Symantec make it available to run a report on where clients get thier virus defintions from
We use both the SEPM, GUPS, and Live update in different scenario's in our environment. When a machine isn't getting virus defintions yes we can see that in a report yet I believe that we should be able to see where they are getting thier defintions from.
I was told by support we cannot get a visual on where clients are getting thier dats. Which seems that should be available to us for troubleshooting purposes. I can see if a machine has an issue there is an error in the client management logs if it cannot connect to the GUP but the defintions had to be out of date to draw my attention to look at the client logs.
Seems like a feature that the product should record along with updated virus definition and the def version as to where the defintion was acquired from. The clients are set to try the gup and if that fails they have a backup resource rather that be the SEPM in some cases or it be Live update for VPN users.
I'd like to be able to get that data and to be able to run a report on it to see what the gup loads are etc would be ideal.