topic Re: Harmony Connect device posture Azure AD in SASE and Remote Access

Harmony Connect device posture Azure AD

mrrib — Wed, 21 Dec 2022 13:42:54 GMT

We are facing an issue that users can't connect to the onpremise IT environment from an external location. This issue is only facing the AzureAD joined devices. We have also localAD joined devices and there we don't have any problem.

In the infinity portal, deviceposture section, we configured both domain names. The localad domain name and the azuread domain name.

How can we fix this?

Re: Harmony Connect device posture Azure AD

_Val_ — Tue, 27 Dec 2022 07:51:30 GMT

If you still need assistance with that, please open a TAC request.

Re: Harmony Connect device posture Azure AD

anstelios — Fri, 24 Feb 2023 18:41:15 GMT

Did you manage to resolve this?

Re: Harmony Connect device posture Azure AD

George_Casper — Sat, 25 Feb 2023 00:23:34 GMT

Are your gateways configured for LDAP lookup to just your on-prem AD? Even when AD Connect is configured to fully sync on-prem and Azure AD, devices that are AzureAD only will not have computer accounts in the local on-prem AD, I don't believe they will sync at all, may have to be Hybrid joined.

You might want to check out Azure AD Conditional Access Policies to handle compliance checking for the AzureAD only devices.