I made a little tool that will create a new LU policy using a CSV or text file as the input. The tool can use an existing LU policy as a template. This will allow you to easily add new Explicit GUP settings or new Multiple GUP settings to an existing LU policy.
Here are the steps to use the tool:
For Explicit GUP settings: The text file must contain two columns. The first is for the client’s subnet and the second is for the GUP’s subnet. See attached sample.
For Multiple GUP settings: The text file must contain one column containing the IP address of the client you want to be a GUP. See attached sample.
The tool requires Microsoft .NET Framework 2.0 or higher. This tool also requires the ‘Microsoft Visual J#® 2.0 Redistributable’.
You can download ‘Microsoft Visual J#® 2.0 Redistributable’ from here: 32bit: http://www.microsoft.com/en-us/download/details.aspx?id=18084 64bit: http://www.microsoft.com/en-us/download/details.aspx?id=15468
Legal: This tool is not officially supported by Symantec and should be tested prior to use. Symantec shall not be responsible or liable, directly or indirectly, for any damage or loss caused or alleged to be caused by or in connection with your use of or reliance of this tool.
Hi Elisha,
Great tool and it should be saving me lots of time however......
I've used the current policy as a template and then added the new entries which are correctly formatted into a brand new policy which is great however I lose all the old entries.
I imagine I'm doing something wrong as the way I imagined the tool to work would be to "merge" the older policy with new entries so I can then import back in via SEPM.
If anyone can point me in the right direction that would be great.
More and more customers required loading huge lists of Explicit GUPs by hostname (dynamic IP), please update the tool with this option.
Hello Elisha,
I wanted to configure both Multiple GUP and Explicit GUP option in bulk with this tool using GUP's FQDN, so from the above comment I planned to update with FQDN in Multiple GUP settings and with IP address in Explicit policy, that works fine.
But we are using different port instead of default port 2967 for GUP communication and this tool creates the explicit settings with default port 2967, even when I am taking an existing policy as template with my customized port mentioned in the default port option in the main page of Group update Provider settings as belowit actually takes as below with default port in Explicit GUP settingsHow can I make my customized GUP port to be mentioned inside the Explicit Group Update provider setting, Kindly help.
Regards, Abdul
Hello Philip,
For host names the tool only checks if the hostname has a space or a double quote in it. All FQDNs should work as long as they don't have a double quote or a space.
Please verify that each name is on its own line and that you have specified the "hostname" option in the tool. If it still does not work please send me your file and I will take a look at it.
The options for bulk loading explicit list are IP or subnet when I try to add hostname I get 'invalid line in CSV'. I would like to bulk load the GUPs byFQDN not pointing to proxy.
This tool simply creates a SEPM LU policy and it does support hostnames. In other words the issue here is not with the tool.
The issue you are running into is that you want clients to talk to systems (in your case a proxy) that is not a GUP. This will not work. The clients get a list of all the GUPs from SEPM. However, Since the proxy is not a GUP the proxy will not be in this list so the clients will not talk to these proxy systems.
Our customer uses proxy which bypasses FQDN requests and forwards all IP based to internet. The explicit list with 1500 subnets created with your tool won't work in this scenario. Could you please look into the option to support hostnames for explicit GUPs. thanks!
You can use both the multiple GUP and the explicit GUP features at the same time. Example: you can add all the hostnames to the multiple GUP list and then also add the IP subnets to the explicit GUPs. This way GUPs will be enabled by hostname and they will use their subnet to chose which GUP to talk to. This is a hybrid solution that likely does what you are intending to do.
At this point I don't plan to add hostname support for explicit GUPs.
Elisha,
Excellent tool, helps a lot, when having dozens or hundrets of subnets.
Question: Would it be possible for you to update the tool to support hostnames in the "Explicit GUP" section? Many of our customers use dedicated names for their GUPs but dynamic IP adresses, so this would be a great advantage.
Thank you very much for your support here on Connect,
Oliver
Elisha, GREAT Tool! By adding support for the names, you just saved me hours of manually entering this data.
Thank you!
I updated the tool. Now it can support both IP addresses and names for the multiple GUP feature and it can support both IP address and subnet for the explicit GUP feature.
Yes, we can calculate the subnet IP range even if you are using a variable length subnet mask. We do this by looking at the subnet mask of the local system and of the GUP.
If you add the IP address(es) of the GUP into this tool as the GUP subnet IP it will work.
Thanks,
Probably it will be not able to calculate the subnet ip in case of VLSM (Variable Length Subnet Masks) but it will assume that it is one of the default subnet mentioned below and will pick the range for default subnet.
Class A: 255.0.0.0
Class B: 255.255.0.0
Class C: 255.255.255.0
If SEPM calculates subnet ip based on default classes clients can end up updating from the wrong GUP. Hence we would love to have the possibility to bulk upload 500+ mappings with type: GUP IP to avoid any bandwidth issues lurking around.
Cheers,
Philip
You can put the GUP IP in as the GUP subnet. That should work fine. Is there some reason that you don't want to do that?
Would it be possible to add the option to specify the mappings by GUP IP address as well?
Br,
Thank you so much for this tool!
I currently have 100+ subnets and generally two GUPs available for each subnet. To manage this manually is a cluster. Being able to export adjust and import will make my life so much easier!
Thanks!
GUP mapping type comes up as subnet when using the tool, you are saying it doesn't matter if it's subnet or IP address as mapping type if the goal is to use the IP address?
There is a subtle difference between using an IP address and using a subnet. The key difference is that if you use the IP address option then the clients will only try to go to that one GUP and not other GUPs on that subnet. For most cases using the subnet is better.
Is there a way to export out of the tool, so that the policy shows GUP mapping type as IP?
No The tool will always export a policy that uses the GUPs subnet, since this is generally a better option to use.
GUP mapping type comes up as subnet when using the tool, you are saying it doesn't matter if it's subnet or IP address as mapping type if the goal is to use the IP address? Is there a way to export out of the tool, so that the policy shows GUP mapping type as IP?
Yes, it is ok to use any IP address in the GUP's subnet. In fact you can simply use the IP address of the GUP as the subnet address if you want.
.
Thank you for this tool.
One question, I am trying to populate, I am trying to populate the following screen in SEPM: Configure Explicit Group Update Providers Under Group Update Proviers and "Explicit Group Update Providers for roaming clients.
The question I have is, traditionally we have provided a subnet and then the actual ip address of the GUP in this table and not a GUP Subnet. Using this tool, if I chose "Add Explicit GUP Subnets" will it be ok to have an IP address in GUP Subnet column or does it have to have an subnet of where the actual gup resides in?
Thanks for the updated version.
Really good one Elisha,
Thanks for sharing
Nice tool, may be it help to all of users which required the multipule gup configuarion.
This might help solve lot of my problems.