Endpoint Protection

Hi!

for three days ago, i have updated our GUP list with two more GUP-Servers. Problem is, that the GUP function has not changed to "true" in the client-properties. The shared update folder is missing too!

I have deleted them from the list, and set them to the list etc. but always the same problem! The OS is Windows 2008 R2, Windows Firewall is completelly disabled. I have tried to use the ip-address and the hostname, both aren't working!

All other GUPs are working fine and i haven't any problems with it.

What i can do, to solve the problem? Where i can check where the problem is?

BR

Julian.

Hello,

Is your Windows 2008 Server getting newest policies from SEP Manager,you can check client policy serial number from Troubleshooting menu and check the following group from SEP Manager Policy Details tab.

For a better track you try to use Sylink Monitor on the client,please attach the logs so we can check it together.

Regards,

Oykun

the policy needs to be applied on the client. Have you checked if the client has received the policy

Hi,

Ensure the GUP’s local SEP Client is running the latest available Maintenance Release (MR), so all available optimizations and fixes are leveraged.

Since the GUP is essentially a SEP client with the additional GUP role, it must also be able to access the SEPM via the client management port. In addition to this, the clients being served by the GUP must be able to connect to the HTTP port the GUP is listening on (2967 by default). It is recommended that a GUP be on the same network segment as all clients configured to update from the GUP.

The earlier comments are all good paths of investigation, one final thing to check is if your SEP clients are configured to use https to contact the SEPM.

GUPs are only able to use http, so if you're using https for the most part in your SEP estate, you'll have to create an extra little group for your GUP(s) with a different Management Server List that specifies http comms with the SEPM, then assign a LU Policy identifying the group's members as GUPs.

Note: This is not applicable if on RU6MP2.  This release adds support to allow GUPs to communicate using HTTPS

Finally, here's a handy ariticle for troubleshooting GUPs in general:

http://www.symantec.com/docs/TECH104539

Hi,

We are running symantec 11.0.6200.754 MP2. I'm facing some problem with live update. Around 60 -70 client system are not getting definition update, its failed with the below event...

eventid entry 13, SescLU:
"LiveUpdate returned a non-critical error.  Available content updates may have failed to install." 

when forcing live update some of the workstations giving error....

"LU1814: LiveUpdate could not retrieve the catalog file of available Symantec product and component updates. Please verify that you are able to connect to the Internet and run LiveUpdate again."

Some of are with no disk space error. Can any one help me to resolved the issue.

Raju

Hi Raju,

I would Request you to please create/start new thread for this issue.

If you are wanting to use a GUP that is not in the same group as the clients that will be updating from it, you will need to configure the LiveUpdate policy for both of the groups so that the desired GUP machine is listed.

The simplest way to perform this is to utilize a shared LiveUpdate policy for the clients' group and the GUP's group. This ensures that both groups have the same designated GUP.

This document may assist you. If this does not, please provide some more information about your configuration so that we can better address it.

http://www.symantec.com/business/support/index?page=content&id=TECH131474&locale=en_US

Regards,

Hi Pete,

sorry, sorry, sorry!!!!

i have doublechecked everthing! These computers where located in a SecurityGroup where the GUP-List wasn't configured in the LiveUpdate-Policy....!

Thanks for your help @ all!!! :-)

Julian.

:-), is it working fine?

Yes, in the shared update-folders are some files! So it looks good for me!

But at the moment, i am running sylink-monitor on my computer, because i want to see if my client will get the updates from my gup located in my vlan.

What means this information:

03/04 09:31:25 [3008] <CheckHeartbeatTimer>====== Heartbeat loop stops at 09:31:25 ======
03/04 09:32:16 [3004] <CSyLink::mfn_DownloadNow()>
03/04 09:32:16 [3004] </CSyLink::mfn_DownloadNow()>
03/04 09:33:20 [3004] <CSyLink::mfn_DownloadNow()>
03/04 09:33:20 [3004] </CSyLink::mfn_DownloadNow()>
03/04 09:34:23 [3004] <CSyLink::mfn_DownloadNow()>
03/04 09:34:23 [3004] </CSyLink::mfn_DownloadNow()>
03/04 09:35:26 [3004] <CSyLink::mfn_DownloadNow()>
03/04 09:35:26 [3004] </CSyLink::mfn_DownloadNow()>
03/04 09:36:29 [3004] <CSyLink::mfn_DownloadNow()>
03/04 09:36:29 [3004] </CSyLink::mfn_DownloadNow()>
03/04 09:37:32 [3004] <CSyLink::mfn_DownloadNow()>
03/04 09:37:32 [3004] </CSyLink::mfn_DownloadNow()>
03/04 09:38:35 [3004] <CSyLink::mfn_DownloadNow()>
03/04 09:38:35 [3004] </CSyLink::mfn_DownloadNow()>

And i couldn't find the information, that the client will download the update from the GUP!

Where or how can i find the information, if the client really use the GUP for the updates?

Thx

Julian.

the full sylink log of client will show if it is getting the content updates from GUP. The above one if not related to content updates.

Shared Up[dates folder with set of definition will help to know the client request processed by GUP

Hi,