Sam Fonteno

Description: SMC Virtual Appliance configuration affect Detail: If the Virtual Appliance can't just be made to always have a non-configured HTTP FORWARD PROXY, then 1. the label for the checkbox for installing/not installing it should say Install; not Enable, and 2. the SMC Console’s Server Advanced Settings shouldn’t display and save HTTP PROXY options if it’s not installed, since they're not actually effective in such case. Instead, the section could indicate that the proxy isn't installed, and include a link to instructions for installing it. I just finished my (fourth?, fifth?) Support chat this morning (Cases 447007 and 454095), totaling about 10+ working hours (including myself, Support, and a co-worker), to figure out a problem that was caused by the proxy not being installed. I didn’t check that box when going through the Virtual Appliance configuration because I wasn’t ready to set it up quite yet, and I knew from our Windows-hosted SMC Console that it can be enabled and set from within the SMC Console. I later enabled it and set the options in the SMC Console, so it included them when building the Live Installer. But because the proxy wasn't actually installed, the Live Installer-run Agent installation failed and rolled back at the very last step. It didn't provide indication, neither interactively or in a .log file, of the cause.

Description: The SMC Virtual Appliance configuration page can un-do network settings Detail: The Virtual Appliance configuration page doesn't show the network settings that were set in the “First time appliance configuration”. The fields are displayed blank. If the person doesn’t re-enter the values there, Virtual Appliance configuration page un-sets the values and the appliance reverts back to, for example, an un-named DHCP client. So then the “First time appliance configuration” must be re-set, and Virtual Appliance configuration must be re-done with the values re-entered.

Description: show the Policy name in breadcrumb while editing Detail: it would be great if the name of the Policy being edited would be shown in the breadcumb(?); not just in the Overview section. Like you do when we chose Show Details. Thank you.

Description: Policy settings reverse-lookup Detail: The ability in SMC/Endpoint Security to see which policy is responsible for which setting in effect on the computer. Basically something like a GPRESULT report available for diagnosing Active Directory Group Policy Objects's effects. A very simple example of that is shown here: https://4sysops.com/wp-content/uploads/2012/02/gpresult.exe-HTML-output.png

Description: Policy settings reverse-lookup Detail: The ability in SMC/Endpoint Security to see which policy is responsible for which setting in effect on the computer. Basically something like a GPRESULT report available for diagnosing Active Directory Group Policy Objects. A very simple example of that is shown here: https://4sysops.com/wp-content/uploads/2012/02/gpresult.exe-HTML-output.png

Description: Web control policy - Blocked webpage graphic - customizable dimensions Detail: The Web control page says, and tests confirm that, a custom graphic is scaled to 90px x 30px. That's really small, and prevents usage of a lot of graphics, especially ones containing circles. Can we have option(s) for: square/rectangle or, scaling percentage, or custom values

Description: Web control policy - Blocked webpage message: customization append/prepend/replace Detail: The Policy's "Blocked webpage message" setting allows either: blank, which causes the "Blocked" page to the default string telling why the page was blocked (Category or URL), or a custom string, which replaces that default string. But setting a custom string prevents the display of the reason for the block, guiding the user toward faster resolution in case of a/an (effectively; for the organization) false-positive. It would be nice if the policy allowed for the custom string to either: append or prepend to the default message, or replace the default message, and include the reason for the block (e.g. a variable we can include).

@MichalJ Yes.

@MichalJ Client Tasks currently available to be scheduled to run in advance are all only the "run on [x schedule]" and "or asap if unable" type. None of them have the option "wake up the device if necessary". The manual "Send Wake-up Call" action is run on the server by the server (either using the server's NIC to send a UDP packet, or to trigger the EPNS), so it would make sense for it to be a Server Task. Enterprise policy is that a computer is to be shut down when the person leaves for the day, so if the computer is on, then someone is actively trying to use it. Windows' Task Scheduler has the "Wake the computer to run this task" option, but the computer has to be only Sleeping for that to work. I'm simply requesting that the "Send Wake-up Call" action be made available as a scheduled Server Task so that vulnerability scans, Windows Updates installations, etc., can happen outside of business hours.

Description: Scheduled WOLDetail: The ability to schedule a "Send Wake-up Call" Server Task, to wake up workstations to facilitate running of modules updates, system scans and other things during non-business hours. An independent WOL script isn't as robust, especially across VLANs and such, and none of the Server tasks have a "[wake up to run]" option. TSa Kyle has submitted a ticket for this.