Endpoint Protection

 View Only
  • 1.  Update definition of SEP clients & communication of client to server

    Posted Sep 23, 2015 07:02 AM

    How will we check that clients taking update from GUP or SEPM server using management console?

    What is the communication cycle process to update SEP clients using GUP and except GUP.

    In which way communication take place between client, GUP and SEPM server using 8014 and 2967 port?

    Ways to update SEP clients without using GUP?

     

     



  • 2.  RE: Update definition of SEP clients & communication of client to server

    Posted Sep 23, 2015 07:16 AM

    Hi,

    SEP client can take definition from Live update server directly but it can give u issue for link down.

    Check this Article:

    How to confirm if SEP Clients are receiving LiveUpdate content from Group Update Providers (GUPs)

    http://www.symantec.com/docs/TECH97190

    I would also suggest you to check the Articles below which may interest you:

    Troubleshooting the Group Update Provider (GUP) in Symantec Endpoint Protection (SEP)

    http://www.symantec.com/docs/TECH104539

    Group Update Provider(GUP): Sizing and Scaling Guidelines

    http://www.symantec.com/business/support/index?page=content&id=TECH95353&locale=en_US

    SEP Content Distribution Monitor / GUP monitoring tool

    http://www.symantec.com/business/support/index?page=content&id=TECH156558

    GUP content monitoring tool video

    https://www-secure.symantec.com/connect/videos/sep-content-distribution-monitor-introduction

     

     

    https://www-secure.symantec.com/connect/forums/gup-server-not-updating

     



  • 3.  RE: Update definition of SEP clients & communication of client to server

    Posted Sep 23, 2015 07:23 AM

    Hello,

    Even check check these threads for best ans.

     

    How to quickly test SEP client to GUP and GUP to SEPM communication

    https://support.symantec.com/en_US/article.TECH153328.html

    SEP Content Distribution Monitor (for GUP health-checking)

    https://www-secure.symantec.com/connect/downloads/sep-content-distribution-monitor

     

     

     



  • 4.  RE: Update definition of SEP clients & communication of client to server
    Best Answer

    Posted Sep 23, 2015 07:53 AM

    To answer all of your questions:

    How will we check that clients taking update from GUP or SEPM server using management console?

    I wrote an article on using advanced filters. To check that clients are receiving update from the correct source, use advanced filtering keywork "SYLINK"

    SEPM 12.1 - Advanced Settings filter options for Client Activity logs

     

    What is the communication cycle process to update SEP clients using GUP and except GUP.

    The SEPM will update it's content and make it available. On next heartbeat, the GUPs will pull down content from the SEPM. After that the clients wil check in to the SEPM and realize new content is available at which point they will reach out to their respective GUP.

     

    In which way communication take place between client, GUP and SEPM server using 8014 and 2967 port?

    Client to SEPM communication takes place over tcp 8014. Client to GUP communication takes place over 2967.

    Ways to update SEP clients without using GUP?

    Symantec LiveUpdate; The SEPM; or LiveUpdate Administrator.



  • 5.  RE: Update definition of SEP clients & communication of client to server

    Posted Sep 23, 2015 08:30 AM

    Dear Ambesh

    Thanks for update

    Still I am not clear with point that how will we know client activity that from which source(GUP or SEPM Server) it download update definition.

    I want this details from SEPM console. How i will got these details of all clients which are communicated with SEPM console/GUP?

     



  • 6.  RE: Update definition of SEP clients & communication of client to server

    Posted Sep 23, 2015 08:32 AM

    See my article I linked above on using Advanced filters.



  • 7.  RE: Update definition of SEP clients & communication of client to server

    Posted Sep 23, 2015 08:41 AM

    When you see the decripition it would be mention as downloaded from Group update provider or Symantec endpoint protection mananger



  • 8.  RE: Update definition of SEP clients & communication of client to server

    Posted Sep 23, 2015 08:59 AM

    Thanks Brian

    I am able to get details of definition update on SEP clients.

     



  • 9.  RE: Update definition of SEP clients & communication of client to server

    Posted Sep 23, 2015 09:02 AM

    You're welcome :)