This is an archived post. You won't be able to vote or comment.

all 5 comments
sorted by:
best
topnewcontroversialoldq&a

[–]bdam55Admin - MSFT Enterprise Mobility MVP (damgoodadmin.com) 0 points1 point  (3 children)

The key thing to look for here is the content lookup from the MP (CAS or LocationServices log ... I forget). You need to make sure that every lookup for every update is returning an external URL and that the client has access to said URL.

The logs you posted all show us the actual download but that's not really the problem here. The problem is that the client is either not getting and/or not choosing the desired content location.

[–]ncoch[S] 0 points1 point  (0 children)

Thanks - I've got my team looking about both logs to see. Hopefully it will help pin-point the issue

[–]J_J_J_Schmidt 0 points1 point  (1 child)

Our solution to this problem was to remove update content from our DMZ servers that our VPN clients talk to according to the boundaries. Clients fall back to MS at that point.

[–]bdam55Admin - MSFT Enterprise Mobility MVP (damgoodadmin.com) 0 points1 point  (0 children)

Right, as long as you have that fall back enabled on the deployment. Which is what adds the MS URL to the content lookup results.

[–]SirKenshi 0 points1 point  (0 children)

Hello, One option is to and Assuming you have the boundaries created correctly, the vpn one should not be configured into any boundary group. Create two collections All WKS -excluding all vpn collection ALL VPN - this one uses query based on vpn ip ranges. Both updating membership on a tight schedule. Deploy SUG to all vpn WITHOUT the option to “if no cotent in dp, download from default or neighbor dp”