Disabling Dead Gateway Detection for Jamf Trust

Jamf Connect Documentation

Solution
Application
Jamf Connect
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

Administrators can disable Jamf Trust's dead gateway detection (DGD) via Jamf Pro by modifying a new configuration profile. To modify an existing configuration profile, remove the current activation profile in Jamf Security Cloud and then upload a new configuration profile.

Requirements
  • Access to Jamf Pro and Jamf Security Cloud

  • Managed devices with one of the following versions of Jamf Trust:

    • iOS/iPadOS 11.24.1 or later

    • macOS 2.19 or later

      Note:

      Disabling Dead Gateway Detection for Android and Windows is not currently available.

  1. In your Jamf Security Cloud portal, go to Devices > Activation profiles.
  2. Select the desired activation profile.
  3. Under Configuration profiles, click Download configuration profile.
  4. In the configuration profile, modify the VendorConfig dictionary with the DisableDgdNetworkEvaluation setting as follows:
    <key>PayloadType</key>
    <string>com.apple.vpn.managed</string>
    <key>PayloadUUID</key>
    <string>F2E7CC72-E2B1-5131-C028-B000E</string>
    <key>PayloadIdentifier</key>
    <string>com.jamf.trust-dev.pa.bootstrap</string>
    <key>PayloadOrganization</key>
    <string>Jamf</string>
    <key>PayloadDisplayName</key>
    <string>Jamf Trust Networking PA Bootstrap</string>
    <key>PayloadDescription</key>
    <string>Authorizes Jamf Trust Networking as a permitted VPN provider on this device.</string>
    <key>VPNType</key>
    <string>VPN</string>
    <key>VPNSubType</key>
    <string>com.jamf.trust-dev</string>
    <key>VPNUUID</key>
    <string>99902e76-ff2c-43e3-0000-4158675309</string>
    <key>VendorConfig</key>
    <dict>
      <key>ProfileId</key>
      <string>com.jamf.trust.bootstrap</string>
      <key>DisableDgdNetworkEvaluation</key>
      <true/>
    </dict>
    <key>OverridePrimary</key>
    <false/>
    <key>PayloadVersion</key>
    <integer>1</integer>
    <key>VPN</key>
    <dict>
      <key>AuthPassword</key>
      <string>nopassplease</string>
      <key>AuthenticationMethod</key>
      <string>Password</string>
      <key>RemoteAddress</key>
      <string>use.jamf.trust.app</string>
      <key>ProviderBundleIdentifier</key>
      <string>nonexistingidentifier</string>
    </dict>
  5. In Jamf Pro, go to Devices > Configuration Profiles.
  6. Click Upload.
  7. Select the modified configuration profile.
  8. Click Save.

Jamf Trust's Dead Gateway Detection will no longer be available for your end users.