what i need to do now ?

Troubleshooting the Group Update Provider (GUP) in Symantec Endpoint Protection (SEP)

Enable sylink logging on the client which is getting the update from GUP and post it here

http://www.symantec.com/business/support/index?page=content&id=TECH104758

SEP clients won't stop updating if they go over license count. This is a separate issue here, enable sylink debugging to find out what's going on.

ok , let me try