Hello all, I'm hoping you can answer my question. I have a CAG firewall rules policy under which one sub-ruleset applies to a wired network and the other sub-ruleset applies to wireless connections. My question is, when and/or how often does HIPS check which nic is active? Is it possible that I could shut off a client while connected wirelessly (thus having the wireless portion of the CAG fw policy apply); power back it back on while connected via ethernet but HIPS would "forget" to check which medium was active (wired/wireless) and thus still apply the wireless CAG fw policy? Perhaps there's some flag it forgets to set to indicate which type of connection is being used?
HIPS Location Aware Groups critieria is checked upon any network adapter state change.