Etrust 7 Subnet question

[McLarnon]

I am having a problem distributing policies to my remote users and I think that this due to the configuration of my subnets.
As soon as I installed the admin server it detected all Etrust 6/7 clients on my local network and put them into a subnet. If I go into the setting for this subnet it shows that the ip address is that of the admin server (192.65.144.74).

I need for my remote users to be able to have their signatures updated each time they dial up to the network. When they connect to the network via our VLAN setup they are assigned the IP address 192.65.160.x.

I tried to setup an additional subnet with the ip address 192.65.160.255, hoping that each time a remote user connected they would be picked up by this subnet.
I arranged for a remote user to connect to the network and hoped that the subnet would pick them up. It didn't.
The only way I could detect them was to configure the subnet directly to their address 192.65.160.4. The problem here though is that
a) The address each user is assigned will not always be the same
b) I would have to create a subnet for every user.

There has got to be a way that I can configure the subnet to pick up all the remote users in the range 192.65.160.x.


My second question is (If the first wasn't enough) is how to have each remote user update when they connect to the network.
Being remote they all connect at various times throughout the day and I'm not sure how to configure the admin server so that the clients signature is updated as soon as they connect.

I look forward to any suggestions and if I've left any information out let me know.

Thanks

 

[glacierxx]

You could set all remote users to use the CA FTP site to update when they connect to your network.

"evil prospers when good men do nothing”

 

[McLarnon]

When my remote users connect to the network remotely they cannot access the Internet. Even if they could it would defeat the purpose of having an admin server as I would not be able to view what signatures each remote user had installed on the laptop.

 

[rooky01]

Hi,
The new version 7.1 has a new Election Method called Sweep Poll. See info:
Use the Sweep Election method to perform discovery by contacting every individual IP address in the subnet. The specific machines that are contacted are determined by the IP address and mask that are specified on the Subnet tab.

This method is intended for use when none of the other methods are appropriate. For example, this method can be used when client machines are connected to the network through a VPN or a PPP connection. Also, the Free Election method is not possible if IP Directed Broadcasts are not permitted to the target subnet. And Specified Election is not possible if the specified machine can not predictably be relied upon to be running.

The Sweep Election method is required to be used to discover subnets on a Linux for 390 machine where the virtual Linux machines are connected to the network via a point-to-point connection to the mainframe, rather than by direct Ethernet connections.

Note: If any of the other election methods are suitable for a subnet, we recommend to not to use Sweep Election. Sweep Election will result in a higher level of missed polls, and it puts a higher load on the Admin Server.

This new version is only needed for the Admin Server.

Hopes this helps.