Endpoint Protection

 View Only
Expand all | Collapse all

Trying to Understand GUP Precedence in this way of Configuration

  • 1.  Trying to Understand GUP Precedence in this way of Configuration

    Posted Jan 20, 2016 06:23 AM
    Edited by Sulman Mushtaq Mushtaq Hussain Apr 24, 2021 08:13 AM

    Hi Guys , I know how GUP works and what are the diffrent types and the mehacinism it uses to do the download and how we can configure it. However there is a particular scenerio I am trying to understand as how thing will work exactly in such kind of configuration . Would appreciate your expert opinions and suggestion in such scenerio.

     

    Group A contains the following subnets 192.168.1.0 -x.x.3.0 , 10.1.1.1.0 - x.x.3.0 . Have the following options enabled for this group ( Multiple GUP= 192.168.1.1, 10.1.1.1)

    Group B contains the following subnets 192.168.9.0 - x.x.11.0 , 10.9.9.0 - x.x.11.0 . Having the following options enabled for this group ( Multiple GUP= 192.168.9.1 and 10.9.9.9.1 )

     

    Now since each local subnet dont have any multiple GUP in their own local subnet so that will be using GUP mappings to obtain content definations . 

     

    Now as you can see that each subnet has two explict GUP mapping each ? Now what would be the precedence for the local subnet to pickup explict GUP since for each subnet we have two explicit GUP mappings ? 

    Would it pick the explicit GUP in the order it is defined ( match the top entry) or the Explicit GUP that is defined first and ignore the below entry for the same local subnet and explicit GUP mapping entry? and in case if the first explicit GUP is not reachable it will try the second for same local subnet ( Failover)

     

    What would be the logic here ?

     

    Thanks



  • 2.  RE: Trying to Understand GUP Precedence in this way of Configuration

    Posted Jan 20, 2016 06:55 AM

    Any 1 ?



  • 3.  RE: Trying to Understand GUP Precedence in this way of Configuration

    Posted Jan 20, 2016 07:11 AM

    Local Gup always takes the precedense

    Symantec Endpoint Protection (SEP) Group Update Providers (GUPs) Selection Examples
    https://support.symantec.com/en_US/article.TECH198702.html



  • 4.  RE: Trying to Understand GUP Precedence in this way of Configuration

    Posted Jan 20, 2016 07:21 AM

    Rafeeq can you please read my above post carefully. There is no local GUP in this scenerio. This scenerio is especially crafted keeping into conisderation local GUP is always preffered. Thanks 



  • 5.  RE: Trying to Understand GUP Precedence in this way of Configuration

    Posted Jan 20, 2016 07:36 AM

    i dont know how to explain this,

    AFAIK, you first need to define a local then map it as explicit

    Note: configuring an "Explicit Group Update Provider list" does not turn clients into Group Update Providers. 
     
    https://support.symantec.com/en_US/article.TECH198640.html
    will wait for others :)
    as per chethan, its one by one
    Client tries to connect the remained addresses one by one until finds an available GUP, it iterates in the order of the addresses in globallist.
    https://www-secure.symantec.com/connect/articles/sep-121-ru2-and-explicit-group-update-providers


  • 6.  RE: Trying to Understand GUP Precedence in this way of Configuration

    Posted Jan 20, 2016 07:52 AM

    Rafeeq the GUP is already defined as a multiple GUP ( it has been already specified ).

     

    What I need to know is would it pick the explicit GUP defined first in the list or just randomly since the local subnet has two explicit GUP mappings.



  • 7.  RE: Trying to Understand GUP Precedence in this way of Configuration

    Trusted Advisor
    Posted Jan 20, 2016 09:15 AM

    Hello,

    If all types of Group Update Providers are configured in the policies on a Symantec Endpoint Protection Manager, then clients try to connect to Group Update Providers in the global list in the following order:

    Top down execution of GUP providers.

    • Providers on the Multiple Group Update Providers list, in order

    • Providers on the Explicit Group Update Providers list, in order

    • The Provider that is configured as a Single Group Update Provider

     

    You may like to check this Article:

    About the effects of configuring more than one type of Group Update Provider in your network

    http://www.symantec.com/docs/HOWTO81148

    Regards,



  • 8.  RE: Trying to Understand GUP Precedence in this way of Configuration

    Posted Jan 20, 2016 12:20 PM

    Thanks for the reply Mithun but I already know this information . I would really appreciate if you can first read my question carefully to understand as what I have asked exactly. Regards 



  • 9.  RE: Trying to Understand GUP Precedence in this way of Configuration

    Posted Jan 20, 2016 02:12 PM

    This is what I founded in the Tech Note 

    Providers on the Explicit Group Update Providers list, in order

    So I believe it is the order top one will be picked up first.



  • 10.  RE: Trying to Understand GUP Precedence in this way of Configuration

    Broadcom Employee
    Posted Jan 21, 2016 10:48 AM

    Q. Now as you can see that each subnet has two explict GUP mapping each ? Now what would be the precedence for the local subnet to pickup explict GUP since for each subnet we have two explicit GUP mappings ? 

    -->  As you said earlir according to order list it will get connected, top one will be picked up first.