Administrators can configure time intervals for periodic compliance checking of an endpoint during an authenticated user session. The periodic compliance checking ensures that the device remains compliant throughout the session. The time intervals can be configured on the Endpoint Compliance Check Provider Settings page.
Unified Access Gateway performs compliance checks on an endpoint when a user attempts to launch remote desktop or application session using Horizon Client on that endpoint. If the time intervals are configured, endpoints are periodically checked for compliance as per the configured time intervals.
After the initial compliance check, during the session, an endpoint might become non-compliant due to several reasons such as policy changes done by administrators. In some cases, endpoints might require access to launch a session despite compliance assessment pending. To ensure that only compliant endpoints access the remote desktop or application throughout a session, administrators can configure the compliance check time intervals: Compliance Check Interval (mins) and Compliance Check Fast Interval (mins).
When Compliance Check Fast Interval (mins) is also configured, Unified Access Gateway first runs the Compliance Check Fast Interval (mins). After the endpoint becomes compliant, Unified Access Gateway then runs the Compliance Check Interval (mins).
During the periodic compliance checking, if an endpoint is found to be not compliant, then the Horizon Client ends the user session on that device.
Compliance Check Interval (mins)
This text box allows you to configure a periodic time interval at which the Horizon Client sends compliance check requests to Unified Access Gateway during a session.
Compliance Check Fast Interval (mins)
This text box allows you to configure a periodic, frequent time interval at which the Horizon Client sends compliance check requests to Unified Access Gateway during a session for an endpoint in specific statuses other than In compliance. The statuses are Device not found, Assessment pending, and Endpoint unknown and must be configured as ALLOW.
For example, when the on-demand agent is assessing an endpoint and the device status is either Assessment pending or Endpoint unknown, you can set the time interval to 1 minute so that the compliance checks are more frequent at the beginning of a session.
0.
To configure the time intervals, see Configure Endpoint Compliance Check Provider Settings for Horizon.
