Symantec Endpoint Protection (SEP) clients fail to receive content updates from a Group Update Provider (GUP) in environments where multiple Symantec Endpoint Protection Manager (SEPM) servers are utilized in a load-balancing configuration.
You might see similar errors in Sylink.log from a SEP client trying to get updates from GUP:
This situation occurs when a SEP client heartbeats in to one SEPM requesting a content delta file, and is then pointed by policy to a GUP to download the content. If the GUP it contacts is communicating with a different SEPM that has never received the same delta request, the SEPM will not have generated that delta package and will return a 404 (file not found) error to the GUP.
The GUP will then remove that delta from its download queue and will not attempt to download it again unless requested by a SEP client later. Clients requesting that delta will not be updated until one of the following occurs:
This issue is resolved in Symantec Endpoint Protection 11 Release Update (RU) 6 Maintenance Patch (MP) 2. For information on how to obtain the latest build of Symantec Endpoint Protection, read Obtaining the latest version of Endpoint Protection or Network Access Control 11.
Obtaining the latest version of Endpoint Protection or Network Access Control 11
After migrating SEP clients to RU6 MP2 perform the following steps on all affected GUP SEP clients to enable the fix: