Symantec clients updating definitions
The GUP technology in SEP allows administrators to designate client systems within the environment to distribute client definitions in a peer fashion.
In an environment where a GUP is configured, clients designated to use GUPs will reach out on port 2967/TCP to see if there is a definition update available.
See Choose a distribution method to update content on clients based on the platform.
This article describes how to download and update definitions for Symantec Endpoint Protection (SEP) clients using files.
Other delivery methods include Group Update Providers, internal Live Update servers, or third-party tool distribution.
See Making sure that Symantec Endpoint Protection Manager has the latest content.
You can also update content on Symantec Endpoint Protection Manager with a file.
If the GUP does not have a definition it will reach out to its defined SEP Manager and download the correct update.
On the next heartbeat interval the client will then download the definition from the GUP.
For protection against the latest threats, it is important that antivirus definitions, IPS signatures, and other content is always up-to-date.