Client Management Suite

I am upgrading my CMS 7.1 to 7.5 SP1 . Planning to configure CEM. Already read through the Implementation Guide and Cloud-enabled Management White paper. Need advice on the following 

1. Is it possible to use my existing reverse proxy as Internet gateway ?

2. Is upgrade going to affect my daily backup of Database ?

3. Also have configured NAC in my network . will the upgrade be affected by NAC  ?

Hi @Shama!

1. For CEM support, you need to install a CEM gateway.

• https://www-secure.symantec.com/connect/forums/has-anyone-tried-installing-cem-internet-gateway-windows-web-server-2008-r2-sp1

2. If you will configure CEM gateway -> add there required NS Servers to be managed -> create CEM policy on NS server and CEM Agent Web Site on NS Server, then database will has these records and on next backup this data will be saved. (Depends on when CEM environment install/configuration will be completed and when backup of database is scheduled)

3. If you have required ports opened for CEM communication (default CEM web site port is '4726 ') and other Altiris ports, then it should work.

• http://www.symantec.com/business/support/index?page=content&id=DOC1892

Note:

If you're going to upgrade to 7.5 SP1 release, please install this HF to avoid high CPU usage issue

• https://www-secure.symantec.com/connect/blogs/itms-75-sp1-hf1-now-available

Thanks,

IP.

Hi Igor , 

I apologise for the late reply. Was busy with implementation part .

I have tested upgrading CMS 7.1 to 7.5 SP1 and its working fine except that i had to reconfigure my connectors 

And let me rephrase my question here

=> I am not planning to use a dedicated server as Internet gateway . Can i use the existing Reverse proxy server in my network as Internet Gateway ?

Next question is regarding my Altiris Agent . Will the agent upgrade going to be affected or blocked as NAC is configured in the network  

I am planning to give exception to all Altiris agent processes . Anything need to be considered ?

Thanks 

Hi Shama!

1. If you want to use reverse proxy in 7.5 SP1 as it was used in 7.1, then of course you can use it, since this functionality still exists in NS 7.5 SP1.

But if you want to use a Cloud Enabled Managemet functionality for SMP, then I think you know what to install and how to configure it to make possible all managed endpoints to communicate with SMP and Site Servers, while clients are in internet zone and CMS is in intranet.

Just pay attention on for proxy:

• After upgrade to IT Management Suite 7.5, Notification Server's proxy settings might be lost

http://www.symantec.com/docs/TECH212209

• PMS 7.1 Sp1 - Unable to import patch: import of available vendors software and language failed

http://www.symantec.com/docs/TECH166288

• https://www-secure.symantec.com/connect/forums/unable-import-any-patches-patch-management-console

• It is not possible to install/use agent using ISA proxy if SMP is installed on non-default https port (e.g. 1111)

http://www.symantec.com/docs/TECH176496

2. If all required Altiris ports are in exception, then I think there should not occur any communication issues. You better take some clients to make sure that there will no issue occur during your process.

Just pay attention on for proxy:

• Using the local Agent's proxy settings:

http://www.symantec.com/docs/HOWTO98510

• Known Issue: If the Altiris Agent is using a proxy server, the client task agent may fail to register

http://www.symantec.com/docs/TECH41484

• Altiris Agent try to connect Notification server or Task server via Internet Proxy settings:

http://www.symantec.com/docs/TECH194017

• ITMS 7.1 - Remote Clients are not able to register with task server in Proxy environment

http://www.symantec.com/docs/TECH158373

Thanks,

IP.

Hello Igor ,

We don't use Reverse Proxy with SMP 7.1 at this moment. However we are exploring on using CEM or Reverse proxy.

We are considering the benefit of using CEM over reverse proxy.  

Thanks

If you will don't use a CEM in your environment, then at least these reports will don't contain information to see what happens on CEM gateway and with clients in CEM Mode.

• Because CEM Gateway now sends event data to NS server as well as client in CEM mode do.

Other questions and information about CEM in 7.5 SP1:

• https://www-secure.symantec.com/connect/forums/multiple-ns-multiple-internet-gateways

Cloud-enabled Management Whitepaper for ITMS 7.5 SP1:

• http://www.symantec.com/business/support/index?page=content&id=DOC7438

Thanks.