Are your GUPs XP or Server OS ?
the clients which have 1 month old defs can they connect to GUP on 2967 ( or the port you configured for GUP )

Hi - the GUPs all run server 2003 32bit.......

and yes they can connect on that port - firewall is not running on servers. and anyway, my policy specifies to bypass gup after 2 days of it not being able to contact it

bump

bump again

How is your GUP policy configured?
Is your GUP a memeber of the group which it is going to update?
it could be possible that the GUP clients may not be able to connect to the SEPM after by passing the GUP.

Hi.

Ok, so I have my main office group - all clients sit in here....then under that I have a 'servers' subgroup which is where servers on that site sit

there's no difference really except the scheduled weekly scan policy set on these.

the gup is a server on that site.

so the GUPs sit in the folders below the clients - does this make sense I think I've just confused myself....

anyway, I know most of the clients are working...they get there updates fine and checking their logs shows that they use the policy to connect to the GUP - and the GUP logs show the same, it knows it's the gup....

unless you think there's a problem with the GUP being in the folder below? I know it would look prettier if the GUP was in the upper level folder but the 'servers' subgroup was an after thought when this was rolled out

bump

 so in your setup

--Clients --(here you have all the clients )
   |__Servers ( here you have server of that group )

I am sure GUP's do support Sub-Groups.But the Policy Inheritance should be ON on the subgroup ( servers in your case )

HI I just want to ask if what is the version of your SEPM and how many clients are reporting to this server?

Hi Vikram - yes you're correct....

policy inheritance isn't on - but I can confirm that the Liveupdate policy on the subgroup and the parent groups are the same... I can check client and server (GUP) logs....the client logs say they're using the server as the GUP....and the server logs are saying 'start serving as GUP'

Hi Peterpan - Everything is using 11.0.4014.26

As I mentioned it's accross various sites....so some sites might have 10 clients, others might have a couple of hundred - but percentage wise it's the same in each....

I m aslso facing the same issue i have tried each and every thing Niether the GUP is updating nor client connected to GUP are getting updates.
I have change the GUP too. but still the same result. i have verified that there no communication issue as all ports are open.
i have given a Webex to Symantec Engineer but he also unable to sort out the problem.  I have again submit the logs now waiting from Symantec to have any updates.