VPN blocking management commands?

New Contributor III

We're just in the process of setting up our JSS and noticed something odd. Usually our Macs are on our wireless network and often they also have a VPN tunnel setup to our internal network. When sending a management command to one of these Macs, such as Lock Computer, the command will stay at the pending stage until the VPN is disconnected from, after which they will immediately process the command. Looking in the device inventory, it will show the wireless IP for the reported IP address and the VPN address as the IP address. Any ideas why this would happen?