Endpoint Protection

 Hi,

I have more than 20 GUP servers globally and one SEPM with more than 10 000 Sep clients and a SQL Server. All my GUP servers are configured as shown below, with all the options checked.

Questions:

1. Where will the Sep clients download the updates from, Will they get them from SEPM or Liveupdate server or the Gup servers.
2. What impact will this have on my environment, is it good or bad.

Please advise as I am not sure whether to live these settings as they are or make changes.

1. Where will the Sep clients download the updates from, Will they get them from SEPM or Liveupdate server or the Gup servers.

the policy is assigned to the group, the clients will download from GUP again if you have set by pass GUP tghe clients will get the update from SEPM.is the LU enabled on client, then it will go to Symantec liveupdate for content update.

1. What impact will this have on my environment, is it good or bad.

use GUP for better bandwidthe utilization.

That really all depends on what LiveUpdate schedule you have set, and if you are using the LiveUpdate Skipping options.  Generally you are looking at the below behaviour:

1. Update from assigned GUP
2. Update from Backup GUP if configured
3. Update from SEPM if configured

These all happen in accordance with your configured heartbeat interval and all is well and good as far as the GUPs go.

Now, separate from the heartbeat interval, LiveUpdate will also run in accordance with its own schedule.  So, if you have the LU schedule set to run every 4 hours (default), then the SEP Client will connect up to Symantec LiveUpdate on the internet every 4 hours.  At this point, it should either:

1. Determine it has already got the latest defs (via the GUP and/or SEPM during the heartbeeat) and close the connection, or
2. Determine newer defs are available and download them

If 2. happens, then it won't download them from the GUP/SEPM.

Finally, it's worth noting that the LU Schdeule settings in 12.1 will (by default) skip the running of LU  altogether on the client, if the client itself is less than 2 days out of date, or has been in contact with the SEPM in the last 8 hours.  This skipping option is not available in SEP11, so these old clients will always run the LU attempt.

Check these whitepapers on GUPs and Sizing and Scalability

Attachment(s)

SEP_GUP_Whitepaper_1.1_0.pdf   1.41 MB 1 version

SEP_Sizing and Scalability Best Practices_v2.3_0.pdf   688 KB 1 version

Thank you so much for these explanations guys, I really appreciate them and thank you for the documents Brian.