Endpoint Protection

 View Only

  • 1.  How to check the client is working as GUP?

    Posted Nov 27, 2009 02:40 AM

    Dear,
    Is there any way to check the client is working as a GUP?
    In the perspective of client there's one indirect way to check whether the path "C:\Program Files\Symantec\Symantec Endpoint Protection\SharedUpdates" and contents exist. Any other way?
    Thanks in advance for your knowledge.



  • 2.  RE: How to check the client is working as GUP?
    Best Answer

    Posted Nov 27, 2009 03:35 AM

    Title: 'Troubleshooting the Group Update Provider (GUP) in Symantec Endpoint Protection'
    Document ID: 2008040113243148
    > Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2008040113243148?Open&seg=ent


  • 3.  RE: How to check the client is working as GUP?

    Posted Nov 27, 2009 03:40 AM
    Look at the sylink log it will give you the information if the gup is working or not.

    Requesting the GUP for the update
     
     
     
    05/22 00:06:28 [3504] <mfn_MakeGetLUFileIISUrl:>Requested Content Path is: /content/{812CD25E-1049-4086-9DDD-A4FAE649FBDF}/80521036/delta80520034.dax
    05/22 00:06:28 [3504] <GetLUFileRequest:>IIS URL: /content/{812CD25E-1049-4086-9DDD-A4FAE649FBDF}/80521036/delta80520034.dax
    05/22 00:06:28 [3504] <GetLUFileRequest:>http://<GUPNAME>:2967/content/{812CD25E-1049-4086-9DDD-A4FAE649FBDF}/80521036/delta80520034.dax
     
     
     
    Example of a Sylink log from a client to a GUP requesting an update:
     
                      <LUThreadProc>Starting LU download.
                      03/24 14:29:04 [2232] <LUThreadProc>Got a valid context from GetCurrentServerEx
                      03/24 14:29:04 [2232] <LUThreadProc>Setting the session timeout on LUSession to 2 min.
                      03/24 14:29:04 [2232] <mfn_MakeGetLUFileIISUrl:>Requested Content Path is:                        
                      /content/{C60DC234-65F9-4674-94AE-62158EFCA433}/80324005/delta80323019.dax
                      03/24 14:29:04 [2232] <GetLUFileRequest:>IIS URL: /content/{C60DC234-65F9-4674-94AE-62158EFCA433}/80324005/delta80323019.dax
                      03/24 14:29:04 [2232]                
                      <GetLUFileRequest:>http://192.168.2.5:2967/content/{C60DC234-65F9-4674-94AE-62158EFCA433}/80324005/delta80323019.dax
                      03/24 14:29:04 [2232] <GetLUFileRequest:>NEW download: C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF5.tmp
                      03/24 14:29:04 [2232] <UpdateLUFileList:>Updating existing Download File List with : {C60DC234-65F9-4674-94AE-62158EFCA433}80324005
                      03/24 14:29:04 [2232] <UpdateLUFileList:>Updating existing Download File List Temp file name from: to C:\Program Files\Symantec\Symantec                      Endpoint Protection\LiveUpdate\LUF5.tmp
                      03/24 14:29:04 [2232] 14:29:4=>Sending HTTP REQUEST to download LU file
                      03/24 14:29:05 [2232] 14:29:5=>HTTP REQUEST sent
                      03/24 14:29:05 [2232] <GetLUFileRequest:>IIS return=200
                      03/24 14:29:05 [2232] <mfn_DoGetLUFile200>Downloading LU file from server. Moniker: {C60DC234-65F9-4674-94AE-62158EFCA433}Server                File Path:/content/{C60DC234-65F9-4674-94AE-62158EFCA433}/80324005/delta80323019.daxLocal Path:C:\Program                        
                      Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF5.tmp
                      03/24 14:29:05 [2232] <mfn_DoGetLUFile200>Content Length => 35403
                      03/24 14:29:05 [2232] <UpdateLUFileList:>Updating existing Download File List with : {C60DC234-65F9-4674-94AE-62158EFCA433}80324005
                      03/24 14:29:05 [2232] <UpdateLUFileList:>Updating existing Download File List Temp file name from: C:\Program Files\Symantec\Symantec                      Endpoint Protection\LiveUpdate\LUF5.tmp to C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF5.tmp
                      03/24 14:29:05 [2232] <mfn_DoGetLUFile200>LU Content Downloaded. Moniker: {C60DC234-65F9-4674-94AE-62158EFCA433} Target                                   Seq:80324005 Full version:0 Delta Base Seq:80323019
                      03/24 14:29:05 [2232] <PostEvent>going to post event=EVENT_LU_DOWNLOAD_COMPLETED
                      03/24 14:29:25 [2224] <CSyLink::mfn_DownloadNow()>
                      03/24 14:29:25 [2224] </CSyLink::mfn_DownloadNow()>
                      03/24 14:29:30 [2232] <PostEvent>done post event=EVENT_LU_DOWNLOAD_COMPLETED, return=0
     


  • 4.  RE: How to check the client is working as GUP?

    Posted Nov 27, 2009 04:36 AM
    You can go to client tap in SEPM and look into the properties of the client (right click on it), if Group Update Provider is listed with "true".
    This of course does not give you any information if the GUP is working correctly. This only shows that the client is recognized as GUP.

    best regards

    Dominik


  • 5.  RE: How to check the client is working as GUP?

    Posted Nov 27, 2009 04:49 AM
    Telnet to the SEP11 GUP on port 2967. This indicates that the GUP ports is opened.


  • 6.  RE: How to check the client is working as GUP?

    Posted Nov 27, 2009 09:07 AM
    Please check the versions of SEP on the clients as well the eversion of SEPM. If it is RU5 it has enhanced features for GUP. In case the SEPM is RU 5 & the clients are at a lower version the clients might have issue in ascertaining the GUP in the same and different subnet.


    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2009091023001948