How to Auto-Upgrade Remote Site Clients using IIS

Products

• Endpoint Protection
• Network Access Control

Issue/Introduction

How to Auto-upgrade remote site clients using IIS

Symptoms
WAN traffic utilization increases after adding client package for auto upgrade in SEPM for remote site clients.

 

Cause

1. If a client install package is added for auto upgrade in SEPM for remote site clients and 'Download the client package from the management server' option is selected in 'Download Source', the WAN bandwidth would be used to download the package from SEPM.

Resolution

Reduce WAN traffic and upgrade failures by using an IIS server in a remote site.

Please refer the below exhibit.
Site1 has SEPM.
Site2 and Site3 are remote sites having a Windows server with IIS.



Configuring a remote site, in this case Site2 or Site3.
The name of the Server is Site2.
Step1.1: Create a folder on local drive and copy the setup.exe created using SEPM.
Step1.2: Create a virtual directory in IIS on Site2 server.
Step 1.3: Make sure the Virtual Dircetory has the correct 'Local Path' where the setup.exe is saved.




Step2: Verify that the package can be downloaded without any permission issue.
To test this, type the client package url for e.g. "http://site2/SEP_client/setup.exe" in a web browser.
You should get a file download doalogue box. Click cancel.




Step3.1: Goto Install Packages under Clients tab in SEPM. Click on Add client install package.
Step 3.2: Select 'Download the client package from the following URL (http or https)' and type the URL of the client package hosted in IIS of site2 and click 'Ok'.
e.g "http://site2/SEP_client/setup.exe"
The Site2 clients will get the package from the Site2 IIS server.