Michael Bailey

08/24/2019, 5:53 AM
I can’t quote the exact details but my understanding was a certain set of paths are checkin and a certain set are admin so you can isolate by path. Kolide or more Kolide-able people may have insight.

David M

08/26/2019, 9:53 PM
Is there any more context on what that entails? I'm pretty good at digging if I have a service or terminology given to me.


09/04/2019, 9:48 PM
Sorry for the delayed reply as I've been on vacation. What you can do is use a reverse proxy to expose only the
endpoints to the public (so osquery agents can check in from any network), while requiring everything else to be routed through your VPN.