Endpoint Protection

does a GUP need to have the SEP client installed?

Yes the client needs to be installed.

More information on what the GUP is and why it needs to be on a client can be found here.

http://www.symantec.com/business/support/index?page=content&id=TECH93813

http://www.symantec.com/business/support/index?page=content&id=TECH96419

Yes, SEP has to be installed in order to form a GUP

GUP is just an additional functionality given to any SEP client to locally distribute content updates to clients. 

In addition to what has already been said:

The choice of SEP features you install on the GUP does not really matter. You can have a SEP client installed with no protection at all (only core components), it would still be able to act as a GUP, and to provide definitions for all SEP modules to the other clients.

Hi,

If you want to make the GUP then client patch required on the same which manage by server

If you want to update the client systems through GUP then also required the clients. Because GUP will be assign on Server Client Group. It will be update only those system which are available in that Group