I was talking with a potential K1000 customer on Spiceworks recently and he brought up a question I haven't had to put into practice. He would be implementing a web-facing K1000, and many of his remote users use a MiFi device to connect. Now comes the tricky part. What is the best way to configure the K1000 to exclude the MiFi connected devices from patching and managed installs until connected over non-cellular data? Any advice is appreciated. Thanks!

1 Comment   [ - ] Hide Comment


  • add ip rules to the labels for patching
Please log in to comment

Answer this question or Comment on this question for clarity



After thinking about his a bit more... I would set my MiFi devices to use a different private IP address range to assign addresses to clients. I would then create a smart label to catch these MiFi connected devices, and probably name the label "Mobile Data Devices". I would then create another smart label to be used for software and patch deployments that excludes this first smart label. It would be dynamic and function so long as the user doesn't somehow connect from a network using the same private range as the MiFi devices.

Answered 05/30/2014 by: GeekSoldier
Red Belt

  • GeekSoldier,

    Not a bad idea. Just remember, if you're going to be using "nested" labels, to ensure that your Smart Label "Order" is correctly set - so that the primary label (Mobile Data Devices) applies before the secondary label(s) does/do.

    Ron Colson
    KACE Koach
Please log in to comment