Oh man, I haven’t seen uuencode in so long, I basically forgot it existed until I read your comment!

Forgot the one everyone wishes they could forget - FTPS !

Might be worth noting that SCP is non- interactive file transfer only, whereas FTP/SFTP can do interactive sessions and management functions as well.

Lol, really? One can’t control the fact that bad things happen. The west isn’t forcing either China or Russia to claim territory that doesn’t belong to them.

However, one can control how one reacts to said events. Help out where we can, and strengthen ourselves for the future.

There’s that whole proverb about crisis=danger+opportunity. The danger is there regardless…if you fail to seize the opportunity presented, well, you are pretty much guaranteed to come out the other side worse off.

Very few people WANT a war in Ukraine. But as China keeps adding dashes to their map, it’s pretty clear there’s a reasonable chance to be an even bigger war around the corner, whether we want it or not.

The Ukraine war woke the west up from its slumber, and it has allowed us to put the old stuff stuff cluttering our closets to good use, as well as test some new weapons concepts, and to get ourselves ready for the bigger conflict on the horizon.

If we are really lucky, China is looking at Ukraine and having second thoughts about kicking the hornets nest at all, saving a lot of lives on both sides.

If we are not that lucky, then Ukraine has allowed us to be much better prepared for the coming conflict.

So am I glad Ukraine happened? Not a bit. Can I see the silver lining thru the clouds? For sure.

Pretty much. China is pretty good at buying friends…when they aren’t busy stealing their stuff..

I don’t get why China allows their fishing fleets to keep shitting on their international reputation. It’s so counterproductive.

Tanium has some common apps pre-packaged and regularly updated, you could just setup an ongoing deployment for those to automate keeping them up to date with minimal work on your part.

If you need to update something not on that list, you will need to make an upgrade package yourself with the updated installer or files.

Whether this is actually easy or not really depends on the app vendor and the software. It’s usually straight forward, but not always. But that’s the case with literally any software deployment solution.

I have one app in particular who’s install and config essentially un-automateable. But it’s a shitty LOB app that was written in the 90’s to be intentionally obtuse to prevent privacy, hopefully that’s not an issue in your case.

We are using Tanium, just put the agent on the servers and you are good to go…build your packages and set up deployment jobs.

It also handles Windows patching, and can do system inventory, among other features.

It’s also great for software deployments to you remote workforce systems that are rarely/never on the corporate network.

And seriously, you want a domain. GPOs are incredibly useful for pushing out a huge variety of Windows config changes extremely easily.

Yeah, I hate it. I’d want some sort of SAML SSO auth in front of the actual RDS Gateway to allow you to use whatever identity provider and MFA you already have.

You really don’t want to allow all manner of auth attempts able to be made against your actual workload servers, which is what it sounds like you are describing.