On Linux
In an air-gapped environment where a secure network is physically isolated from insecure networks, such as the public Internet or an insecure local area network, and the computers on opposite sides of the air gap cannot communicate, to download and transfer files to the main Endpoint Manager server running on a Linux system, you can use the Airgap utility.
This utility can also help download patch contents in a Fixlet site or single file downloads from a url.
In addition to the Endpoint Manager server which is being configured on the isolated network, you need a Windows computer thathas access to the public Internet, to download Fixlet site content using the BESAirgapTool.exe utility. The downloaded site content and files are transferred to the Endpoint Manager server on the Linux computer.
- It must be connected to the Internet to download contents from the Fixlet sites. For additional information, see the Administration Tool documentation.
- The BESAirgapTool.exe tool must be installed. You can download the Windows Airgap utility from TEM Utilities.
- The following libraries must be copied to the Windows computer,
in the same directory as BESAirgapTool.exe:
You can copy these libraries from the folder where you installed the Endpoint Manager console. The default folder is C:\Program Files\Bigfix Enterprise\BES Console.libBEScrypto_1_0_0_1.dll libBEScrypto_1_0_0_5.dll
Perform these steps to run the Airgap utility on the Linux Endpoint Manager server:
- Ensure that on the Linux computer, the Airgap utility is in the path where you installed the Endpoint Manager server. The default path is /opt/BESServer/bin.
- Open the Linux Terminal, and type these commands to create a tar
file named airgap.tar, containing the AirgapRequest.xml based
on the information about the Endpoint Manager database:
# cd /opt/BESServer/bin # ./Airgap.sh -run
Note: The complete syntax of Airgap.sh is the following:
where:Airgap { -run | -remotedir directory | -proxy proxy | -help }
- -run
- Runs Airgap to generate the tar file with the request in the local folder.
- -remotedir directory
- Runs Airgap to generate the tar file with the request in the specified folder.
- -proxy proxy
- Specifies the proxy name if needed.
- -help
- Lists the Airgap usage.
- On the Linux computer, extract the airgap.tar file
with the following command under the airgap sub-folder::
.# tar -xf airgap.tar
- Copy the file AirgapRequest.xml, created in the airgap folder, to the folder containing the BESAirgapTool.exe file of the Windows computer.
- On the Windows computer, run BESAirgapTool.exe to download the data related to the AirgapRequest.xml request into the AirgapResponse file.
- Copy the AirgapResponse file, generated by BESAirgapTool.exe, from the Windows computer to the airgap folder of the Linux workstation.
- On the Linux computer, from the airgap folder,
run the Airgap tool to load the data on the database:
# cd /opt/BESServer/bin # ./Airgap.sh -run
To download patches and other files from the Internet and deploy Fixlets on the main Endpoint Manager server see Transferring Downloaded Files.