Install software by IP Range? (KACE SMA 10.0.290)
Is there a way to limit a managed install to only install based on the computers IP range at the time of checkin? I have a VPN update that I'd like to push out to computers on the internal network, but not any computers currently VPN'd in.
Answers (1)
Hello Coroy and welcome in the world of the Ninjas ;)
Of course. There is a way.
1. You need to create a smart label which contains the address range of your LAN (this can be done with the wizard nowadays)
2. bind the MI on this smart label
You are done.
Since the MI runs during a check in (or someone runs the kbot 6 manually) the machine which is put into this label is in your local network.
If it leaves your network it will also leave the label with the next checkin.
Comments:
-
Thinking about this, my network is fairly large; however my VPN pool is relatively small. Is there also a way to deny a MI to a group of IP addresses? This may be the simpler way to go. - Coroy 5 years ago
-
Smart label which "is not" inside the range would be the easiest.
KACE works "allow it", which means:
You allow to install on a machine and it will do, you cannot deny a machine. - Nico_K 5 years ago