SOLVED Force VPN Clients to download from Microsoft and not DP

[harveybham]

Hi All

I am trying to force our clients who are on vpn (which is 80% of users) to download updates from microsoft rather than the on prem DP to save bandwidth as we do not currently have a cloud DP

I have a DP which does not have the updates on and i have selected the download settings to "Do not install" on both options and have also ticked the download content from Microsoft option

I have Branch Cache disabled on the DP and also have peer cache disabled

On my test machine it seems to find the updates on the DP which it cant but then it says on the cas.log "Matching DP location found 0 https://(Hostname)/sccm_branchcache$

It seems to be getting it from branch cache and not Microsoft as expected .

Have i set this up correctly ? any advice is appreciated

 

[Prajwal Desai]

ConfigMgr 1902 introduced/revised a setting called 'Prefer cloud based sources over on-premise sources'*. Set this on your VPN boundary groups and those clients should download updates from Microsoft instead of your on-prem DPs - https://docs.microsoft.com/en-us/me...loy/configure/boundary-groups#bkmk_bgoptions4

 

[harveybham]

Hi Prajwal

Thanks that works. I always thought that option was for cloud DP's but it makes sense for cloud based sources.

The DP that the VPN boundry is talking to does not have the updates as i took them off. can i still distribute the content to this DP or is it best to not put them on this DP?

Thanks

 

[Gokul]

its better not to distribute the content to DP. Client first go and check in DP first and then if no content present it will take the content from MS

 

[harveybham]

Thanks for the reply

How about if i have remote users who require content from the vpn (such as software via software centre) would ticking "prefer cloud sources" have an impact on this or would they still continue to get content ?

 

[Gokul]

As i said still you can distribute the content to DP, so client first check the DP for update, if no content available then it will go to MS. I haven't faced any impact in my setups till now and it worked like charm ✔✔✔✔.

 

[harveybham]

oh i see, i have a issue today where downloading software from software centre is stuck at 0%. The Location services.log says "Calling back with the following distribution points" i thought it maybe that i ticked "prefer cloud sources" but it may be something else now

Thanks

 

[harveybham]

That is a separate issue i believe. Please mark this post as solved

Thanks for all your help

 

[Gokul]

Sure.