Unable to push out deployments to remote PCs

[JKdc]

I'm trying to troubleshoot a problem with our devices not being able to install deployment pushes when working remotely on our new 5.10 EPO server setup. We do have an agent handler in our DMZ setup and working, and devices are able to manually check-in via a collect/send props. I am able to change some things, like decryption requests via policy change will be received and handled, but not deployment requests for things like uninstall encryption, install encryption, or agent version updates.

I have also tried connecting the remote devices to vpn, but deployments still won't make it through. Any ideas would be helpful.

[JKdc]

This may be moved to a different support area since it's a bigger issue than just drive encryption.

[jsubbura]

Hi @JKdc ,

This seems to be post for EPO point product.

I would get this post moved to EPO forum

Thank you

[cdinet · Accepted solution]

How are you pushing the deployments?  If you are trying to use a run client task now type task, that isn't going to work over vpn or to external clients.  The reason being is that they would be using a natted IP address that epo can't resolve.  The only way that would work is if you have a dxl broker that the clients can connect to.

The solution, as long as your clients can talk to epo and communication shows current in epo, is to set up assigned client tasks in the system tree and don't use run client task now.

[JKdc]

Thanks, yes I was trying a run client task. We aren't currently using the DXL broker. I will look into the assigned client tasks routine for these remote devices. Thank you for pointing me in the right direction.