Setup And Configuration Profile: Remote Access Tab - Symantec ALTIRIS OUT OF BAND MANAGEMENT COMPONENT 7.0 SP3 - IMPLEMENTATION GUIDE V1.0 Implementation Manual

Setup and configuration profile: Remote Access tab

Options on the Add New Domain Entry dialog box (continued)
Table 10-13
Option
This domain is a home
domain
FQDN validation
Allow sub-domain
Intel AMT 4.0 and later support client-initiated remote access. This feature allows
a platform containing Intel AMT located outside an enterprise to connect to
management consoles inside the enterprise. The connection is accomplished
through a Management Presence Server (MPS) located in the DMZ of the enterprise.
The MPS appears as a proxy server to management console applications. The Intel
AMT device establishes a Mutual Authentication TLS tunnel with the MPS. Multiple
consoles can then interact with the Intel AMT device through the tunnel.
For remote access to work, you must configure the Intel AMT platform when the
platform is inside the enterprise. You must configure the platform with the
information needed to connect with the MPS. The Remote Access tab is used to
enter the necessary parameters. A remote access policy contains the parameters
that determine the conditions for establishing an MPS connection. The policy
also contains the connection parameters to either one or two MPSs.
The MPS connection parameters are defined separately.
About Out of Band Management Component pages
Description
Checking this has the following effects:
CIRA (Remote access): If the Intel AMT computer is not in a
home domain, the computer will attempt to use CIRA to
connect to the SCS (if CIRA is defined).
Wi-Fi: If the Intel AMT computer is in a home domain and
no wired connection is available, and the profile does not
include Wi-Fi parameters, and the host has connected using
Wi-Fi, the Intel AMT computer will use the host s Wi-Fi
settings as long as the access point is in one of these domains.
Check to validate the Intel AMT devices's FQDN when you modify
the configuration properties for an Intel AMT device. Intel SCS
checks that the device s FQDN matches one of the domains in
the domain list of the profile that is used for setup and
configuration.
Check to allow configuration (using this profile) of an Intel AMT
computer that is located in a sub-domain of the domain that you
entered in the Domain Name box. For example, if the domain
name is mydomain.com, Intel AMT computers in
subdomain.mydomain.com can also be configured.
Configuration Profiles page
141