We have have 1 main 12.1.3 SEPm server and regional single GUPS (either 12.1.3 or 11.6) by geographic location. The problem is that when a user in a remote office VPNs in to work their workstation will pull defs from the regional GUP across the network. Now the SEPm server itself is closest to the VPN segment but I don't have a GUP on that segment otherwise I would just add that GUP to the Explicit Group Providers for roaming clients.
So my question is can I use the Explicit Group Providers list to explicity define the VPN client subnet to map to the SEPm server? Both GUPs and SEPm listen on the same default port 2967 so I'm wondering if that would work. I really don't want to have to create a GUP next to the SEPm server just to answer roaming GUP clients. I also don't want to enable the "Maximum time that clients try to download updates from a GUP before trying the default mgmt server" because when the user returns to their proper segment that could result in unnecessary communication with the SEPm instead of their local GUP.
If there are any other ways I'm missing to get a GUP client to download defs from SEPm by proximity (ie when roaming to same segment) I would love to know.
Thanks,
Larry