# Direct Download of Patches

Direct download allows managed endpoints to download patch binaries from vendor websites without depending on the Central Server for the patch files. This can reduce Internet and VPN bandwidth consumption in the network where the Central Server is hosted.

When direct download is enabled through the patch-management internal setting, remote or VPN-connected endpoints download patches from vendor websites. When those endpoints return to the intranet, they download patches from the Central Server. On Windows endpoints, you can additionally force direct download while the endpoint is inside the network.

**Note:** This setting applies only to roaming users. The configuration described on this page is not supported in the On-Cloud edition. On-Cloud agents download patches from the Internet by default.

## Enable direct download for remote endpoints

This method is available on server builds **100715 and later**.

1. Open `https://<hostname>:<port>/webclient#/uems/patch-mgmt/internal-settings`.
2. For **Key**, enter `addMetaParams`.
3. For **Payload**, enter `{"addParam":"Patch_Direct_Download_DC", "option":"0"}`.

To disable direct download, use the same key with the payload `{"addParam":"Patch_Direct_Download_DC", "option":"1"}`.

## Force direct download on Windows endpoints

To force a Windows endpoint to download patches from vendor websites even when it is inside the network, create a computer-based Registry Settings configuration and deploy the following value to the required endpoints.

Windows registry value for forcing direct patch downloads

| Setting | Value |
|---|---|
| Hive | `HKEY_LOCAL_MACHINE` |
| 64-bit subkey | `SOFTWARE\WOW6432Node\AdventNet\DesktopCentral\DCAgent` |
| 32-bit subkey | `SOFTWARE\AdventNet\DesktopCentral\DCAgent` |
| Value name | `ForceDirectDownload` |
| Type | `REG_DWORD` |
| Data | `1` |

For instructions on creating, targeting, and deploying the configuration, see [Configure Registry Settings for Computers](https://www.manageengine.com/products/desktop-central/help/configuration-management/configuring_registry_settings-computer.html).

## Enable or disable direct download on macOS endpoints

The macOS direct-download patches are available on server builds **100546 and later**.

1. Navigate to **Patch Mgmt → Patches → Supported Patches**.
2. To enable direct download, search for patch ID **602357 - Direct Download Enabler for MAC Patches**.
3. Select the patch and deploy it to the required macOS endpoints.

To disable direct download, deploy patch ID **602358 - Direct Download Disabler for MAC Patches** to the required macOS endpoints.

## Verify the direct download state

1. Open the affected endpoint's agent log file, `computer0.log`. On Windows, check the agent's `Logs` directory, for example `C:\Program Files (x86)\ManageEngine\UEMS_Agent\Logs\`.
2. Search for `DirectDownloadState`. For example, `LastDirectDownloadState : Disabled` indicates that direct download was disabled when that entry was recorded.

For macOS log collection, follow the [agent log collection instructions](https://www.manageengine.com/products/desktop-central/logs-how-to.html) and search the same log file for `DirectDownloadState`.

The logged setting does not identify the source of every patch transfer. When investigating Distribution Server bandwidth, also check the endpoint's remote-office assignment and whether a Distribution Server is enabled for that office.

## Related

- [Proxy Settings](https://www.manageengine.com/products/desktop-central/help/patch-management/proxy-settings.html)
- [Configure Registry Settings for Computers](https://www.manageengine.com/products/desktop-central/help/configuration-management/configuring_registry_settings-computer.html)