Symantec endpoint protection client not updating from the server
A freshly installed client will take a few hundred megabytes to get updated to the latest definition set.
The GUP technology in SEP allows administrators to designate client systems within the environment to distribute client definitions in a peer fashion.
In an environment where a GUP is configured, clients designated to use GUPs will reach out on port 2967/TCP to see if there is a definition update available.
He has consulted for many Fortune 500 companies and assisted them with their security needs.
The following resources help you to plan and perform an optimal upgrade to the current version of Symantec Endpoint Protection (SEP), while following the recommended best practices and being aware of any potential issues and risks.
Gueth is a Senior Security Consultant with Conventus specializing in Symantec Endpoint Protection and Symantec Data Center Security.
He has worked in the IT Security field for over a decade including positions with Symantec and NASA.
On a subnet over a WAN link, you would have a single client retrieving definitions from the SEPM.
This is the same whether you have ten clients over the remote WAN link or two hundred.
If you have an environment where you have a separate Live Update in your environment, the GUPs will not request definitions from this system.