Hey all, how are you doing? I have a load balancer in front of our Fleet instance. In LB, we plan to filter all non-osquery connections. For example: allow just

/API/v1/osquery/*

. Other requests will go through a filter. The idea is to filter who can access the fleet api and FleetUI. Does that make sense to you? Tks.

Absolutely. It’s not uncommon to limit access to the UI and API. Here’s some info on additional endpoints you may want to make publicly accessible: https://fleetdm.com/docs/deploying/faq#what-api-endpoints-should-i-expose-to-the-public-internet

nice, tks for you help. @Kathy Satterlee