Re: [AusNOG] Windows machines patching over VPN

2020-03-23 Thread Gr ccie
Thanks Matt and everyone for inputs- much appreciated. > On 24 Mar 2020, at 8:19 am, Matthew Solly wrote: > >  > If you use SCCM, you can deploy a cloud management gateway (CMG) in Azure. > The cost is around $150AUD per month, plus data egress and storage costs. > > Your clients only use

[AusNOG] Requests for Transit or other connectivity options

2020-03-23 Thread Jason Bordujenko
Have seen a couple of queries today regarding transit needs, and particularly across real-time deployment platforms such as Megaport. If you have a portal account, you can see who is offering Transit Services (local or blended) via Megaport Marketplace at https://portal.megaport.com/marketplace -

Re: [AusNOG] Windows machines patching over VPN

2020-03-23 Thread Matthew Solly
If you use SCCM, you can deploy a cloud management gateway (CMG) in Azure. The cost is around $150AUD per month, plus data egress and storage costs. Your clients only use the CMG to retrieve policy (though you can also deploy applications through it if you’d like). They will automatically

Re: [AusNOG] Windows machines patching over VPN

2020-03-23 Thread James Troy
Second that, Use SCCM for approval and then have the end-points pull the actual updates from MS. Kind Regards, James Troy From: AusNOG On Behalf Of Bradley Amm Sent: Monday, 23 March 2020 11:59 PM To: Brad Peczka ; Ryan Fielding ; Gr ccie Cc: ausnog@lists.ausnog.net Subject:

Re: [AusNOG] Windows machines patching over VPN

2020-03-23 Thread Bradley Amm
Or Direct Access Another way is a Cloud Distribution Cloud and Gateway in SCCM From: AusNOG on behalf of Brad Peczka Sent: Monday, March 23, 2020 8:54 pm To: Ryan Fielding; Gr ccie Cc: ausnog@lists.ausnog.net Subject: Re: [AusNOG] Windows machines patching

Re: [AusNOG] Windows machines patching over VPN

2020-03-23 Thread Brad Peczka
This is the right approach. Leverage Intune for off-net management and control, or an always-on VPN if you prefer, and you’re golden. From: AusNOG On Behalf Of Ryan Fielding Sent: Monday, 23 March 2020 8:35 PM To: Gr ccie Cc: ausnog@lists.ausnog.net Subject: Re: [AusNOG] Windows machines

Re: [AusNOG] Windows machines patching over VPN

2020-03-23 Thread Ryan Fielding
Windows Update For Business - patching direct from MS over internet. https://docs.microsoft.com/en-us/windows/deployment/update/waas-manage-updates-wufb On Mon, Mar 23, 2020 at 1:15 PM Gr ccie wrote: > Hi All, > > Now that we have most of people working remotely. Any patching the laptops >

[AusNOG] Windows machines patching over VPN

2020-03-23 Thread Gr ccie
Hi All, Now that we have most of people working remotely. Any patching the laptops has to be done over the VPNs. Apart from usual bottlenecks - internet, fw, vpn device - what approach should you take? Client based throttling appears quicker than implementing policies at network level?