Endpoint Protection

Hi all,

i got problem with my GUP setting.
I have create a GUP group and got several CHILD (Department).
I have specify a GUP Server for every CHILD location.
On every CHILD policy i have setup the Live update policy to get patch from CHILD GUP.
The screenshot as below CHILD 1:



However, you can see that i have already setup the ip of the GUP. But the IP does not appear on the : Group Update Provider : <defined>
When i create the installer for that CHILD 1, it will still refer to the main server SEPM.

SEP 11.0.6000.550
Please do help me. I have lost of idea to resolve this problem.

Click on first ok.and post the screen shot...

Are  cleint groups that you are referring inheriting the policy from the parent group?


Title: 'Group Update Providers (GUP) and Policy Inheritance'
Document ID: 2008011809584848
> Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2008011809584848?Open&seg=ent

policy inheritance is the main reason.

Also check if the client (assigned GUP) is up and have communicated to SEPM . Once the client gets its next heart beat the GUP update is received by the client.

after click OK.

thanks for the reply..
all the CHILD group is independent. no inhereitance from parent GROUP.
However each of the policies in my CHILD group is shared. as well with liveupdate.
I create the proper LiveUpdate for each CHILD group.
The other policy is standard policy being used as shared.
Below is the screenshot :

Since it seems that the group does not inherit from parent group as mention on the screenshot above..
Yes the client already communicated to SEPM.

I have create from parent, sub group name : GUP, and then i create sub CHILD Group under it.

Parent > GUP > CHILD Group

The GUP client i have installed it with GUP installer.
The client for the child will be using installer CHILD Group.

FYI, policy on GUP i made 2 location awareness..default is to SEPM, and others is to LiveUpdate Symantec.

For CHILD group, also got 2 location awareness, default is to GUP Client IP, and others is to SEPM..

screenshot for GUP policy :


Might be there is some conflict with my understanding on setup the GUP client...please advice me..

on the client side what is the entry in the registry?

HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\LiveUpdate\MasterClientHost?

does this list the GUP IP?

Yes, the GUP ip is in there 10.2.1.2
However when i checked on the help and support > troubleshooting on client SEP,
the server ip is the SEPM ip 10.3.1.3..screenshot as below.

Try by repairing your SEPM from add/remove programs.....

This is expected ...it will show only the SEPM IP only here..GUP doesn't mean server.It will act something like a proxy for the client updates which is having it's own cache.....

In a heart beat interval client will fist contact the server and check any new updates/policies came.If yes it will download the policies from SEPM.In case of new update present it will find it's GUP from SEPM and request to that GUP for that particular update.Then GUP will check whether it is having that particular delta update or not in it's cache.if yes it will provide from it's cache.if no it will download the same from SEPM and provide to the client.This is how the GUP works.
For more information about GUP refer this KB
Symantec Endpoint Protection 11.0 Group Update Provider (GUP)

Yes i know the function of GUP.

However, how do i know that the GUP is properly configured?
Others, from the info about GUP, the screenshot is clearly appear the host/ip of the GUP whenever we have configured it. But in my case it does not appear?..

I need to confirm that if there is any problem if i do that to my SEPM?..Or is there any task i need to do before do the  repairing?

Assure that liveupdate no running.(You can find this from task manager).Should not do it an RDP sec.
Installing, Managing, Replicating SEP or SEPM in an RDP or Dameware session is expected to fail

Yes, it is confirm that liveupdate in off.
I have installed it manually on the PC itself and never use RDP.

How do i know that the GUP is running properly? since from the client i see SEPM server's IP and not the GUP ip.

You can use this for finding out
SEP Content Distribution Monitor - Introduction

This is right only.GUP is showing as defined.If it was not defined it wold have shown not defined.In older versions(prior to RU5) you will see GUP IP address/name here.......

I think it can be consider solved.
Because it is actually not a problem just the different between MR4 and MR5..
I will try to use the SEP Content Distribution Monitor first and will let you know later.
Thanks.