Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

Still have GUP Issues.

Updated: 28 Oct 2010 | 12 comments
kristopherjturner's picture
0 0 Votes
Login to vote

I was told today by a support rep that any GUP that I assign has to be with that group of clients????

So I have to configure like 100 GUP policies now???  That doesn't sound right.

For instance...

SITEA
---COMPUTERS
   ----DESKTOPS
          -----LABA
          -----LABB
    ----LAPTOPS
           ----STAFF
           -----STUDENTS

According to his advice I would have to go to each of those groups and setup a GUP????  I am running RU5 and supposley can handle one policy with many GUPS???????

Also, I only have 1 server at most of my remote sites. This is the only box with a static IP and it is also a Domain Controller so this machine for one is on a different VLAN and another it is in a differetn folder all together then SITEA, etc......

Is there any way around this?  I really really really really need to get the GUP's working.  Symantec is killing our bandwidth at about 3 sites.

Any ideas????????

Comments

Aniket Amdekar's picture
07
Oct
2009
4 Votes +4
Login to vote

Hi, Please take a look at the

Hi,

Please take a look at the article beelow:

https://www-secure.symantec.com/connect/articles/types-group-update-providers-ru5-release-symantec-endpoint-protection-110

https://www-secure.symantec.com/connect/articles/configuring-group-update-providers-symantec-endpoint-protection-110-ru5#new

You can also go through the comments posted, as it represents a QnA interaction on GUP in RU5.

if you have any more question/queries, please post a response to this discussion forum, and we will take it from there.

Best,
Aniket

Grant_Hall's picture
07
Oct
2009
0 Votes 0
Login to vote

In the meantime you might can

In the meantime you might can throttle the amount of bandwidth used. Here is our guide for that http://service1.symantec.com/support/ent-security.....

Also I think this could dramatically reduce your bandwidth if you find that your clients are downloading the full content updates instead of just the delta updates. I suggest setting the number of definitions to keep to how ever many it takes so that your clients can turn their computers off for a few days and still not have to download the full content definitions. http://service1.symantec.com/support/ent-security....

Cheers
Grant

Please don't forget to mark your thread solved with whatever answer helped you : )

kristopherjturner's picture
12
Oct
2009
0 Votes 0
Login to vote

I have setup GUP exactly like

I have setup GUP exactly like the post above.  This issue I am running into is how I stated in....

The only system at our remote site that isn't DHCP is our Domain Controllers.  Howerver, the domain contrllers are on a different subnet and vlan then our XP Clients.

I have added the domain controller as a GUP.  Howerver, none of the clients are updated from that GUP.  I was told that the GUP has to be in the same group that the other clients are in????????

If that is the case, what is the point of  GUP policy in RU5?  I can't have XP clients assigned as GUP's. These machinse move from site to site and are on and off all day long.  The only solution is to assign my local server at the site as the GUP but  I can't move that server into the same group as my XP boxes.

Is there any solution to this problem?????

kristopherjturner's picture
12
Oct
2009
0 Votes 0
Login to vote

Grant, thanks for the bit of

Grant, thanks for the bit of info.  Will try that today for at least a better handle on bandwidth.

If I limit the bandwidth like they mention that effects all sites going to that manager?

Matt Pierce's picture
12
Oct
2009
0 Votes 0
Login to vote

 If I'm understanding how the

 If I'm understanding how the new GUP system works, having your GUP in a separate subnet from your clients.   The clients apply a subnet filter to decide if they should talk with a GUP.  Try setting listing a few clients by host name in your GUP list.   As long as DNS resolves both ways the SEPM should tell your clients to talk with the gup.  You may also want to check for firewall issues.  The GUP is going to open listening ports for peers to pull from.  In your example you would designate a few clients from each of the groups LABA, LABB, Students, and Staff in the Multi GUP policy.  Then apply that policy at the Top level.  I'm still trying to figure out how the fail over occurs.  If a client can't find a GUP in its subnet does it pick the next GUP in the list?  Or does it ignore the list and pull from the SEPM?

Davinci_uk's picture
13
Oct
2009
0 Votes 0
Login to vote

Unfortunately (i hope I am

Unfortunately (i hope I am wrong), GUP's in RU5 are too new for most people to answer - going to have to test the behaviour in any labs we all might have.  Finding a lot of conflicting or unclear info :-)

zer0's picture
26
Apr
2010
0 Votes 0
Login to vote

I have GUP's running at all

I have GUP's running at all sorts of client sites and can tell you exactly how they work in any given circumstance.
Just start a new thread and ask away :)

Z

AravindKM's picture
13
Oct
2009
0 Votes 0
Login to vote

Can you try to do a telnet

Can you try to do a telnet with your GUP pc in 2967(this is
the default port of gup) and see whether it listens or not?. If no check your
firewall settings..

 

Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind

IanZ's picture
21
Apr
2010
0 Votes 0
Login to vote

Has this been resolved yet? 

Has this been resolved yet?  I used a domain controller as a GUP in one of our remote site and it doesn't have the \SharedUpdates folder in
c:\Program Files\Symantec\Symantec Endpoint Protection.   All the other GUP computers have this folder.

Can we really use a DC as GUP in SEP?  Please advise.

 

Ian Zarzuela
Sr. Analyst, Server Technology
The North West Company
http://www.northwest.ca

blenahan's picture
21
Apr
2010
0 Votes 0
Login to vote

You absolutely can use a DC

You absolutely can use a DC as a GUP.  I have several DC at remote sites that are designted as the GUP for its' subnet

 

_________________________________________________________________

Please remember to mark the thread 'SOLVED' with the answer that most helped you by choosing 'Mark As Solution' on the applicable answer

kristopherjturner's picture
21
Apr
2010
0 Votes 0
Login to vote

Yes, sorry.  I have been able

Yes, sorry.  I have been able to get my GUP's working.  It wasn't easy and I have many policies now that I have to manage but they are working.

Grant_Hall's picture
24
Apr
2010
0 Votes 0
Login to vote

Hi Kristopher, If you could

Hi Kristopher,

If you could post back with what you did to resolve your issue that would be great! You can mark it as the solution and give yourself some points. I only ask because it helps future users navigate quickly to what you did to solve the problem.

Thanks
Grant

Please don't forget to mark your thread solved with whatever answer helped you : )