Setting up GUPs

[Migration User]

I have read all the whitepapers, etc.. that I can find on setting up GUPs, but still have a couple questions on them.

My network is setup that we have 50+ remote facilities that are all on different subnets.  So I am using location awareness to control the policies for those locations, based on their IP/Subnet.  I was planning on using the Multiple Group Update Providers option to set a list of possible GUPs, but upon reading the description for it, it seems that it is only valid for GUPs that are on the same subnet.  Is this true?  If it is I will need to setup 50+ LiveUpdate policies to point to the client that I want to use as a  GUP in each of the subnets.  This is not a problem, just want to verify before I do it.

Second question.  Part of the reason we are setting up GUPs was with the hope we could use them to provide SEP client updates.  I know they will provide definition/content updates, but if I flag a new Update Package available for a group, will it pull from the SEPM or from the GUP?  I cannot have it pulling from the SEPM as our network cannot handle pushing a several hundred MB file accross it to multiple PCs.

[pete]

for 1st question, configure the backup GUP

http://www.symantec.com/business/support/index?page=content&id=TECH139867

for 2nd question

packages are auto upgraded using the SEPM console, hence client will get the package from SEPM not GUP. DO not configure for autoupgrade if you are worried about the bandwidth.

You can use the web or email link for package to be downloaded by end user

■ Install the Symantec Endpoint Protection clients

http://www.symantec.com/business/support/index?page=content&id=TECH163580

 

[Migration User]

Ok for Question 1, so I have 50 different servers all on different Subnets that all need to act as GUPs.  If I created one LiveUpdate policy, use the Mutiple GUPs option, do I then need to create 50 different rule sets or only 1 rule set with 50 IPs in it?  Example: Rule set - 172.20.1.1, 172.20.2.1, 172.20.3.1.  If I am reading that article correctly, I the client will look at the Mutliple GUP list and choose the on in its local subnet.

I am not planning on having a backup GUP, I just want the clients to roll over to the SEPM if something is not available from the GUP.

The reason for this, is we have a large amount of roaming employees and I want to make sure they alway update from a local GUP no matter where they go.  Currently I was planning on having a location defined for each remote site and then change the LiveUpdate policy based on that.  However that is a large amount of locations and policies.

[pete]

yes, if the gups not available by pass the client request to sepm. it depends on the number of gups you want to set in the lu policy.

 

[Migration User]

I would have 50 GUPs setup.  One for each remote location.  Their DC will act as the GUP for that location.

[Migration User]

For us, using multiple locations was the way to go.

To answer your question, I need some more info about your network setup. The 50 DC's at the remote sites, will they be in the same subnet as the clients?

• If each of your DC's is on the same subnet as the clients that it will be serving, then now, you do not need seperate locations. You can then use one LiveUpdate policy. All clients will download the GUP list and find the GUP in their local subnet, i.e. the DC for the site.
•  
• If each of your DC's will be serving updates to clients in seperate subnets, you will need 50 Locations with corresponding LiveUpdate policies. See discussions about this here and here. I can't seem to find the thread where we discussed 50+ locations.

[Migration User]

Each of my DCs will be serving only client on their local subnet.  Then the Corporate office will obviously just update from the SEPM.

So it definitely sounds like the Multiple GUPs option is the way to go.  Can get rid of all the locations for the remote site then.  My only other concerns is would it be better to include all the DCs IPs in one Rule Set or create a Rule Set for each IP?

[Migration User]

One rule set will be good enough.