Endpoint Protection

Hello,

         I have a SEPM on the east coast of the U.S. and a GUP that will be setup in Europe.  All the European offices will point to the GUP for their delta package updates.  What I am trying to do is setup situational awareness so if an employee in the U.S. flies to Europe and plugs into a an office over there, they are not going over the WAN for their definition updates and will point to the local GUP in Europe.  I'd like to do the same for European employees that fly to the states, so that they point to the SEPM while they are here.

I was wondering if there is anyone that can recomend the best way to go about doing this, keeping inline with Symantec's recomended "best practices"?  Any advice/insight would be appreciated.

why not set a location awareness ?

also worth looking into this article

Explicit GUP

http://www.symantec.com/business/support/index?page=content&id=TECH198640

Have you looked into the Explicit GUP for roaming clients?

http://www.symantec.com/docs/TECH198640

Hi,

Thank you for posting in Symantec community.

I would be glad to answer your query.

You should configure Explicit group update provider.

It is important to understand that now the clients have ability to roam to a GUP outside of their own subnet, rather than their ability to find a nearest GUP. In previous SEP versions, the clients would only connect to a GUP outside of their own subnet, if such a GUP was configured as "backup" GUP.

Explicit Group Update Provider:

It will allow clients to use specific GUP's outside their subnet.

Only configurable through SEPM

This is not auto discovery feature

Path: SEPM --> Policies --> Liveupdate Policy --> Edit liveupdate setting policy --> Server Settings --> Group Update Provider

Refer this article:

SEP 12.1 RU2 And Explicit Group Update Providers

https://www-secure.symantec.com/connect/articles/sep-121-ru2-and-explicit-group-update-providers

You can use location awareness and create different conditions based on the IP range of the clients and configure the clients to look for a specific source (for updates) depending upon their IP.