BIGFIX Remote control Peer2peer mode

1

Hi,

I have installed the ibm bigfix remote control peer2peer mode in my environment,

I have successfully installed the remote control controller on some admin user successfully, also add some endpoints(Local network) in the remote control Target task successfully,

Also I have taken the remote session feature (Active, chat and other)on the target machines(Locally) using our Controller window,

When I try to taken the remote session from the roaming user, I cannot taken the remote session, but the roaming user can communicate with the main IBM Big-fix server successfully, also deployed the patches and other function using the big-fix console, I can manage the roaming user using our console,

The only error I am getting the remote control mode, because I have open the Remote control window in any admin machines and enter the Roaming user IP address in the address field the following error shown

Pasted image666×546 23.1 KB

the error are shown below

Pasted image667×547 17.7 KB

how to resolve the issue,

Thanks,
Nagaraj.

2

This would only work if the firewall on the remote system allows the connection, which is generally only if you are on the same subnet by default.

3

Hi,

The remote target machine firewall status is off, also I want to manage the target in roaming (home, coffee shop, public network) machines,

so this scenario how will do the configuration?

Thanks,
Nagaraj.

4

Remote control does not use the BigFix client to establish communication so you need to open more on your corporate firewall to be able to do this. I do not believe that it is recommended to use p2p mode if you are trying to control from inside your corporate network to the Internet.

1 Like
5

You have to configure gateway/broker to do this.
There is a document available in IBM Wiki.

1 Like
6

Peer 2 Peer mode generally only works within the same subnet unless you open up the OS and hardware firewalls quite a bit, and even then it won’t work through NAT so it isn’t a good idea to attempt this.

One workaround is for both sides of the Peer2Peer mode connection to connect to the same VPN. This works in some cases, but requires the other end to be an active participant.

7

Hi,

I have configured the TRC server mode and configured the broker setup, now the roaming user I can manage the on-demand url and Target connection code successfully, thanks for your updates,

Thanks,
Nagaraj,

1 Like