Can anyone explain to me what is the purpose of the "Accept connections only from the ePO server " option that can be found on the general tab of the Agent/Super Agent policy in ePO? I had a SuperAgent that always fails to replicate for serveral weeks now (Failed to upload SiteStat.xml, Connection time out, etc) and after unchecking this option, the replication ha been a succcess. I'm happy with the result, but I want to know, what was the root cause and how unchecking the said option helped.
Just a thought and not really sure if it applies here but the MA4.6 had a issue with the SuperAgents:
Issue — When Accept connections only from the ePO server is selected in General policy, replication from SuperAgent might fail in a cluster ePolicy Orchestrator environment. (Reference: 647962)
Workaround — Deselect Accept connections only from the ePO server in General policy, then perform agent-to-server communication and replicate SuperAgent.
As for the "root cuase" of the actual issue....hmmm, not sure....
Please check KB73208. The explanation seems closer to what you mention: