Creating a Network Agent switching rule by network location

Expand all | Collapse all

Network Agent-switching by network location is available only on devices running Windows and macOS.

To create a rule for Network Agent switching from one Administration Server to another if network settings change:

1. If you want to create a rule for a group of managed devices, open the Network Agent policy of this group. To do this, do the following:
   1. In the main menu, go to Devices → Policies & profiles.
   2. Click the current path link.
   3. In the window that opens, select a required administration group.

      After that, the current path is changed.

   4. Add the Network Agent policy for the group of managed devices. If you have already created it, click the Network Agent policy name to open the policy properties.
2. If you want to create a rule for a specific managed device, do the following:
   1. In the main menu, go to Devices → Managed devices.
   2. Click the name of the managed device.
   3. In the managed device properties window that opens, go to the Applications tab.
   4. Click the name of the Network Agent policy to which only the selected managed device applies.
3. In the properties window that opens, go to Application settings → Connectivity → Connection profiles.
4. In the Network location settings section, click the Add button.
5. In the properties window that opens, configure the network location description and switching rule. Specify the following network location description settings:
   • Description

     The name of a network location description cannot be longer than 255 characters nor contain special symbols, such as ("*<>?\/:|).

   • Use connection profile

     In the drop-down list you can specify the connection profile that Network Agent uses to connect to the Administration Server. This profile will be used when the network location description conditions are met. The connection profile contains the settings for Network Agent connection to the Administration Server; it also defines when client devices must switch to out-of-office policies. The profile is used only for downloading updates.

   • Description enabled

     Select this check box to enable the use of the new network location description.

6. Select conditions for the Network Agent switching rule:
   • Condition for DHCP server address—The IP address of the network Dynamic Host Configuration Protocol (DHCP) server has changed.
   • Condition for default connection gateway address—The address of the main network gateway has changed.
   • Condition for DNS domain—The DNS suffix of the subnet has changed.
   • Condition for DNS server address—The IP address of the network DNS server has changed.
   • Condition for WINS server address—The IP address of the network WINS server has changed. This setting is available only for devices running Windows.
   • Condition for name resolvability—The DNS or NetBIOS name of the client device has changed.
   • Condition for subnet—Changes the subnet address and mask.
   • Condition for Windows domain accessibility—Changes the status of the Windows domain to which the client device is connected. This setting is available only for devices running Windows.
   • Condition for SSL connection address accessibility—The client device can or cannot (depending on the option that you select) establish an SSL connection with a specified Server (name:port). For each server, you can additionally specify an SSL certificate. In this case, the Network Agent verifies the Server certificate in addition to checking the capability of an SSL connection. If the certificate does not match, the connection fails.

   The conditions in a rule are combined by using the logical AND operator. To trigger a switching rule by the network location description, all of the rule switching conditions must be met.

7. In the condition section, specify when Network Agent should be switched to another Administration Server. For this purpose, click the Add button, and then set the condition value.

   Also, the Matches at least one value from the list option is enabled by default. You can disable this option if you want the condition to be met with all specified values.

8. Save your changes.

A new switching rule by the network location description is created; any time its conditions are met, the Network Agent uses the connection profile specified in the rule to connect to the Administration Server.