SCCM SUP "prefere cloud based sources over on-premises sources"

Question

I have a question about SUP and "prefere cloud based sources over on-premises sources" setting.

Scenario 1

Configuration: I have CMG configured and working fine, SUP enable for CMG traffic.

If I enable "prefere cloud based sources over on-premises sources" on a Boundary Group that have all IP Address range for my VPN clients, my clients will get Update from my local SUP, CMG or form Microsoft Updates via Internet?

Scenario 2

Configuration: I have CMG configured but it is falling, not working well, SUP enable for CMG traffic.

If I enable "prefere cloud based sources over on-premises sources" on a Boundary Group that have all IP Address range for my VPN clients, my clients will get Update from my local SUP, CMG or form Microsoft Updates via Internet?

Answer 1

Additional comment on this topic is that:-

To reduce the performance effect of this change, existing SCCM clients don’t automatically switch to a cloud-based software update point.

Also, you need to make sure that SCCM clients are also in the 2203 version 5.00.9078.1006 or later.

Answer 2

Hi,

Thanks for posting in Microsoft MECM Q&A forum.

==>Scenario 1
The VPN clients will prefer a cloud management gateway (CMG) for both update policy and content. Starting in MECM version 2203, this setting also applies for software update scanning.

==>Scenario 2
If the VPN clients can retrive a fallback SUP to get update policy, they will get update from Microsoft Updates via Internet. If there is no fallback SUP, the VPN clients won't install update.

We can also monitor the CAS.log and ContentTransferManger.log to trace the download process. For more information about CMG and update, please refer to:
Prefer cloud based sources over on-premises sources
Managing remote machines with cloud management gateway in Microsoft Endpoint Configuration Manager
Managing Patch Tuesday with Configuration Manager in a remote work world

Hope it helps. Thanks for your time.

Best regards,
Simon

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.