Managing an Offline Protect Console using files from Re-Writable Media

Version 15

    Purpose


    This document will take you through a recommended method to manage your offline infrastructure with Shavlik.  We assume here that you want to patch a disconnected network without having to manually located the required files needed for the disconnected Protect console.

     

    Description

     

    Please note: If your network policy allows a connection to a network which is connected to Internet (even controlled by a firewall), you should refer the below document:  This document makes use of a distribution server, accessible from the both offline and online network to transfer the files.

    Of course this solution is less secure than the solution described here since you can pass files via the distribution server. However it is more convenient as you will not have to manually transfer the files via a removable drive such as an old fashion USB key or an hard drive.

    Configuring consoles within an offline environment to obtain definitions & patches from a distribution server share

     

    Offline Activation

    Please refer to this document to activate Shavlik in offline mode:

    How to process a Manual (offline) Activation for Shavlik Protect

     

    Requirements to Scan and Patch in an Offline Network


    To do so you will need:

    • Two installation of the Shavlik console:
      • One in the offline network
      • And another in an online network
    • One removable drive such as a USB key or an hard drive to copy:
      • Patches
      • Definition files
      • And the scan results across the online and offline Shavlik console.


    Setting up the online and Offline Consoles


    On the online console:

    1. Plug your removable drive.
    2. In Windows Explorer, go in your removable drive and create a new folder. Ex: DistServ
    3. Open the Properties of the of the folder and share it.
    4. Go in Tools > Operations
    5. Go in Distribution Servers
    6. In the Distribution Servers panel click New
    7. Put a name Ex: Bridge drive
    8. Put the UNC path. Ex: \\localhost\DistServ
    9. Save
    10. Select the created Distribution Server
    11. Next to the button Add scheduled sync: in the list choose All engines, definitions, and patch downloads
    12. Click on Add scheduled sync:
    13. Choose Once:
    14. Select what ever date you want it doesn't matter as we will sync it manually
    15. Save

     

    On the offline console:

    1. Plug your removable drive.
    2. Go in Tools > Operations
    3. Set up the path for the Patch download directory to the removable drive.
    4. Keep Auto-update definitions (before scans) unchecked
    5. Select Custom share or URL and give the path to the removable drive folder for both Definition download source and Patch and Service Pack download source. Ex: E:\DistServ
    6. Save
    7. Go in Tools > Options
    8. Go in Scans
    9. Check Keep imported files
    10. Save

    Offline schema.png

    Using the Online and Offline Consoles

     

    Download the latest definition:

    1. Plug your removable drive on the online console
    2. Go in Help > Refresh files...
    3. Go in Tools > Operations > Distribution Servers
    4. For each of the 3 lines in the Schedule automatic synchronization panel, select it and click on Run now
    5. Close the window
    6. Unplug the removable drive and plug it in the offline console

     

    Scanning:

    1. After performing the steps Download the latest definition
    2. Plug your removable drive on the offline console
    3. Scan the machines normally

     

    Import the scans from the offline to the online console:

    1. Plug your removable drive on the offline console
    2. Move the files located in C:\ProgramData\LANDesk\Shavlik Protect\Console\Arrivals\Patch\Xml\ImportedFiles
      in an other folder in your removable drive. Ex: E:\ShavlikScans\
    3. Plug your removable drive on the online console
    4. Move the files in the folder C:\ProgramData\LANDesk\Shavlik Protect\Console\Arrivals\Patch\Xml
    5. Reopen Shavlik

     

    Download patches:

    1. After performing the steps Import the scans from the offline to the online console
    2. You can download the patches you plan to deploy
    3. Go in Tools > Operations > Distribution Servers
    4. For each of the 3 lines in the Schedule automatic synchronization panel, select it and click on Run now

     

    Patching:

    1. Plug your removable drive on the offline console
    2. Patch the machines normally

     

    Affected Product(s)

     

    Shavlik Protect 9.x