- Symantec endpoint protection 14 requirements update#
- Symantec endpoint protection 14 requirements download#
Since differential updates are normally small, in an environment where all the traffic is on the same local LAN as the SEPM, it almost is never beneficial to use GUPs in this scenario.
In this scenario one serious discussion should be if it is better engineered to have all clients retrieve their definitions directly through the Internet to Symantec’s public LiveUpdate servers. In some environments client communication will go over the WAN while Internet traffic will traverse through a cheaper local ISP. For sites with a very small number of clients, it is unlikely that a GUP would be needed.ĭepending on how you publish definitions within your environment, something else to consider is the difference between cheap and expensive bandwidth. This is the same whether you have ten clients over the remote WAN link or two hundred. On a subnet over a WAN link, you would have a single client retrieving definitions from the SEPM. While in the field we have seen clients use GUPs in different ways, the purpose of the GUPs was to reduce bandwidth requirements. These updates occur roughly three times a day on average. Once clients have been installed and operating normally the definition updates are normally between 40kb-200kb. A freshly installed client will take a few hundred megabytes to get updated to the latest definition set. To understand the bandwidth savings of using a GUP it is important to understand the amount of traffic generated by definitions updates.
Symantec endpoint protection 14 requirements update#
When should a Group Update Provider be used? This is to insure that definitions are available to the client even if GUPs are unavailable.
Symantec endpoint protection 14 requirements download#
If the client is not able to download the definition from the GUP due to the amount of time it takes or if the GUP is unavailable, it will then default to pulling definitions from the SEPM. On the next heartbeat interval the client will then download the definition from the GUP. If the GUP does not have a definition it will reach out to its defined SEP Manager and download the correct update. In an environment where a GUP is configured, clients designated to use GUPs will reach out on port 2967/TCP to see if there is a definition update available.
The GUP technology in SEP allows administrators to designate client systems within the environment to distribute client definitions in a peer fashion. In this article we wanted to explore what a GUP is, how they can be useful, and proper implementation. X Symantec Endpoint Protection 14: Group Update Providers (GUP) The use of GUPs in your SEP environment can either be a useful tool or something that requires more management.