From 0d206aab743b6dc27ec1582eb98dd5d30e2e59f9 Mon Sep 17 00:00:00 2001 From: Aditya Sharma <51014728+aditya2548@users.noreply.github.com> Date: Sat, 25 Jan 2025 00:45:30 +0530 Subject: [PATCH] docs: Adds conflicts with Huntress EDR (#5454) * docs: Adds conflicts with Huntress EDR * Apply suggestions from code review Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> --------- Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> --- website/content/docs/api-clients/client-agent.mdx | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/website/content/docs/api-clients/client-agent.mdx b/website/content/docs/api-clients/client-agent.mdx index 2e7536549..60f51a9de 100644 --- a/website/content/docs/api-clients/client-agent.mdx +++ b/website/content/docs/api-clients/client-agent.mdx @@ -652,6 +652,17 @@ Learn more: https://cfl.re/CF_DNS_PROXY_FAILURE You can still install both the Cloudflare WARP client and the Boundary Client Agent on the same machine. As long as you don't run both at the same time, they should work as expected. +### Huntress EDR client + +Host isolation and release do not work as expected in Windows when you use the Huntress EDR client with the Boundary Client Agent. +The Huntress EDR client for Windows uses the Windows Filtering Platform (WFP) to isolate devices by blocking all non-essential traffic. This behavior conflicts with the Boundary Client Agent during device isolation. +Specifically, the Boundary Client Agent replaces the default DNS resolver with its own, which can prevent fallback to a secondary DNS when the primary (Boundary) DNS fails during isolation. +As a result, Huntress is unable to maintain server communication, leaving the device stuck in an isolated state. Huntress cannot isolate and release devices properly in Windows under these conditions. + +As a temporary workaround, you can manually configure a secondary DNS (e.g., 8.8.8.8). However, this secondary DNS setting is overwritten when you pause or resume the Boundary Client Agent, so you must configure it again each time. + +This issue does not affect macOS devices, where Boundary and Huntress coexist without additional configuration. + ## Uninstall the Client Agent on Mac If you used the Mac installer, you can run `/Library/Application Support/HashiCorp/Boundary Uninstaller.app` to uninstall Boundary.