Hello,
I have a situation where SEPM was deployed to two small sites, neither having knowledge of the other. This was originally done to minimise network overhead caused by definition updates and communications between the clients and the management servers. What wasn't realised at the time was that people from one site frequently work at the other, and when they do, their laptops "phone home" for updates, causing major network slow-downs, affecting their ability to connect to the Citrix servers at head office.
SEPM services are currently disabled until a solution can be found.
As far as I can see, there are three possible solutions:
- Re-direct all SEP clients to the head office SEPM server and configure GUPs at each site. Pro: ease of administration. Cons: having to re-direct all those SEP clients. SEPM traffic between sites and head office.
- Remove the SEPM server from one of the sites, and re-direct its clients to the SEPM server at the other, configuring a local GUP. Pro: No SEP traffic between sites and head offic . Con: having to re-direct several clients.
- Configure a GUP at each site to serve laptops from the other site. Pro: Quickest solution to set up. Con: Not the most efficient setup.
I'm inclining towards option 3, seeing as the infrastructure is already installed and it's the quickest solution to configure, but any input would be appreciated. The critical thing is that, having made the policy change to use the correct GUP for each location, I need clients to start using them straight away, and not start taking updates from the SEPM unless the new policy has already kicked in, and they're on the subnet as the SEPM. What I'm trying to avoid is re-enabling the SEPM services and immediately triggering another network slow-down.
Questions:
- Is it possible to temporarily disable definition updates in order to make sure the that policy has been received first?
- Is it possible to restrict the hours during with the SEPM can pull down updates from the Internet, and during which the GUP can pull down definitions from the SEPM (i.e. not during office hours)?