Symantec endpoint protection management server not updating
Depending on the mixture of operating systems within your environment, this is important to know.
If you are trying to schedule updates to occur only at certain time periods through the day, this can only be achieved by using a Live Update server. Group Update Providers work by requesting definitions from the SEPM directly.
This is to insure that definitions are available to the client even if GUPs are unavailable.
To understand the bandwidth savings of using a GUP it is important to understand the amount of traffic generated by definitions updates.
A freshly installed client will take a few hundred megabytes to get updated to the latest definition set.
The GUP technology in SEP allows administrators to designate client systems within the environment to distribute client definitions in a peer fashion.
In an environment where a GUP is configured, clients designated to use GUPs will reach out on port 2967/TCP to see if there is a definition update available.
Depending on how you publish definitions within your environment, something else to consider is the difference between cheap and expensive bandwidth.