MVPHi Folks,
I wonder how widespread Access Guard is. Anyone using this component in larger or smaller deployments? Or is it better to go with Endpoint Management Systems like like MS Intunes to do continuous endpoint compliance checks?
Hey Juergen_Mang - I see nobody has answered yet, so I've forwarded this thread to a colleague to ask for their help.
MVPHello Juergen_Mang did you test if Intune of Microsoft conditional access are doing checks for each request as from what I have seen they are like F5 APM access policy and doing checks per session not per requests and after that Intine adds a cert on the computer to show it is compliant and Microsoft conditional access also remembers that the user has passed its rules? Maybe I am wrong about Intune and now they can also checks for each request like Access Guard or at a scheduled time like every minute, so I am also interested in what you will find out 🙂
If Intine can't do checks for every request or at a scheduled interval maybe combination between F5 APM and Intune/ Microsoft conditional access will be the best as they have great intergrations for Intune to check stuff first and then F5 Access Guard to do Zero Trust checks per request.
All depends what you are trying to do as I do not know your end goal 😀
MVPMy primary goal is to find out how widespread access guard is, or the most people goes the endpoint management integration way.
