This forum has migrated to Microsoft Q&A. Visit Microsoft Q&A to post new questions.

Remove From My Forums

WSUS DMZ EXTERNAL CLIENTS

Question
0

Sign in to vote
Hi,

I have Sytem center CM 2016 with WSUS Service installed

So....I have some clients (other network, other domain). I want to distribute updates to these other servers through my centralice management server console (WSUS/CM)

I'm going to install my new server WSUS/CM in my DMZ

It's possible to do that? with some clients I have a vpn tunnel, for the others I need certificates?

It's better to have and CM/WSUS at the LAN and other CM/WSUS(without domain?) in the DMZ?

Someone can help me ? Any documentation or how-to?

Thanks a lot!
- Edited by omoyano Tuesday, September 12, 2017 1:20 PM
Tuesday, September 12, 2017 11:53 AM

All replies

1

Sign in to vote
Hello,

As long as those machine is managed by SCCM, you can push patches to them with SCCM.

Regarding to what site systems should be placed in DMZ, please go through the article below:

https://microsoftramblings.wordpress.com/2016/01/08/installing-sccm-site-systems-in-a-dmz-environment/

Here is an article regarding to installing configuration manager clients on server in DMZ, please refer to it for more details:

https://nikifoster.wordpress.com/2011/01/31/installing-configmgr-clients-on-servers-in-a-dmz/

Please remember to mark the replies as answers if they help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.
- Edited by Yan Li_ Wednesday, September 13, 2017 7:07 AM
Wednesday, September 13, 2017 7:04 AM
0

Sign in to vote

Thanks a lot!

So...But I need to configurate a primary site (LAN) with MP,SUP,DP and in my DMZ install a secondary Configuration manager with roles MD,SUP,DP?

Next configure the outside clients/another domain to connecto to WSUS server in dmz?

http://DMZServername.dmz.ad:8530

Wednesday, September 13, 2017 10:39 AM