TEM managed clients should receive updates automatically from the server.
He has consulted for many Fortune 500 companies and assisted them with their security needs.
This document explains how to update Symantec Endpoint Protection definitions by running Live Update.
In some environments client communication will go over the WAN while Internet traffic will traverse through a cheaper local ISP.
In this scenario one serious discussion should be if it is better engineered to have all clients retrieve their definitions directly through the Internet to Symantec’s public Live Update servers.
Depending on the mixture of operating systems within your environment, this is important to know.
If you are trying to schedule updates to occur only at certain time periods through the day, this can only be achieved by using a Live Update server. Group Update Providers work by requesting definitions from the SEPM directly.
A freshly installed client will take a few hundred megabytes to get updated to the latest definition set.
Once clients have been installed and operating normally the definition updates are normally between 40kb-200kb.
If the GUP does not have a definition it will reach out to its defined SEP Manager and download the correct update.
On the next heartbeat interval the client will then download the definition from the GUP.
We have run into scenarios where SEP administrators have configured remote client desktops as GUPs.