Yes a SEP client which is acting as GUP can take its own protection definition from another GUP. But you can't make a gup to take update from another GUP to distribute to its clients. GUP can only pull definitions from SEPM for distribution, not even the symantec liveupdate servers can do this. The reason is only your SEPM can build the definition delta's based the clients request.