How is VPN connection treated in policy?

[Susan]

Hi All,

If you have a policy set to execute from any IP address, that is connected over Ethernet only, how is VPN handled?

For example, I want to install software on a client, but only when connected via Ethernet. If a client connects over VPN and contacts the JSS, will the JSS consider VPN "Ethernet" ?

Thanks,
Susan

[rtrouton]

As defined, since you have it set up to execute from any IP address, connecting to your network via VPN would likely satisfy the policy's requirements. It would try to install the software.

Is the reason for installing over Ethernet only because you want to make sure that a certain network bandwidth speed is available? If that's the case, you may want to revise your policy so that it only executes when the Mac in question is on the subnets used by your Ethernet network.

[Susan]

Thanks - I figured that was the case, and appreciate the confirmation.

Cheers,
Susan