KACE Systems Management Appliance (SMA)
Please tell us how you’d like to see the KACE Systems Management Appliance product improved!
49 results found
-
Auto-retry failed patch detect and deploys
Occasionally patch detection or deployment fails usually due to machines going offline. The failure is reported back in the stats but nothing is done about it and this can result in a machine remaining insecure for an extended period.
I suggest detects and deploys auto-retry in a similar manner to Managed Installs do, say by default three times, next time the machine is online. This should ensure a higher success rate overall and I imagine would be easy to implement.
Now that users have more control over reboots the resulting delay in the patch deployment (pushing it outside of the…
3 votes -
Allow scheduling icon to appear even if LDAP login/password are not provided
The KBOX seems to require the specification of an LDAP login name and password in order for the scheduling icon to show up. Since our LDAP server does not require a LDAP login/password (all of the relevant user data is visible via anonymous bind), we left those fields blank. When I created a dummy LDAP account just for the purpose of binding, and specified this account for the LDAP login/password, the scheduling icon showed up again.
Ideally it would be good if this limitation could be removed (so that an LDAP login/password is not required to get the scheduling icon…
3 votes -
Firewall for all traffic, not just httpd
Even with ssh disabled from the web gui, I get a lot of messages re: sshd login attempts. I'd rather have all traffic outside my subnets dropped except for connection to Kace update servers.
2 votes -
Disable server-status page
Currently if you go to the SMA site page /server-status (kbox.domain.com/server-status) it will tell you that access is denied due to a lack of permissions. There should be an option to completely disable this page from visibility. This is most important to customers like us who host the appliance externally. Attackers could scan our domain and see that there is an Apache server active at the address and could plan a more focused attack against it.
We only host our appliance externally so that workers with endpoints at home and abroad are able to still be managed by the SMA.…
1 vote -
root
It would be nice to be able to use p7b certificates on Kace SMA appliance so we don't have to make an exception rule on the firewall's decryption to allow traffic. Unless we install the cert on the appliance, traffic to the appliance won't decrypt at the firewall which seems to prevent updates from downloading to the appliance. For security reasons, we'd prefer to implement the decryption cert rather than make an exception rule to allow the traffic. Appreciate if this feature could be considered in future releases.
1 vote -
Retrieve Windows defender signature version from server/workstations
add the ability to retrieve windows defender signature version. The inventory already gathers the version information but not the signature version.
1 vote -
Add Dell Update support for Dell Embedded Box PC
Please add dell update support for Dell Embedded PCs (5000 and 7000).
1 vote -
Ability to change konfig & netdiag passwords
Please allow the ability to change all default system passwords.
1 vote -
Splunk
Add Splunk to subscription services so it can update during patching.
1 vote
- Don't see your idea?