Hello,
We deployed SEP 12 in multiple countries which each contain multiple sites. Within a site multiple subnets are used.
The problem we are facing is that sites contain multiple subnets and the default behavior of the client is that it will contact a GUP in the same subnet and if this is not available it will contact the SEP Server (which is in our central datacenter) this causes a lot of network traffic over the WAN.
For example in a site in the UK we have 8 subnets and only 1 GUP available in 1 subnet all other clients will download the updates from the datacenter. This is of course not a problem for 8 subnets, but we have 8 or more subnets per site and around 300 sites through EMEA, this wil result in 300*8 = 2400 Explicit GUP rules which isn't really nice to enter or administer.
The only way I know to "solve" this behavior is to use Explicit Group Update Providers for Roaming clients, but the downside of this is that it is only possible to specify a GUP (or GUP in subnet x.x.x.x) through a /24 client subnet. I our case we will have to create several hundreds of rules which isn't a good solution. It would be nice to be able to create a rule for a range of subnets or even specify a subnet mask to extend the range of a subnet.
There is also a possibility to make use of the "Manage Locations", but then we would have to create at least the same amount of policies as we have sites which isn't a pretty solution either, the possibility to use IP Ranges in the explicit GUP for roaming client would make things a whole lot easier to implement and administer.
Kind regards,
Michael Verbeek
Canon Europe