Endpoint Protection

 View Only

Generate LiveUpdate Policies that have many GUP Subnets 

Jan 18, 2013 01:40 PM

I made a little tool that will create a new LU policy using a CSV or text file as the input.  The tool can use an existing LU policy as a template.  This will allow you to easily add new Explicit GUP settings or new Multiple GUP settings to an existing LU policy.

Here are the steps to use the tool:

  1. Download and run tool below.
  2. Create a text file (see below for details).
  3. (optional) If you want to use an existing LU policy as a template then export the existing file from SEPM.
  4. Run the CreateGUPpolicy.exe tool.
  5. Type in the policy name.
  6. Chose the type of GUP to add: Explicit or Multiple
  7. Browse to the text file.
  8. (optional) If you want to use an existing LU policy as a template then enable the template checkbox and browse to the policy file exported from SEPM.
  9. Click the “Create Policy” button and the tool will create a new LU policy that can be imported into SEPM.

For Explicit GUP settings: The text file must contain two columns.  The first is for the client’s subnet and the second is for the GUP’s subnet.  See attached sample.

For Multiple GUP settings: The text file must contain one column containing the IP address of the client you want to be a GUP.  See attached sample.

CreateGUPs.png

The tool requires Microsoft .NET Framework 2.0 or higher.  This tool also requires the ‘Microsoft Visual J#® 2.0 Redistributable’.

You can download ‘Microsoft Visual J#® 2.0 Redistributable’ from here:
32bit: http://www.microsoft.com/en-us/download/details.aspx?id=18084
64bit: http://www.microsoft.com/en-us/download/details.aspx?id=15468

Legal: This tool is not officially supported by Symantec and should be tested prior to use.  Symantec shall not be responsible or liable, directly or indirectly, for any damage or loss caused or alleged to be caused by or in connection with your use of or reliance of this tool.

Statistics
0 Favorited
1 Views
3 Files
0 Shares
0 Downloads
Attachment(s)
zip file
CreateGUPpolicy.zip   49 KB   1 version
Uploaded - Feb 25, 2020
txt file
Sample Explicit GUP List.txt   104 B   1 version
Uploaded - Feb 25, 2020
txt file
Sample Multiple GUP List.txt   49 B   1 version
Uploaded - Feb 25, 2020

Tags and Keywords

Comments

Jan 10, 2017 05:43 AM

Hi Elisha,

Great tool and it should be saving me lots of time however......

 

I've used the current policy as a template and then added the new entries which are correctly formatted into a brand new policy which is great however I lose all the old entries.

I imagine I'm doing something wrong as the way I imagined the tool to work would be to "merge" the older policy with new entries so I can then import back in via SEPM.

 

If anyone can point me in the right direction that would be great.

 

 

 

Dec 19, 2016 11:47 AM

More and more customers required loading huge lists of Explicit GUPs by hostname (dynamic IP), please update the tool with this option. 

Nov 26, 2015 05:32 PM

Hello Elisha,

I wanted to configure both Multiple GUP and Explicit GUP option in bulk with this tool using GUP's FQDN, so from the above comment I planned to update with FQDN in Multiple GUP settings and with IP address in Explicit policy, that works fine.

But we are using different port instead of default port 2967 for GUP communication and this tool creates the explicit settings with default port 2967, even when I am taking an existing policy as template with my customized port mentioned in the default port option in the main page of Group update Provider settings as belowCapture.JPGit actually takes as below with default port in Explicit GUP settingsCapture2.JPGHow can I make my customized GUP port to be mentioned inside the Explicit Group Update provider setting, Kindly help.

Regards,
Abdul 

Mar 31, 2015 04:19 PM

Hello Philip,

For host names the tool only checks if the hostname has a space or a double quote in it.  All FQDNs should work as long as they don't have a double quote or a space.

Please verify that each name is on its own line and that you have specified the "hostname" option in the tool.  If it still does not work please send me your file and I will take a look at it.

Mar 31, 2015 03:10 AM

The options for bulk loading explicit list are IP or subnet when I try to add hostname I get 'invalid line in CSV'. I would like to bulk load the GUPs byFQDN not pointing to proxy.

Mar 26, 2015 03:00 PM

Hello Philip,

This tool simply creates a SEPM LU policy and it does support hostnames.  In other words the issue here is not with the tool.

The issue you are running into is that you want clients to talk to systems (in your case a proxy) that is not a GUP.  This will not work.  The clients get a list of all the GUPs from SEPM.  However, Since the proxy is not a GUP the proxy will not be in this list so the clients will not talk to these proxy systems.

Mar 26, 2015 10:30 AM

Hi Elisha,

Our customer uses proxy which bypasses FQDN requests and forwards all IP based to internet. The explicit list with 1500 subnets created with your tool won't work in this scenario. Could you please look into the option to support hostnames for explicit GUPs. thanks!

