How to manage Shavlik in an offline network

This document will take you through a recommended method to manage your offline infrastructure with Shavlik.  We assume here that you want to patch a disconnected network without having to manually located the required files needed for the disconnected Protect console.

Please note: If your network policy allows a connection to a network which is connected to Internet (even controlled by a firewall), you should refer the below document:  This document makes use of a distribution server, accessible from the both offline and online network to transfer the files.

Of course this solution is less secure than the solution described here since you can pass files via the distribution server. However it is more convenient as you will not have to manually transfer the files via a removable drive such as an old fashion USB key or an hard drive.

Configuring consoles within an offline environment to obtain definitions & patches from a distribution server share

Please refer to this document to activate Shavlik in offline mode:

How to process a Manual (offline) Activation for Shavlik Protect

To do so you will need:

• Two installation of the Shavlik console:
  • One in the offline network
  • And another in an online network
• One removable drive such as a USB key or an hard drive to copy:
  • Patches
  • Definition files
  • And the scan results across the online and offline Shavlik console.
       
    

On the online console:

1. Plug your removable drive.
2. In Windows Explorer, go in your removable drive and create a new folder. Ex: DistServ
3. Open the Properties of the of the folder and share it.
4. Go in Tools> Operations
5. Go in Distribution Servers
6. In the Distribution Servers panel click New
7. Put a name Ex: Bridge drive
8. Put the UNC path. Ex: \\localhost\DistServ
9. Save
10. Select the created Distribution Server
11. Next to the button Add scheduled sync: in the list choose All engines, definitions, and patch downloads
12. Click on Add scheduled sync:
13. Choose Once:
14. Select what ever date you want it doesn't matter as we will sync it manually
15. Save

On the offline console:

1. Plug your removable drive.
2. Go in Tools> Operations
3. Set up the path for the Patch download directory to the removable drive.
4. Keep Auto-update definitions (before scans) unchecked
5. Select Custom share or URL and give the path to the removable drive folder for both Definition download source and Patch and Service Pack download source. Ex: E:\DistServ
6. Save
7. Go in Tools> Options
8. Go in Scans
9. Check Keep imported files
10. Save

Download the latest definition:

1. Plug your removable drive on the online console
2. Go in Help> Refresh files...
3. Go in Tools> Operations> Distribution Servers
4. For each of the 3 lines in the Schedule automatic synchronization panel, select it and click on Run now
5. Close the window
6. Unplug the removable drive and plug it in the offline console

Scanning:

1. After performing the steps Download the latest definition
2. Plug your removable drive on the offline console
3. Scan the machines normally

Import the scans from the offline to the online console:

1. Plug your removable drive on the offline console
2. Move the files located in C:\ProgramData\LANDesk\Shavlik Protect\Console\Arrivals\Patch\Xml\ImportedFiles
   in an other folder in your removable drive. Ex: E:\ShavlikScans\
3. Plug your removable drive on the online console
4. Move the files in the folder C:\ProgramData\LANDesk\Shavlik Protect\Console\Arrivals\Patch\Xml
5. Reopen Shavlik

Download patches:

1. After performing the steps Import the scans from the offline to the online console
2. You can download the patches you plan to deploy
3. Go in Tools> Operations> Distribution Servers
4. For each of the 3 lines in the Schedule automatic synchronization panel, select it and click on Run now

Patching:

1. Plug your removable drive on the offline console
2. Patch the machines normally

• Shavlik Protect 9.x