City laptops on VPN show Carbon Black Cloud sensors Offline. The split-tunnel include list carries only RFC1918, and a VPN client firewall drops non-tunneled destinations that are not listed. Carbon Black Cloud FQDNs were never added. What should the administrator change?
Select an answer to reveal the explanation.
Short Explanation
Split tunnel is a fork in the road. If CBC's cloud is neither in the tunnel nor allowed on the direct path, the sensor's check-in falls in the ditch. Put those FQDNs on a living path instead of pretending NSX DFW applies to a laptop that is not on the fabric.
Full Explanation
When city laptops on VPN show Carbon Black Cloud sensors Offline because the split-tunnel include list carries only RFC1918 and a VPN client firewall drops non-tunneled destinations that were never listed for Carbon Black Cloud FQDNs, add the Carbon Black Cloud SaaS FQDNs to the VPN split-tunnel include list, or exempt them on the client firewall so sensors can reach the cloud. Sensors need outbound SaaS reachability; RFC1918-only split tunnel plus client firewall drops starve check-in. Fixing the tunnel/firewall exceptions restores civic laptop prevention telemetry. Attaching the laptops to an NSX-T overlay segment so Distributed Firewall can proxy Carbon Black Cloud fails by concept because physical VPN laptops are not moved onto NSX overlay for CBC proxying. Converting each laptop to a transport node and enforce identity firewall until the sensor checks in fails by concept because endpoints are not ESXi transport nodes and IDFW does not replace CBC SaaS check-in. Replacing the sensor with Workspace ONE UEM compliance so Hub health substitutes for Carbon Black Cloud fails by concept because UEM compliance is not a substitute for CBC prevention telemetry. Exam caveat: Offline CBC on VPN with RFC1918-only split tunnel means add CBC SaaS FQDNs or client-firewall exemptions—not NSX overlay attachment or Hub substitution. Operational check: update split-tunnel include or client-firewall exemptions for CBC FQDNs, confirm sensors Online on VPN, retest prevention, and publish the VPN exception list in the city remote-access standard for municipal mobile workforce security.