Endpoint Protection

Hi
I have some questions.
I have a GUP configured as follows:

I think that right should be removing the option "Use a LiveUpdate Server"
my question is what is the right way?
if I have the "Use a LiveUpdate Server" which is the priority asset definition download, Server LiveUpdate - Manager - GUP?
and if I have not only enabled customers GUP definitions unload?
and the GUP server from which discharged their definitions? the LiveUpdate server or Manager? the latter can be configured and selected as download the LiveUpdate definitions only?

Thank you very much for your help and I hope I understand the question

attached the image of the configuration of the GUP

Hello,

I apologize, however, I didn't get your Question. 

What are you trying to achieve?

I believe, you are trying to understand the settings.

You use the Server Settings pane in the LiveUpdate Settings Policy to specify how clients get content updates.

Internal or External LiveUpdate Server 

Select one of the following options:

Use the default management server (recommended)

Downloads content updates from the Symantec Endpoint Protection Manager. This option is recommended for most organizations. The option is the simplest and requires no configuration other than applying the policy to a group. Select this option if you use a Group Update Provider.

Use a LiveUpdate server

Downloads content updates from either the default Symantec LiveUpdate server over the Internet, or from an internal LiveUpdate Server. (In your case, you have selected Internal LiveUpdate Server). You can specify multiple internal LiveUpdate servers for failover support.

If you enable both options, clients try to retrieve updates from both sources. You typically do not enable both options unless you have a specific reason. If the server provides named update versions to clients, and the clients have previously downloaded the latest updates from a LiveUpdate server, the clients do not download and install the named (previous) versions.

Group Update Provider

Use the Group Update Provider

Specifies one or more computers to act as a LiveUpdate server for the group. For example, you might want to create a Group Update Provider to conserve bandwidth to clients in a remote location over a slow link. In this scenario, the Group Update Provider downloads the latest updates from the server. The Group Update Provider then updates the clients in the group. If the Group Update Provider is offline, the clients contact the server for the updates.

GUP can take updates only from Symantec endpoint protection Manager.

---------------------------------------------------------------------------------------------------------

In the liveupdate option; for GUP, you can select Liveupdate server however when u click on OK, it will say you have to select the management server.

Hello,

In Terms of GUP, 

SEPM updates GUP and GUP updates the Clients.

In other words, clients receive updates from GUP and GUP from SEPM.

If you have a Internal Liveupdate Server, then Internal Liveupdate server would update all which are configured to it. SEPM, SEP clients, GUP may take updates from the same, condition is that are suppose to be configured to do the same.

If Configured Properly, Internal Liveupdate Server would be preferred above GUP.

Thanks,....

Many thanks to all..........