Let remote users download patches from microsoft
Company with about 500 machines off which > 400 work from remote locations often.
When a machine is not connected to the company network, it would download it's microsoft updates directly from microsoft. When inside the company network it would download it's updates from the replication shares.
kr
Anonymous
shared this idea
-
Kyle
commented
This should be an option for remote sites that only have a few devices to patch and don't want to sync the entire replication share to the site. Maybe build it in the patch schedule screen to get updates from MS as checkbox
-
Dave Hope
commented
We have about 1,600 devices. 900 of those are off-network, connected via site-site VPNs. Each location has maybe 1-3 users, so not worth having a distribution replica in these small sites. We have split the patching configuration into multiple schedules so as to reduce the number of clients in each batch, and therefore the bandwidth each patch schedule consumes.
We would like to manage the bandwidth consumed by patching; the options we see as viable are:
• Allowing clients to download updates direct from Microsoft or Lumension directly;
• Allow us to host a HTTP server, hosting a deployment replica from which clients could download files over the internet rather than over our VPN links;
• Worst case, some way to limit simultaneous patch downloads such as run X machines at a time, or options to randomise connection times; -
Deepinder Singh
commented
I have done this with IP address range. Using internal IP address range, specify one policy. If any other IP, specify 'out of office' policy.
-
Aaron
commented
This would be very helpful!
-
Kurtis Scott
commented
I also think this is a good idea. Maybe a good option would be to have a page where we could manually download a patch, then manually upload it to the k1000 for immediate patching. I too have had issues where I needed a patch now, but was unable to find it in the listing until later, or it hadn't downloaded yet. Because of bandwidth requirements I can't run a full download in the middle of the day, and this would solve that issue for me.