Sync Integrated Sentry with Exchange

After the initial set up, Integrated Sentry automatically performs a full mailbox sync with the Exchange server. It attempts to sync the entire list of mailboxes on the Exchange server. Since a full mailbox sync can cause sync failures in a large setup, initially, Integrated Sentry performs a batched sync. Subsequently, Integrated Sentry performs a periodic differential sync.

Batched sync of mailboxes

Periodic differential sync

Manually resyncing Integrated Sentry with Exchange

Batched sync of mailboxes

Starting with version 6.1, Integrated Sentry performs a full sync of the entire list of mailboxes and devices in batches. In case of a failure, the sync restarts where it had stopped. This reduces the time needed for a full sync, and it removes the need to re-do the entire sync operation.

Integrated Sentry automatically performs a full batched resync of all mailboxes and devices:

once every seven days. The next full resync is calculated based on the last successful full resync.

if a periodic differential sync is unsuccessful.

if there are changes in Exchange settings that might impact a large number of devices.

Periodic differential sync

After a full sync, Integrated Sentry performs periodic differential syncs. At regular intervals, Integrated Sentry checks for any changes in devices or mailboxes and only updates the changes since the last successful sync. This reduces the chances for a sync failure and greatly reduces the time required to sync. The default sync interval is four hours.

Periodic differential sync fails if the system time on Core is not in sync with the system time on the Exchange server. Ensure that the system time on Core and the Exchange server are in sync. Ivanti, Inc recommends configuring an NTP server on Core. See the Core System Manager Guide for details on configuring an NTP server.

The sync interval for differential sync for Integrated Sentry can be configured in the Core Admin Portal. In the Admin Portal, go to Services > Sentry > Preferences, and set the Sentry Sync Interval to the preferred interval.

See also, Setting the Integrated Sentry Sync Interval.

Manually resyncing Integrated Sentry with Exchange

You may need to perform a manual resync if you need to sync the data on Integrated Sentry immediately, before a scheduled periodic differential sync or full sync is due. If a sync is already in progress, your request for manual sync will be dropped. You will see a message saying that a sync is already running.

When you perform a manual resync, you can choose to do either a differential sync or a full sync. In most cases, you will only need to do a differential sync. Full sync is automatically triggered even when you select differential sync in the following cases:

new access control rules were configured on the Exchange server

changes were made to the default policy on the Exchanged server to allow or block devices

new security policy was configured on the Exchange server

Procedure 

1. In the Core Admin Portal, go to Services > Sentry.
2. Select the Integrated Sentry entry.
3. Click Resync Integrated Sentry with Exchange.
4. In the pop-up box, select one of the following options:

Option

Description

Differential: Devices updated since last Resync (Recommended)

Integrated Sentry checks for any changes in devices or mailboxes and only updates any changes since the last successful sync.

Each successful sync is timestamped. Even if there are no changes to update, the timestamp is updated to the latest successful sync.

Full: All devices

Integrated Sentry performs a batched sync for the entire list of mailboxes and devices on the Exchange server.

5. Click Resync.