Endpoint Protection

Hi,

So, we have our LU policy, specifiying multple GUP's (by name), this policy is linked to the generic desktop group - cxlients are currently on 3 different sites.

We have another test office - I have added the nominated GUP to the list of servernames on Rule 1.

I then rolled out the SEP client.

Since doing so, none of the clients have updated their defs (been a week now) - my guess is its trying to get from GUP and can't, as when  we roll clients out to sites with no GUPs (for testing) they get their update from SEPM fairly quickly and stay up to date.

What should I check?  Any ideas?  Read it may work better putting an IP address isntead of name, but any tools I can use?

Thanks

Troubleshooting the Group Update Provider (GUP) in Symantec Endpoint Protection 

Also assure that your clients are able to resolve your GUP names... 

You can get good info about GUP here.. . 

http://www.symantec.com/connect/articles/whats-new-group-update-providers-ru5-release-symantec-endpoint-protection-110

https://www-secure.symantec.com/connect/videos/group-update-providers-part-1
https://www-secure.symantec.com/connect/videos/group-update-providers-part-2 

Go through these so that you will have better understanding of GUP before configuring it...

If you have active directory and good name resolution system then you can give hostname....

If the clients and GUP is in the same network then name resolution will not be a problem but if its in the other workgroup then it may not contact the GUP without proper name resolution.

Same domain, DNS working fine.

GUP is local to the machines and part of the same active directort and all part of the same domain.  Dont beleive is an AD issue, going to be SEP or policy problem maybe.

Going to read through some more articles and videos, having equal headaches installing encryptiona t the moment :-)

check sylink monitor to see if the clients are able to communicate with assigned GUP and the reason for not taking the updates.

Ineed to check something else - I can only see one machine on the globalist.xml, not the 5 I have specified.


Hmmm

Gettign closer...