Planning NON secure to secure hub

[Akash Saini]

Hi Folks ,

We planning our existing envi form non secure to secure hub .

Our environment very large and also have multiple domain .

Envi details -

Total no of hubs-80+

Total end point server -6000+

Total no of Domain -10+

Please help me how to Proceed this .And also explain its good to change the existing envi.

And what challenge facing during upgradation.

Thanks in advance !

Akash Saini

[Andrew Cooper]

We use secure hubs (hub_secure) with standard robots (secure robots in all our testing didn't have enough performance to scale well for even small (<10 robot hubs).  We use tunnels between hubs and have never had any problems "upgrading" hubs from standard to secure for the same version (and for that matter secure to standard for the same version).  When changing version we have always done like to like.  Finally the secure hub only supports "high" encryption for the tunnel (low/none will fail to re-establish after restart), however the newer non-"standard" encryption algorithms (ie longer key lengths and specific algorithms) have also all worked as we hardened the tunnels.

Its not hard, you can have a mixed environment, just check the tunnel pre-requisites, and move slowly letting the architecture rebuild after an update/migration and fixing any issues as you go.

Regards, Andrew

------------------------------
Knows a little about UIM/DXim, AE, Automic
------------------------------

[Joakim E]

What is the benefit using secure hubs besides an encrypted tunnel? We were also planning to move to hub_secure but it worries me now that I see it only supports high encryption. We use medium encryption today and the performance is not fantastic (when managing probes etc).