Video Screencast Help
Symantec Secure Login will be live on Connect starting February 25. Get the details here.

Group Update Provider v/s Liveupdate Administrator

Created: 10 Oct 2012 • Updated: 04 Jan 2013 | 3 comments
Language Translations
Mithun Sanghavi's picture
+9 9 Votes
Login to vote


There are question which arises on - 

What is the difference between Group Update Provider and Liveupdate Administrator?

Which update architecture is best for your environment?

Group Update Provider v/s Liveupdate Administrator



Extra software and potentially hardware needed.



Average daily network transfer from remote sites

10 mb +/-

100mb +/- (600mb+ once per month)

Max daily network transfer from remote sites

100 mb +/-

100mb +/- (600mb+ once per month)

Distribute product updates/patches


Yes (if made available)

Content update : Remote site from update server

Pull from remote (on demand)

Push from LUA, then pull (scheduled)

Supported clients per distribution point

10,000 (higher possible with higher spec)

Unlimited (in theory)

Bandwidth throttling : Remote site to



No (not for FTP, only for HTTP)

Operating system per distribution point

Windows System


Resilience to WAN network issues



Client to distribution point roaming and load balancing



Provide incremental updates for out of date clients

Yes (period configurable but typically 2--‐4 weeks)

Yes (up to 1 year out of date)

Note: The difference between a GUP and the LUA 2.x. The GUP will only retrieve content as it is requested, and will retrieve it from the SEPM. This means that it will always retrieve the smallest and most efficient package possible. It will not download any unnecessary content. An LUA is designed to apply updates generally to a mixed environment. It will update itself on a schedule, and will download all content available at that time. An LUA downloading 32-bit and 64-bit windows definitions only may download 4-6 GB of data per month. The equivalent GUP is likely to download less than 500 MB.

Please be aware that SEP 11 is radically different in the amount of materials it downloads in LUA than SEP 12.1.

Check this Article:

How Big are Current Symantec Endpoint Protection Definitions?

Any SEP client on a windows system can become a GUP. The system to be used would be determined by the architecture, client count the GUP would service, etc.

LiveUpdate Administrator requires a Windows server for the application. A built in test/production web sites for content distribution could be used…or any other web server on Windows/Linux/UNIX could be configured within LUA.

A GUP is a SEP client configured to become a surrogate content distribution point to the SEP Manager. It accomplishes this by storing local copies of deltas requested by clients talking to it. It does not actually create deltas, rather it proxies the request on behalf of a client and asks the SEPM for the delta/full content. It retains these files to provide to other clients thereby reducing the content processing load on the SEPM(s). It also provide granular bandwidth throttling capabilities which perhaps speak to one of its main use cases.

LiveUpdate Administrator is a full application that runs on Microsoft IIS. It automates the download and distribution of security and client updates to its own distribution web sites, or any other web server you choose to configure. It can provide content updates for non Windows SEP clients (e.g. SAVFL, SEP for Mac, SMSMSE, etc). 

Here are few Articles and Videos - 

Group Update Provider (GUP)

1) Best Practices with Symantec Endpoint Protection (SEP) Group Update Providers (GUP)

2) About the types of Group Update Providers

3) How to: Setup a Group Update Provider (GUP)

4) Configuring a Group Update Provider

5) Configuring Group Update Providers in Symantec Endpoint Protection 11.0 RU5

6) What is the maximum number of Group Update Providers which can function in a network?

7) How to install the Group Update Provider (GUP) content folder (Shared Updates) in a custom drive/partition?

8) Group Update Provider: Sizing and Scaling Guidelines

9) Troubleshooting the Group Update Provider (GUP) in Symantec Endpoint Protection (SEP)


1) Group Update Providers- Part 1

2) Group Update Providers- Part 2

Liveupdate Administrator (LUA)

1) Best Practices for LiveUpdate Administrator (LUA) 2.x

2) When to use LiveUpdate Administrator?

3) What's new in LiveUpdate Administrator 2.x

4) How to obtain the latest version of Symantec LiveUpdate Administrator (LUA) 2.x

5) LiveUpdate Administrator 2.x and Symantec Endpoint Protection Manager on the same computer

6) Installation and configuration of LUA

7) LiveUpdate Administrator: Product Selection Guide

8) A Helpful LiveUpdate Administrator 2.x Analogy

9) How Big are Current Symantec Endpoint Protection Definitions?

10) Managing LiveUpdate Administrator 2.x Space Usage.

11) How to backup and restore LiveUpdate Administrator (LUA) configuration in LUA 2.3

12) How to Collect Troubleshooting Information from LiveUpdate Administrator 2.x


1) LiveUpdate Administrator 2.3: What's New

2) LiveUpdate Administrator: How to configure a remote Distribution Center

3) Install LUA (Live Update Administrator) and Configure for Symantec Endpoint Protection

Hope that helps!!

Comments 3 CommentsJump to latest comment

Mithun Sanghavi's picture


I would request all the Users to Migrate LUA from their older version to Liveupdate Administrator 2.3.2 - 

LiveUpdate Administrator (LUA) version 2.3.2 is now available

Also, would suggest to check these Articles below:

A Helpful LiveUpdate Administrator 2.x Analogy

Managing LiveUpdate Administrator 2.x Space Usage

How Big are Current Symantec Endpoint Protection Definitions?

Using IIS Logs to Check LiveUpdate Administrator 2.x Health

LiveUpdate Administrator 2.x Server Connection Recommendations

Hope that helps!!!

Mithun Sanghavi
Associate Security Architect


Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Login to vote
consoleadmin's picture

Nice information and helpful KB.


Login to vote
rs_cert's picture

Helpfull article Mithun.

Login to vote