Thanks for the reply, i have one more question, how to check the client is working as a GUP?
At the client there are some hints that it's running as a GUP:
- Client is listening at port 2967 (default), check it with netstat -an
- In the folder C:\Program Files\Symantec\Symantec Endpoint Protection\<Version number>\bin you can find the GUP cache folder called SharedUpdates.
At the SEPM console, you can search for GUPs as follows:
Clients > [Client tab] > Search clients
Under Search Criteria, enter "Group Update Provider = True" in the columns.