Koldov Posted January 21, 2021 Posted January 21, 2021 Trying to get SIMS and FMS updated for users at home. Using LGfL Freedom2Roam/anyconnect (CISCO) if anyone knows it... Using SIMS/FMS is no problem it seems, but updates refuse to happen. Not sure if it is DNS related or what to do about it... The translation is something like: 192.168.0.123 > 10.123.0.11 (this is the VPN IP recorded in DNS on the server for the laptop and can ping from the server using this IP). The screenshot from SOLUS3 is also showing the correct VPN IP.
Steve21 Posted January 21, 2021 Posted January 21, 2021 I don’t know if it’s the same issue we had previously but VPN clients don’t often update dns records so although it can ping via IP etc and it’s got a dhcp lease Solus won’t update it until you added the dns record and then it’d update fine Can you ping the computer via hostname from the server ok? (You said about via ip) As if so guessing it’s not linked Steve
Koldov Posted January 21, 2021 Author Posted January 21, 2021 Another question... If the remote user is purely an FMS finance user (Bursar) and SIMS gets updated at school (but FMS doesn't), will that cause any problems? Can they stay on the previous version of FMS as that will stay the same on the server as the remote laptop...
Koldov Posted January 21, 2021 Author Posted January 21, 2021 Yes, ping by IP or hostname is fine, I can see the record in DNS.
Steve21 Posted January 21, 2021 Posted January 21, 2021 If it's pinging fine it's unlikely to be DNS then. Just noticed in your image it shows the clients offline too, Have you checked things like your firewall GPO for Solus rules (on clients/server) in terms of how you authorised the connections (was it limited to local subnet or anything etc) Steve
Koldov Posted January 21, 2021 Author Posted January 21, 2021 Yes, the firewall was set for the SOLUS defaults (I'm sure that included specific ports etc) - but I've turned the firewall off now and it still fails...
ITGURU Posted January 21, 2021 Posted January 21, 2021 Get RemoteApp setup - makes remote SIMS so much easier, we've always doen it this way for users for years.
Koldov Posted January 22, 2021 Author Posted January 22, 2021 OK, so I'm not going to get sorted quickly enough trying to do this all remotely (irony?)... I have left FMS on it's previous version, but updated SIMS for the admin staff to allow the update of filesets and Census to be run. Any issues with this?
Steve21 Posted January 22, 2021 Posted January 22, 2021 I don't know if it still does, but didn't FMS used to link into SIMs for personnel bits? (Not sure if it's going to be fussy with a mismatch depending on what's being done in FMS at least) Steve
Koldov Posted January 22, 2021 Author Posted January 22, 2021 Yes, I seem to remember that being the case, but I'm not sure we even use it for that... I'm just going to write it off as it could even be ISP related and I'm going to go round in circles trying to figure it out! I've spoken to the Bursar and luckily they live fairly local and offered to bring the laptop in, I've said she could probably sit in the car park and join the Wi-Fi...
mrwoberts Posted January 22, 2021 Posted January 22, 2021 A few other things to note... How does the remote client authenticate? Radius? AD Direct? Separate VPN Login? Can the remote client access the Solus Update repository through a normal Explorer/Command line route? Solus now updates through our VPN but we had to do the following... When the user connects their VPN, they run a very simple script to cache login credentials to the SIMS server shares, just by insisting on using their current login (felt weird, but it worked). When the user joins the device to their home network, we had to adapt our Solus Agent Firewall rules to allow over Private/Public, which is what their laptop would end up in when at home. For the couple of devices that still wouldn't play ball, they just needed to join the school wifi (often sat in the car park) and it updated normally.
Kaz77 Posted January 25, 2021 Posted January 25, 2021 I have updated remote laptops by exporting the updates and then running SIMSApplicationSetup.exe However, if there is a way to use Solus to do the remote updates I would be very interested. What exactly did you change in the Firewall rules? I have a GPO which sets these up so I wondered if I could add the exceptions to this?
mrwoberts Posted January 25, 2021 Posted January 25, 2021 The changes to the Firewall rule for the Solus agent to work over a VPN was simply to apply the rule to Domain, Private, and Public network profiles. You can apply a firewall GPO in different ways but you get the idea that it needs to be applied to all three types of Network Profiles I'm sure you can work it out.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now