Endpoint Protection

Is there a way to select which SEPMs can be used to download updates?

We have a total of 6 SEPM's but I only want two SEPMs to download updates from the Internet.  Then the other SEPMs can receive updates from the content downloaded from the SEPM, which grab updates from the Internet.

The other SEPMs have slow Internet connections.

We are running SEP 11 MR4 MP2.

Thanks.

You can set up (and use) a LiveUpdate Administrator server, but beyond that, you can't daisy-chain SEPMs to pull from each other, which is what it sounds like what you're looking to do.

If you do go down the route of using LiveUpdate Administrator, you *must* put LUA on a different machine than the SEPM...there is massive disk I/O involved, and we've found putting the two of them on the same physical hardware (including in VMs on the same physical host) causes issues.

Realistically, though, with the huge improvements made with GUPs in RU5...there's not much need to have remote SEPMs.  You might want to (if you haven't already) look into configuring clients at remote sites to pull from GUPs in the remote sites.

Here is a good KB about configuring GUP's?

http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/cb487ea7138bf8d24925763f00708be0?OpenDocument

 LiveUpdate Administrator 3.5 can be found here.

http://www.symantec.com/techsupp/home_homeoffice/products/lu/lu/files.html

Thanks.  That answered my question.

I realize that GUPs are the way to go for updates and are great benefit over SAV.  But I also like the ability to push application upgrades from SEPM's.  I felt that if we placed SEPM's in key geographical locations, this would be a great way to push application upgrades to SEP and an easy way to stay currentl with the latest SEP version.

Do you know if GUPs can or will be able to stage application upgrades?

Thanks!

GUPs only hand out virus definitions currently.  Honestly, I'm unaware as to if we've got anything on the "list" about having GUPs provide more than that at this time.  My gut tells me no, but I'm not in development...they could be working on it this very moment.

However, for right *now*, they only distribute virus definitions.  I do, though, recommend that you post to the Ideas page if you'd like to see the GUPs pass out packages as well.

(actually, LiveUpdate Administrator is only up to version 2.2...LiveUpdate itself is up to 3.5.)

(and not to FURTHER confuse the issue, LiveUpdate 3.5 is only for the Consumer products while 3.3 is the one for Corporate software)

:p

Chris,

My mistake, thanks for catching that. Yes, 3.3 is for Enterprise usage.

Best,
Thomas