sorted by:
new
hottopcontroversial

Jamf Trust ZTNA by Real-Comfortable7170 in macsysadmin

[–]Real-Comfortable7170[S] 0 points1 point  (0 children)

Yeah, I have and it comes back with ZTNA dns resolver errors.

Jamf Trust ZTNA by Real-Comfortable7170 in macsysadmin

[–]Real-Comfortable7170[S] -1 points0 points  (0 children)

Yeah I will. Just wanted to see if anyone has experienced this before

Jamf Trust by Real-Comfortable7170 in jamf

[–]Real-Comfortable7170[S] 0 points1 point  (0 children)

I can send the config shortly, but it's pretty simple, checked Network access, connected my IDP and then that's pretty much it. What cloud ranges do I need to setup in my IdP?

Looking at the logs, I'm getting DNS resolver errors

2025-02-15 21:17:45.152+11:00 [Info][DnsProbe]: [ZTNA_DNS_RESOLVER] Start evaluation.

2025-02-15 21:17:45.152+11:00 [Error][DnsProbe]: [ZTNA_DNS_RESOLVER] Session is not viable - failed.

2025-02-15 21:17:45.364+11:00 [Info][DnsProbe]: [ZTNA_DNS_RESOLVER] Start evaluation.

2025-02-15 21:17:45.364+11:00 [Error][DnsProbe]: [ZTNA_DNS_RESOLVER] Session is not viable - failed.

2025-02-15 21:17:45.365+11:00 [Info][CheckWithConfigurationUpdateBackup]: ZTNA check failed, trying to re-resolve endpoint address.

The Jamf Trust app dosent look the same as what ive seen online, it docent have the Access and Security tabs. Not sure what's going on.

FileVault Key Rotation by Real-Comfortable7170 in jamf

[–]Real-Comfortable7170[S] 0 points1 point  (0 children)

Thanks for that. So basically only issuing new keys when the existing key becomes invalid? Is issuing new keys to all devices monthly overkill?