locked
SCCM servers/components access to Internet - which should has and which not... RRS feed

  • Question

  • Hi,

    In our organization, we are planning soon, block access to Internet on all servers. I would like to know, which SCCM components or servers, should has access to Internet. I know Primary Site server should has access to Internet (e.g. for WSUS) but what about with others?

    Our SCCM enviroment are build from few Secondary Site Servers and many Distrobution Point servers. All of these devices are located in that same network. I'm almost sure if we leave Primary Site server with access to Internet, it will be enough but... I would like to be sure :-) Maybe some components should has access to Internet?

    Thank you for answer on that noob question...  

    Tuesday, May 27, 2014 11:02 AM

Answers

  • Assuming that the components possibly contacting the Internet, like your software update point, endpoint protection point and asset intelligence synchronization point are running on your primary site server then you should be fine.

    My Blog: http://www.petervanderwoude.nl/
    Follow me on twitter: pvanderwoude

    • Marked as answer by Bartas1979 Tuesday, May 27, 2014 11:53 AM
    Tuesday, May 27, 2014 11:19 AM

All replies

  • Assuming that the components possibly contacting the Internet, like your software update point, endpoint protection point and asset intelligence synchronization point are running on your primary site server then you should be fine.

    My Blog: http://www.petervanderwoude.nl/
    Follow me on twitter: pvanderwoude

    • Marked as answer by Bartas1979 Tuesday, May 27, 2014 11:53 AM
    Tuesday, May 27, 2014 11:19 AM
  • Thank you for help. :-)
    Tuesday, May 27, 2014 11:53 AM