topic Re: Endpoint client policy updates in Endpoint

Endpoint client policy updates

Dan_Roddy — Mon, 09 Jul 2018 16:58:48 GMT

Greetings,

We have 81 Windows 10 Surface Books all deployed with SandBlast Endpoint Agent. Many of these devices rarely are wired to the network. They connect and get all policy updates for every application we have deployed using Microsoft Direct Access with one exception: SandBlast Endpoint Agent.

If the agent were to connect to the Endpoint Management Server by domain name, policy updates would just work. Now for my question: How can I make the E80.82 client connect to management using its internal DNS name?

I have asked TAC but not getting any traction, they don't know what Direct Access is.

Best regads & thank you in advance,

Dan Roddy

Re: Endpoint client policy updates

PhoneBoy — Fri, 13 Jul 2018 10:43:48 GMT

Why not by internal IP address?

Re: Endpoint client policy updates

Dan_Roddy — Tue, 17 Jul 2018 19:16:11 GMT

Microsoft Direct Access uses the Name Resolution Policy Table (NRPT) to address resources inside the domain, therefore the dns name must be used by the client.

Re: Endpoint client policy updates

Dan_Roddy — Wed, 08 Aug 2018 14:52:23 GMT

OK, can I edit the IP and replace it with dns name?

Re: Endpoint client policy updates

Marina_Lachtarn — Wed, 08 Aug 2018 15:47:57 GMT

Hi Dan,

In one of upcoming releases of Endpoint Management and Endpoint Client we are planning to provide this ability built in the product.

Meanwhile for having workaround please open a Support ticket and ask to get a workaround from R&D to connect with FQDN. The configuration is not very convenient yet but you will be able to test it as a workaround in your environment before we release it officially with convenient configuration.

Re: Endpoint client policy updates

Dan_Roddy — Thu, 09 Aug 2018 22:34:27 GMT

Thank you Marina, I opened a case: SR # 3-0511850271 but I don't think it was sent to R&D, how can I tell?

Re: Endpoint client policy updates

Marina_Lachtarn — Sun, 12 Aug 2018 08:06:22 GMT

I will follow up.

Re: Endpoint client policy updates

Dan_Roddy — Thu, 17 Jan 2019 19:32:03 GMT

Hi Marina, I am checking back with you to see if support for IPv6 has been built in to EP clients to get policy updates through Microsoft Direct Access. EP is the only security client in our environment that is not currently working in this regard.

Thank you,

Dan Roddy