Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 1 subscriber
  • Views 1254 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Help with RMS/relay

JSWVLCM

HI, I'm working with a customer who has purchased the Enduser Web Suite and Virtual Web Appliance.

This customer has approx. 225 clients PCs, half at their HQ and the other half at remote locations without VPN access or any other access to their main facility.

They will need the ability to use RMS and a relay server in order to manage their remote PCs.

I've only found a couple of pages covering this topic:

1) Enterprise Console: configuring message relay computers:

     http://www.sophos.com/en-us/support/knowledgebase/14635.aspx

2) Using Sophos message relays in a public WAN:

     http://www.sophos.com/en-us/support/knowledgebase/50832.aspx

Are there any other pages or documents that cover this topic with step-by-step instructions?

BTW - Their addressing non-public, i.e., 10.1.3.x (local HQ) & 10.10.1.x (DMZ)

Thanks

Joe

:40733


This thread was automatically locked due to age.
Parents
  • 0

    Jak, thanks for your response and my apologies for not checking back sooner.

    I was finally able to obtain the steps required to get the relay set up properly for this customer's needs.

    We used scenario 2 for this configuration:  

    http://www.sophos.com/en-us/support/knowledgebase/50832.aspx

    The customer configured a FQDN that points to their relay server from inside their DMZ as well as ensuring external clients could resolve the relay's FQDN and reach the relay on ports 8192, 8194 and 80

    For the parts associated with modification of the MRINIT.conf and additional SUM installation:

    1) Navigate to the SUMInstallSet share on your Enterprise Console Server and copy the entire contents of that share to a temporary folder on the relay server.

    2) Edit the MRINIT.conf file so that the ParentRouterAddress is set to the FQDN of the relay server.  Do this before installing SUM.

    3) Leave the MRParentAddress unchanged and ensure the relay server can communicate with that IP address.

    4) Install SUM

    Both the relay and Enterprise Console servers require ports 8192 and 8194 to be open in both directions to each other.  The relay server needs to be able to reach the IP address of the Enterprise Console Server as shown in the MRParentAddress line in the MRINIT.conf file.

    After SUM has been successfully installed on the relay server, it will appear under the Update Managers view in the Enterprise Console.  After it's appearance, simply apply subscriptions and licenses in order for it to begin downloading and deploying updates.

    Here is the article covering the set up of IIS:  

    http://www.sophos.com/en-us/support/knowledgebase/38238.aspx

    I hope this information will be helpful to others who are tasked with carrying out similar configurations.

    Thanks!

    Joe

    :41103
Reply
  • 0

    Jak, thanks for your response and my apologies for not checking back sooner.

    I was finally able to obtain the steps required to get the relay set up properly for this customer's needs.

    We used scenario 2 for this configuration:  

    http://www.sophos.com/en-us/support/knowledgebase/50832.aspx

    The customer configured a FQDN that points to their relay server from inside their DMZ as well as ensuring external clients could resolve the relay's FQDN and reach the relay on ports 8192, 8194 and 80

    For the parts associated with modification of the MRINIT.conf and additional SUM installation:

    1) Navigate to the SUMInstallSet share on your Enterprise Console Server and copy the entire contents of that share to a temporary folder on the relay server.

    2) Edit the MRINIT.conf file so that the ParentRouterAddress is set to the FQDN of the relay server.  Do this before installing SUM.

    3) Leave the MRParentAddress unchanged and ensure the relay server can communicate with that IP address.

    4) Install SUM

    Both the relay and Enterprise Console servers require ports 8192 and 8194 to be open in both directions to each other.  The relay server needs to be able to reach the IP address of the Enterprise Console Server as shown in the MRParentAddress line in the MRINIT.conf file.

    After SUM has been successfully installed on the relay server, it will appear under the Update Managers view in the Enterprise Console.  After it's appearance, simply apply subscriptions and licenses in order for it to begin downloading and deploying updates.

    Here is the article covering the set up of IIS:  

    http://www.sophos.com/en-us/support/knowledgebase/38238.aspx

    I hope this information will be helpful to others who are tasked with carrying out similar configurations.

    Thanks!

    Joe

    :41103
Children
No Data