Endpoint Protection

In reading through the forums, I came across some older posts and wanted to make sure they were still relevant. If so, I may be going about this the completely wrong way... ugh.

From here (https://www.symantec.com/connect/forums/verify-client-using-gup#comment-4304551):

1. Does the GUP NEED to be on the same subnet as its clients?

2. To make a GUP, an LU policy needs to be set on the group that the GUP is in signifying its a gup and then an LU policy is put on the group for clients mentioning that GUP?

Thanks!!

1. No. I would typically setup my single GUP for a location (with multiple IP ranges) and apply that policy to the location. I know some folks would not agree with this but it has always worked for me, especially when I didn't have the option to do multiple GUPs.

2. Yes. So you may want to take this into considertation when grouping clients.

Thanks Brian,

1. What do you mean by "mulitple ranges"? Do you mean the filters in the gup filter or mulitple ranges of LANs?

2. Is there a decent GUP creation article? I have found multiple but some or incomplete, others are forums posts that are hard to follow on this subject.

• https://support.symantec.com/en_US/article.TECH96419.html
• https://support.symantec.com/en_US/article.TECH105005.html
  • This article explains how to make a GUP but doesnt explain where to point that policy to and also that there would need ot be a second policy for the groups that poit to the GUP (unless that GUP is in the same group as other machines groups - correct?)

I'm talking about subnet ranges

You'd apply the policy to the group the GUP is in as well as the group of clients you want to grab from the specific GUP.

You can only have one policy per group. You can setup multiple locations within a group and apply a policy for each. So for example if you have clients in the On Network group that you want to pull updates from the GUP and Off Network clients pull from Symantec LU.