This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Update Remote PCs Without SUM

Site A - IPSec VPN - Site B

Screenshot 1 - Can I instruct my SUM in Site A to publish Recommended packages to download a copy to a remote share ?

Screenshot 2 - Subsequently, create an updating policy to instruct endpoints to update from that share?

Please instruct if the setup would work. 

:55993


This thread was automatically locked due to age.
  • Hello Vikas,

    download a copy to a remote share

    it's not a simple download to or a copy (deployment honours potential configurations of this particular CID) but it is possible. You don't have to browse Network to select a share you can specify a UNC path in the Folder: field like \\<remote server>\<share name>). The dialog will warn you with a pop up that The share "\\server\share" may not exist, click Yes, move the share from Available: to Update to:. You can then use Configure to specify the account details to access the share. Please note that installing a SUM on <remote server> (if possible) is the preferred method though. 

    updating policy

    can name the path in any form that enables the endpoints to access the CID. You don't have to select one from the drop down.

    Christian

    :55995
  • Thanks QC!

    So in theory my setup should work perfectly?

    What are the advantages then to install a dedicated SUM in that network ? 

    It could be a Windows 7/8.1 machine ?

    :55996
  • Hello Vikas,

    a SUM can be installed on a non-server OS, the crucial part is not SUM but (licensing questions aside) the file-server service.

    The SUM has to (try to) deploy to all shares before it can perform the next check for updates. Depending on the speed and reliability of the connection and the performance on "the other end" an additional SUM might give better results (even though the decoding has to be done twice). Personally I prefer reading from a remote site (which in addition can be over HTTP instead of SMB) over writing to a remote site (which has to be SMB) - and you could define Sophos as additional updating source in case the primary server is unavailable. Last but not least you can use different schedules.    

    Christian

    :55998
  • Spoken like a pro. 

    Thanks, that really made sense. :cathappy:

    :55999