1 Reply Latest reply on Jan 5, 2017 11:47 AM by rdavidson

    Shavlik Protect Console in DMZ Enviroment

    brett.carl Rookie

      Hello,

       

      We are looking to place a Shavlik Protect console in our DMZ2 environment. This console would greatly assist us in reporting and monitoring of the DMZ servers. We currently use agents to do this but have found that the reporting and monitoring is not sufficient.

       

      A few key points we would be looking to have answered:

       

      • Will Shavlik be able to connect via Proxy?
      • What are the address(s) of the Patch downloads & XML updates from Shavlik? Do you use FTP or HTTPS to distribute patches to consoles?
      • With admin shares locked down, will Shavlik be able to deploy patches using a temporary share created during deployment?
      • Do you have a guide or instruction on how to set up DMZ Shavlik consoles?

       

      We are hoping that this is possible because agents do not give us real-time monitoring. With our DMZ environment growing, this would allow us to streamline patching and not rely on Agents to do the work.

       

      Please let me know how we can set this up to achieve this goal.

       

      Thank you!

        • 1. Re: Shavlik Protect Console in DMZ Enviroment
          rdavidson SupportEmployee

          Hello,

           

          • Will Shavlik be able to connect via Proxy? - Yes. You can provide necessary credentials under Tools > Options > Proxy, and the address of the proxy can be provided manually in the config files.
          • What are the address(s) of the Patch downloads & XML updates from Shavlik? Do you use FTP or HTTPS to distribute patches to consoles? Patches are downloaded from the vendor site - Shavlik doesn't host the files. For our own datafiles, those are hosted at http://xml.shavlik.com
          • With admin shares locked down, will Shavlik be able to deploy patches using a temporary share created during deployment? That depends on how they were locked down. If Protect fails to deploy, you can try going to Tools > Options > Deployments and enabling "Create a temporary system drive share if non exists). If this is enabled, Protect will try to create a temporary share.
          • Do you have a guide or instruction on how to set up DMZ Shavlik consoles? Not specifically for DMZ consoles. We do have documentation for offline consoles, but DMZ configurations vary. If your console cannot access the internet, we would treat it like an offline console. Otherwise, in a DMZ, the console will behave fairly normally, as long as it's specifically managing machines inside the DMZ, and the same prerequisites for a normal console (open ports, running services, etc) are met.

          We can also always help you out via a support case, or answering any questions here on the forum.