<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body>
<div>
<div>
<div>
<div style="direction: ltr;">Or Direct Access</div>
<div style="direction: ltr;">Another way is a Cloud Distribution Cloud and Gateway in SCCM
</div>
</div>
<div><br>
</div>
<div class="ms-outlook-ios-signature">
<div style="direction: ltr;"></div>
</div>
</div>
<div> </div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif"><b>From:</b> AusNOG <ausnog-bounces@lists.ausnog.net> on behalf of Brad Peczka <brad@bradpeczka.com><br>
<b>Sent:</b> Monday, March 23, 2020 8:54 pm<br>
<b>To:</b> Ryan Fielding; Gr ccie<br>
<b>Cc:</b> ausnog@lists.ausnog.net<br>
<b>Subject:</b> Re: [AusNOG] Windows machines patching over VPN
<div> </div>
</font></div>
<meta content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style>
<!--
@font-face
{font-family:"Cambria Math"}
@font-face
{font-family:Calibri}
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline}
p.msonormal0, li.msonormal0, div.msonormal0
{margin-right:0cm;
margin-left:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif}
span.EmailStyle18
{font-family:"Calibri",sans-serif;
color:windowtext}
.MsoChpDefault
{font-family:"Calibri",sans-serif}
@page WordSection1
{margin:72.0pt 72.0pt 72.0pt 72.0pt}
div.WordSection1
{}
-->
</style>
<div class="WordSection1">
<p class="MsoNormal"><span style="">This is the right approach.</span></p>
<p class="MsoNormal"><span style=""> </span></p>
<p class="MsoNormal"><span style="">Leverage Intune for off-net management and control, or an always-on VPN if you prefer, and you’re golden.</span></p>
<p class="MsoNormal"><span style=""> </span></p>
<p class="MsoNormal"><b><span lang="EN-US">From:</span></b><span lang="EN-US"> AusNOG <ausnog-bounces@lists.ausnog.net>
<b>On Behalf Of </b>Ryan Fielding<br>
<b>Sent:</b> Monday, 23 March 2020 8:35 PM<br>
<b>To:</b> Gr ccie <grccie@gmail.com><br>
<b>Cc:</b> ausnog@lists.ausnog.net<br>
<b>Subject:</b> Re: [AusNOG] Windows machines patching over VPN</span></p>
<p class="MsoNormal"> </p>
<div>
<p class="MsoNormal">Windows Update For Business - patching direct from MS over internet.</p>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal"><a href="https://docs.microsoft.com/en-us/windows/deployment/update/waas-manage-updates-wufb">https://docs.microsoft.com/en-us/windows/deployment/update/waas-manage-updates-wufb</a> </p>
</div>
</div>
<p class="MsoNormal"> </p>
<div>
<div>
<p class="MsoNormal">On Mon, Mar 23, 2020 at 1:15 PM Gr ccie <<a href="mailto:grccie@gmail.com">grccie@gmail.com</a>> wrote:</p>
</div>
<blockquote style="border:none; border-left:solid #CCCCCC 1.0pt; padding:0cm 0cm 0cm 6.0pt; margin-left:4.8pt; margin-right:0cm">
<p class="MsoNormal">Hi All,<br>
<br>
Now that we have most of people working remotely. Any patching the laptops has to be done over the VPNs.
<br>
<br>
Apart from usual bottlenecks - internet, fw, vpn device - what approach should you take? Client based throttling appears quicker than implementing policies at network level? Anyone experience dealing with this willing to share the experience how they did it,
throughputs, time taken, any gotchas?<br>
<br>
Thanks<br>
_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@lists.ausnog.net" target="_blank">AusNOG@lists.ausnog.net</a><br>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a></p>
</blockquote>
</div>
</div>
</div>
</body>
</html>