carolai asked a question.
How can I exclude Inventory files from being processed into Snow Inventory server
Hi Dears,
I want to exclude stolen computers from being processed into Snow Inventory.
There should be a configuration possibility to exclude for example Site Names.
Does anybody know how to configure this?
Or did anybody find another solution how to handle stolen computers?
Hi,
Unfortunately there is no explicit way of excluding .snowpack files from a certain source from processing, at least that I could find in the Inventory Server User Guide.
Perhaps this could be handled outside of the Snow solution - for example, an IP blacklist (or whitelist) that stops unauthorised connections to the Service Gateway?
Thank you Anthony,
I am not 100% sure if I could get the public IP-Address.
Isn't it, that the Snow Agent do send only it's internal IP ? I will check if I could do what you suggested.
But I thought I read anywhere in a former SIS version, that a blocking from Snow Server could be configured. But I also did not find a description in docs portal.
If you know what those computers are, could you push a new configuration file that makes them unable to report?
Although you may want to continue to get reports back since you may be able to locate where they actually are ... Maybe the use of a custom script run by the agent could even report on the stolen status and add location info
I think a "Site exclusion" is possible, but I also have in mind that there was something elso possibe.
Can't find it though.
Interesting, that stolen computers still report 😉
My first idea was to send a config update, that includes a "wrong" unreachable server.
But this is not possible.
I made a test with my computer and noticed that the Agent first do a Update self-test with that new config, tried to reach the server and then ignored the config update with message "Handshake failed. Cannot connect to server. -> Update self-test failed"
But I can send a config-update, that has a Sitechange.
My idea was to set the Site to STOLEN and then block that Site. But that seems to be not possible.
I already have an organization "Stolen/Sold computers" in SLM.
So I think I will send a Site change to that computers, then create a Autoallocate Rule to assign the computers to that organization and then regularly delete that computers.
Hi Carola,
i think you can use this one for a solution and for more detail here
Thank you very much Detlef 😀
I will check this.
But I also heard, that a Site exclusion presumably will be implemented in the next future.