Hello ,

I have a SCCM 2012 R2 SP1 with one primary server in one site with 3 secondary servers in different sites, all of them connected via MPLS.Currently I am planning to install WSUS and SUP  in primary  for all the sites.If  I am right Software Update Point uses Distribution point and secondary sites will be using DP to update clients  ?

Do I need to install SUP in secondary sites also or both WSUS and SUP in secondary?Kinldy advise.

How many clients are at each location?
The SUP is used for scanning clients; the binaries will be downloaded from a DP.

approx..500 clients in Secondary sites.The bandwidth b/w the primary and  secondary sites are 4Mbps(MPLS).

So do I need to create a SUP in Secondary site?

If yes then while configuring WSUS database I need to point the source from primary,right?Also I need to create a group policy to point the devices in secondary to WSUS and SUP in secondary ,right?

So do you see any negative WAN impact today when clients are scanning against the SUP on the primary site? If not then there's no need for setting up a SUP on the secondary. 

No , but I dont want the WAN to be overloaded.Also for SUP in secondary site 

-Install SUP in secondary

-Install WSUS in secondary

-Point the source of download from Primary for WSUS

-Create seperate Group Policy in AD to point the secondary devices to SUP in Secondary site 

Right?

No , but I dont want the WAN to be overloaded.

Why do you think that there will be a problem at all? Clients are already scanning over the WAN ... 

I have implemented the SUP but I dint not used the SUP to update the clients yet.I am in confused about setting SUP in secondary.

I will create a GP to point the clients to primary SUP and  will start monitoring the WAN and consider whether I need to setup SUP in secondary.

Could you please confirm the below steps for secondary SUP setup.

-Install SUP in secondary

-Install WSUS in secondary

-Point the source of download from Primary for WSUS

-Create seperate Group Policy in AD to point the secondary devices to SUP in Secondary site 

A SUP does not update anything as I already mentioned above. It is just used for *scanning* the clients (scanning != installing).

A SUP requires WSUS so you have to install WSUS first, then add the SUP role in ConfigMgr. No need to add a GPO as the CM client wil create a local policy automatically.

Thank You for your update.