This article provides a step-by-step guide to enable the seamless integration of Automox Remote Control with Jamf Zero Trust Network Access (ZTNA). By following the outlined process users will be able to utilize remote control while Jamf Trust is in the active state.
The process entails creating a bespoke application within the Jamf ZTNA environment and configuring the allowlist domains as route-able components. The second part of the process ensures that traffic circumvents internal gateways and routes externally instead.
Instructions
Go to Access → Access Policy within the Jamf ZTNA console
Click New App Policy and select Create Policy under SaaS Apps. Then select Custom at the bottom.
The important areas to configure here are Traffic Matching Rules and Routing. Traffic Matching requires you to input the allowlist rules to route from the device. Within routing, you’ll want to route it through a Shared IP Pool instead of an Internal Gateway.
It’s important to note that you can utilize Default Device Routing and encrypted traffic routed through ZTNA with this solution. The Routing Mode must be IPv4 due to compatibility issues.
After this configuration is set up, the user must disconnect and reconnect Jamf Trust or wait approximately 15 minutes for the config to push to their device.