Description

Online Service Packs(SP) service can regularly obtain the latest patch information from the online patch platform to ensure the stability and security of the server.

HCI with internet access can directly access the Sangfor online SP center platform to update the latest patch. HCI in the intranet without internet access. If the VM has internet access, it can use the Sangfor proxy VM to access the online SP center. HCI and VM without internet access can use the third-party proxy server to access the online SP center. You can also deploy the on-premises sangfor SP server in the intranet for SP updates.

Precautions

1. After configuration, the patch service must test connectivity to ensure that the HCI platform can connect to the online SP center.

2. It is not recommended that the HCI management network directly access the online patch service platform as HCI will be exposed to the public network.
3. When using the Sangfor proxy VM to access the online SP center, do not modify the virtual machine name (the default name is: _sangforaoperation_vm_workstation_) after importing the VM. Otherwise, the agent service will become invalid.

Prerequisites

The customer network needs to allow connection for the online SP center addresses to ensure that the HCI platform can access the online SP center.

Steps

1. Navigate to System > Service Packs and click the Settings tab.

2. Click on the SP Center Addresses to ensure that the SP center addresses have been allowed connection to the customer network. The table below lists the addresses along with the purpose and requirements.

Table 7:SP Center Addresses

3. Check the Enable online SP Service checkbox.
4. Check the I have read and accept Data Processing Agreement checkbox.

5. According to the HCI deployment scenarios and network conditions, select an appropriate online platform communication mode for the setting. (after selecting the corresponding scene for configuration, skip other scenes directly to step 6 for configuration).

Scenario 1: Access the online patch platform directly.

• Select Direct Access to Online SP Center for communication mode settings, test the connectivity, and save the settings.

Scenario 2: the HCI platform has no internet connection, but it can access the internet through a third-party agent.

• The network deployment is shown in the figure above. This scenario selects a third-party proxy server to access the online patch platform.

• Click Download Deployment Guide for Third-Party Proxy Server. The downloaded content is a compressed package named Proxy_Squid_Deployment_Guidance.rar, containing document descriptions, recommended agent installation packages, and configuration files.

• Refer to the downloaded configuration guide, install and configure a third-party agent program on the proxy server, and confirm that the server can access the Sangfor online SP server. Deploy two interfaces as shown in the figure below, one can access the Internet to connect to the Sangfor SP server, and the other can access the HCI in the intranet.

• Fill in the address (IP + port, example: 10.250.0.20:3128) of the agent set in step 2 on the HCI platform. And the authentication user name and password of the agent are set during the deployment of the proxy server.

• The IP address is the proxy server intranet port IP.

• The port is the publishing port of the agent service. The default is 3128.

• Click Test Connectivity, and confirm that the network is connected.

6. Set the security component (aSEC) patch service (optional), and select Use the same communication method as that configured on HCI.

7. Save the settings by clicking the Save button.