May 20, 2014 08:30 PM

You can use both the multiple GUP and the explicit GUP features at the same time.  Example: you can add all the hostnames to the multiple GUP list and then also add the IP subnets to the explicit GUPs.  This way GUPs will be enabled by hostname and they will use their subnet to chose which GUP to talk to.  This is a hybrid solution that likely does what you are intending to do.

At this point I don't plan to add hostname support for explicit GUPs.

May 19, 2014 02:38 AM

Elisha,

Excellent tool, helps a lot, when having dozens or hundrets of subnets.

Question: Would it be possible for you to update the tool to support hostnames in the "Explicit GUP" section?
Many of our customers use dedicated names for their GUPs but dynamic IP adresses, so this would be a great advantage.

Thank you very much for your support here on Connect,

Oliver

Dec 06, 2013 12:53 PM

Elisha,  GREAT Tool!  By adding support for the names, you just saved me hours of manually entering this data. 

Thank you!

Dec 05, 2013 09:19 PM

I updated the tool.  Now it can support both IP addresses and names for the multiple GUP feature and it can support both IP address and subnet for the explicit GUP feature.

Oct 10, 2013 02:05 PM

Hello Philip,

Yes, we can calculate the subnet IP range even if you are using a variable length subnet mask.  We do this by looking at the subnet mask of the local system and of the GUP.

If you add the IP address(es) of the GUP into this tool as the GUP subnet IP it will work.

Thanks,

Oct 10, 2013 05:25 AM

Hi Elisha, 

Probably it will be not able to calculate the subnet ip in case of VLSM (Variable Length Subnet Masks) but it will assume that it is one of the default subnet mentioned below and will pick the range for default subnet.

Class A: 255.0.0.0

Class B: 255.255.0.0

Class C: 255.255.255.0

If SEPM calculates subnet ip based on default classes clients can end up updating from the wrong GUP. Hence we would love to have the possibility to bulk upload 500+ mappings with type: GUP IP to avoid any bandwidth issues lurking around.

Cheers,

Philip

Sep 16, 2013 04:14 PM

Hello Philip,

You can put the GUP IP in as the GUP subnet.  That should work fine.  Is there some reason that you don't want to do that?

Thanks,

Sep 16, 2013 04:06 AM

Hi Elisha,

Would it be possible to add the option to specify the mappings by GUP IP address as well?

Br,

Philip

Jun 21, 2013 06:33 AM

Excellent tool!

Jun 18, 2013 02:34 PM

Thank you so much for this tool!

I currently have 100+ subnets and generally two GUPs available for each subnet.  To manage this manually is a cluster.  Being able to export adjust and import will make my life so much easier!

 

Thanks!

May 14, 2013 03:58 PM

GUP mapping type comes up as subnet when using the tool, you are saying it doesn't matter if it's subnet or IP address as mapping type if the goal is to use the IP address?

There is a subtle difference between using an IP address and using a subnet.  The key difference is that if you use the IP address option then the clients will only try to go to that one GUP and not other GUPs on that subnet.  For most cases using the subnet is better.

Is there a way to export out of the tool, so that the policy shows GUP mapping type as IP?

No  The tool will always export a policy that uses the GUPs subnet, since this is generally a better option to use.

May 14, 2013 11:21 AM

GUP mapping type comes up as subnet when using the tool, you are saying it doesn't matter if it's subnet or IP address as mapping type if the goal is to use the IP address?  Is there a way to export out of the tool, so that the policy shows GUP mapping type as IP?

May 13, 2013 04:32 PM

Yes, it is ok to use any IP address in the GUP's subnet.  In fact you can simply use the IP address of the GUP as the subnet address if you want.

May 13, 2013 01:49 PM

.

May 13, 2013 01:13 PM

Thank you for this tool.

 

One question, I am trying to populate, I am trying to populate the following screen in SEPM: Configure Explicit Group Update Providers Under Group Update Proviers and "Explicit Group Update Providers for roaming clients.

The question I have is, traditionally we have provided a subnet and then the actual ip address of the GUP in this table and not a GUP Subnet.  Using this tool, if I chose "Add Explicit GUP Subnets" will it be ok to have an IP address in GUP Subnet column or does it have to have an subnet of where the actual gup resides in?

Feb 09, 2013 02:58 AM

Thanks for the updated version. 

Feb 04, 2013 02:20 AM

Really good one Elisha,

Thanks for sharing

Feb 04, 2013 02:15 AM

Nice tool, may be it help to all of users which required the multipule gup configuarion.

Feb 03, 2013 05:27 PM

This might help solve lot of my problems. 

Related Entries and Links

No Related Resource entered.