Endpoint Protection

Hi everyone,  Just wanted to get a confirmation from you on the following , would greatly appreciate your help

Group A , clients having multiple different subnets ( 192.168.1.0/24 , 192.168.2.0/24 , 192.168.3.0/24 , 192.168.4.0/24 etc etc )

Now in multiple GUP i designate 192.168.1.1 as a multiple GUP now clients that are also part of the same group as GUP but having different subnets i.e 192.168.2.0/24 , 192.168.3.0/24 would automatically grab defs from the specified GUP (192.168.1.1) ? or would i have to make explicit GUP mapping to make these diffrent subnets  take the defs from 192.168.1.1 GUP ? Though clients are in diffrent subnets but they are part of the same subnet , my guess it that I have to make explicit GUP mapping to make it work please confirm.

Group B , clients having multiple different subnets ( 10.0.1.0/24 , 10.0.2.0/24 , 10.0.3.0/24 , 10.0.4.0/24 etc etc )

Now in multiple GUP i designate 10.0.1.1 as a multiple GUP now clients that are also part of the same group as GUP but having different subnets i.e 10.0.2.0/24 , 10.0.3.0/24 would automatically grab defs from the specified GUP (10.0.1.1) ? or would i have to make explicit GUP mapping to make these diffrent subnets  take the defs from 10.0.1.1 GUP ? Though clients have are part of diffrent subnets but they are in the same group,  my guess it that I have to make explicit GUP mapping to make it work please confirm.

Thanks ans Regards 

Now in multiple GUP i designate 192.168.1.1 as a multiple GUP now clients that are also part of the same group as GUP but having different subnets i.e 192.168.2.0/24 , 192.168.3.0/24 would automatically grab defs from the specified GUP (192.168.1.1) ? or would i have to make explicit GUP mapping to make these diffrent subnets  take the defs from 192.168.1.1 GUP ?

Clients with multiple GUPs are filtering the GUP list and only keep the GUPs of their own subnet. So you're right, you have to add explicit GUPs (or a Single GUP which can be accessed from all different subnets).

Some readings:

About the types of Group Update Providers

Understanding "Explicit Group Update Providers (GUPs) for Roaming Clients" in Symantec Endpoint Protection (SEP) 12.1.2

About the effects of configuring more than one type of Group Update Provider in your network

If you are assigning a gup as a multiple gup, only the clients within the same subnet would gets its update. So yes you have make the explicit gup entries for the clients from different subnet to grab the definition from the different subnet's (though same group) GUP. on the other hand when you simply assign a machine as a single GUP regardless of it subnets the clients are using, it will serve definitions to all the machines in that group.

Thanks for your reply Praveen , just to confirm if I am understanding it right if I configure a single GUP for a group clients that are part of the same group regardless of whether they are part of the same subnet as GUP or not and even if all the endpoints have diffrent subnets they will always get the defs from this subnet and in case if the single GUP fails they will switch over to either the SEPM or Symantec Liveupdate as a failback mechanism if they are checked in the LU policy ?

Regards 

that's exactly the correct live update processing order