Endpoint Protection

 View Only
Expand all | Collapse all

Group Update Providor

  • 1.  Group Update Providor

    Posted Apr 23, 2014 08:13 AM

    I have configured a live update policy to use a GUP. The GUP at one point in the properties of the GUP client stated positive/enabled for GUP. Now it is telling me false. Is there a way to force it to become positive/enabled? A regedit perhaps?



  • 2.  RE: Group Update Providor

    Broadcom Employee
    Posted Apr 23, 2014 08:15 AM

    the machne will become GUP based on LU policy. there is no forcible way of doing it , like enabling the registry etc.

    it has to be done through SEPM console.

     



  • 3.  RE: Group Update Providor

    Posted Apr 23, 2014 08:16 AM

    Delete and make it gup again

    there was an issue where smc.exe would crash on gup's, quite possible its because of that. Whats the version of SEP? did you check the eventviewr to see if there is any service crash?



  • 4.  RE: Group Update Providor

    Posted Apr 23, 2014 08:18 AM

    Check the system log on the client, does it show that it became a GUP and then stopped?



  • 5.  RE: Group Update Providor

    Trusted Advisor
    Posted Apr 23, 2014 08:23 AM

    Are there any machines picking updates up from that GUP specifically? Also is the GUP in the group of machines it is serving as a GUP.

    Although Symantec say the GUP can go into a seperate group to serve machines I've found that put in a seperate group some of them report as false but when I put them in the group of machines they are serving they are fine. 



  • 6.  RE: Group Update Providor

    Posted Apr 23, 2014 08:31 AM

    Troubleshooting the Group Update Provider (GUP) in Symantec Endpoint Protection (SEP)

    http://www.symantec.com/business/support/index?page=content&id=TECH104539

     



  • 7.  RE: Group Update Providor

    Posted Apr 23, 2014 08:37 AM

    Rafeeq,

    I don't believe it crashed. I have manually stopped and started the smc also and got nothing.

     

    Brian,

    Where can i find the system log for this?

     

     

    I have replaced the policy for the groups with a different one using the same GUP and will keep an eye on it.



  • 8.  RE: Group Update Providor

    Posted Apr 23, 2014 08:38 AM

    SEP client

    Under View logs >> CLient Management >> System log



  • 9.  RE: Group Update Providor

    Posted Apr 23, 2014 09:00 AM

    Thanks, Brian. I don't see anything in there regarding this issue.



  • 10.  RE: Group Update Providor

    Trusted Advisor
    Posted Apr 23, 2014 09:48 AM

    Do you have this GUP it's own seperate group?



  • 11.  RE: Group Update Providor

    Posted Apr 23, 2014 09:52 AM

    GeoGeo,

    Yes i do. It is in a different group and is currently up to date.



  • 12.  RE: Group Update Providor

    Posted Apr 23, 2014 09:55 AM

    GUP functionality must be managed via the SEPM, as it's the SEPM itself that compiles the list of available GUPs.

    It sounds as if (perhaps) there have been some LU Policy changes going on?  Can you confirm the below please?:

    • There is a LU Settings policy that defines your intended GUP either as a Mulitple or Single GUP
    • That this policy is assigned to the GUP (i.e. the group in which the GUP resides)
    • That the policy serial number on the GUP and the SEPM match

    Recently (since RU2 anyway) a common thing many admins miss is that listing a GUP in the Explicit GUP list alone does not enable GUP functionality (which is why checking to see it's in the Multiple/Single GUP list is the first point).

    If all of the above are true, then I'd personally recommend checking out the globallist.xml file (found in the below location) to see if it's even in the list (by IP address):

    <Program Files>\Symantec\Symantec Endpoint Protection Manager\data\outbox\agent\gup

    If the points are all true and it's not in the list, then we'll need more in depth logs and stuff.



  • 13.  RE: Group Update Providor

    Trusted Advisor
    Posted Apr 23, 2014 10:49 AM

    Try putting into the group whith the machines it's supplying to and updating the policy there.You should see that once the GUP has been moved and picks up new policy it changes to True.