question

Eduards-6654 avatar image
0 Votes"
Eduards-6654 asked Jason-MSFT commented

Remote Help App Intune proxy problem

Hello,

Recently we started configuration of Remote Help App via Intune.

Created application and deployed to test VM. Everything works fine. We are using internal proxy.

A the moment when I what to launch RemoteHelp.exe it starts and closes immediately.

After investigation we see that traffic from RemoteHelp.exe is going to not trough our proxy.
https://docs.microsoft.com/en-us/mem/intune/remote-actions/remote-help#network-considerations

What could we do? We dont want to open all Azure ip adress range just for remote help app to work.

Maybe there is some option to force traffic from remotehelp.exe go through our proxy? Some registry entry or something?

mem-intune-generalmem-intune-application-management
5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

Jason-MSFT avatar image
0 Votes"
Jason-MSFT answered Jason-MSFT commented

Have you reviewed the requirements in the official docs at https://docs.microsoft.com/en-us/mem/intune/remote-actions/remote-help#network-considerations that call out a short list of URLs that must be reachable by the endpoints?

· 13
5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Eduards-6654 avatar image Eduards-6654 ·

Yes a saw the requirements. We have sophos firewall. I don't exactly know, could we input *.xxxx.com address and will sophos understand it.

We asked this question for sophos also.

0 Votes 0 ·
Eduards-6654 avatar image Eduards-6654 Eduards-6654 ·

Hello. Some updates

Sophos support mentioned that they are not sure that adding hosts that starts with "*." to exclusions will actually work.
We tested and it's not working as it supposed :) We can't resolve endpoints.

0 Votes 0 ·
Jason-MSFT avatar image Jason-MSFT Eduards-6654 ·

I'm not sure what to tell you on this. We provide a service that requires connectivity to these endpoints. You have "something" in place that prevents connectivity to these endpoints. Thus, you need to configure that "something" to allow this connectivity to use the service. How you configure that "something" is not anything we can help with.

How are your clients being managed by Intune though as some of these endpoints are the same (or similar)?

0 Votes 0 ·
Show more comments