Things you need to be aware of when using Group Update Providers The most important thing to understand is that GUPs only work with Windows clients.
Linux and OSX clients will not use the GUP functionality at all.
If the GUP does not have a definition it will reach out to its defined SEP Manager and download the correct update.
On the next heartbeat interval the client will then download the definition from the GUP.
A freshly installed client will take a few hundred megabytes to get updated to the latest definition set.
Once clients have been installed and operating normally the definition updates are normally between 40kb-200kb.
This is a scenario where some people could believe that the environment would act in a full peer-to-peer fashion.
Symantec Security Response distributes content in and files.
If you have an environment where you have a separate Live Update in your environment, the GUPs will not request definitions from this system.
Depending on how clients are chosen to be GUPs, the antivirus team will need to be aware of any system decommissions.
We have run into scenarios where SEP administrators have configured remote client desktops as GUPs.
A few months later it was discovered that these systems have been decommissioned and replaced.