Situation:　 You have installed Symantec Endpoint Protection Management Console on a main central server.　 You have extended network subnets that you would like to designate　additional servers on each subnet to　pull virus definition updates from the main SEP Management Console server or Symantec’s .com site and then apply　these updates　to all client versions of SEP on　the　server update provider’s　own subnet.

– Log into the SEPM Console and navigate to > Policies > LiveUpdate > Add a LiveUpdate Settings Policy

     – From here you can both name and describe your new policy however you wish.

     – Select Server Settings Menu Option and then these options should be checked

                – Use the default management server (recommended)

                – Use a LiveUpdate server

                – Use the default Symantec LiveUpdate server

                – Use a Group Update Provider

      –Once these options are checked click on the Group Update Provider button

    – From here you can either select a Single Group Update Provider by specifying a server IP Address/server name or you can specify Multiple Group Update Providers.

    – If you select Multiple Group Update Providers, just select the Configure Update Provider List button and from the next window, highlight IP Address and Host Names > click Add button > click Create New Rule Set > Leave the default Computer IP Address or Host name option selected and click the Add button at the bottom of the next window. From the next window you can specify the IP or name of your server, then select OK.

– Add as many Group Update Providers as you wish but all Group Update Providers must be on different subnets.

– Return to the Group Update Provider main window upon adding the necessary servers and then from this window you can specify the specifics of client updating from Group Update Providers. Select OK when finished.

– From the Schedule Menu button you can set an actual time period for clients to download updates from the Group Update Providers instead of pulling updates at random times.

– The final menu option under the LiveUpdate Policy Window, Advanced Settings, provides a few more customization features relating to client product updates and LiveUpdate permissions you may want to allow or disable for client installs of SEP. Configure as you wish.

– Click OK on the Live Update Policy Window to save your new policy.

– From the LiveUpdate Policies List you will now highlight your policy and select Assign the Policy from the menu on the left. From the following window you can assign your new LiveUpdate Policy to individual clients or groups you have created that contain several clients in which the policy will be applied too.

Every client which is assigned your new LiveUpdate Policy will look to every server you have designated in the policy and then will deduce which server is on its subnet and then they will download updates from that server.

Symantec Endpoint Protection must be installed on all servers in which will be designated Group Update Providers.