AnsweredAssumed Answered

Stop clearing ADQuery Identity Awareness during policy installation

Question asked by David Herselman on Dec 19, 2018
Latest reply on Dec 21, 2018 by Dameon Welch-Abernathy

Installing policy has the effect of clearing known user identity awareness, the primary reason why we advocate only handling this outside of business hours.

 

There are however often reasons why customers ask for policy installations during work hours, is there no way for a security gateway not to clear PDP during this process as user's internet access is subsequently inhibited until they restart their browser (initiates Kerberos browser based authentication as the browser handles captive portal detection), switches or cycles connectivity (initiates captive portal detection) or re-login (initiates ADQuery event)?

Outcomes