Endpoint Protection

GUP not providing update to clients, clients are able to take update from management server.

Hello,

Could you check if the GUP clients are updated with Latest definitions?

Is the Port 2967 open on the Machines?

Troubleshooting the Group Update Provider (GUP) in Symantec Endpoint Protection (SEP)

http://www.symantec.com/docs/TECH104539

Which communication ports does Symantec Endpoint Protection use?

http://www.symantec.com/docs/TECH163787

How to confirm if SEP Clients are receiving LiveUpdate content from Group Update Providers (GUPs)

http://www.symantec.com/docs/TECH97190

1. how many such GUPs ?

2. Are clients and GUPs in same subnet?

3. Is GUP downloading Delta Definitions ?

4. From a client machine can you telnet port 2967 ?

5. What is the version of SEP clients and GUP ?

6. Is GUP client working properly (Disk Space, SMC service restarted etc)

I guess one of these questions will also answer your basic question

Have you create a new gup. if it new then pls find the attach document for the guidance to create it.

https://www-secure.symantec.com/connect/downloads/create-gup-symantec-can-help-conserve-bandwidth-clients-remote-location

kindly note that gup will be work in that condition if gup policy also assign on same folder where gup placed

to check the health of GUP. find the link

http://www.symantec.com/connect/downloads/sep-content-distribution-monitor

what is the LU policy set?

are clients able to connect to SEPM if GUP not available?

Dear open the 2967 port in GUP (Group Update Provider) server for SEP client machines.

Create a Policy in Live update provider server.

If the GUP server not provide the update to client machine after half hour automatically client machines taking update management server.

If you want client taking update only by GUP server mark on never...under the GUP server live update policy.

And also install the server package on SEP GUP server machine..Not install the full feature package.

Hi,

First identify whether GUP definitions are corrupted or not.

Check this article: How to determine if virus definitions of Symantec Endpoint Protection client (SEP) 11 or 12 Small Business Edition, are corrupted

How to clear out corrupted definitions for a Symantec Endpoint Protection Client manuall

http://www.symantec.com/business/support/index?page=content&id=TECH103176&locale=en_US

OR

In some instances, Symantec Technical Support may recommend the use of an unsupported tool that automates the removal of corrupted SEP definitions. For details please see Using the "Rx4DefsSEP" utility at

http://www.symantec.com/business/support/index?page=content&id=TECH93036&locale=en_US

If GUP is updated, run Sylink monitor tool on 2-3 affected clients & submit those logs to review.

Hi- Your issue has been resolve or still pending?

Thanks all..

This issue is resolved.

Thanks