Update windows/client-management/mdm/policy-csp-networklistmanager.md

Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com>
This commit is contained in:
Nimisha Satapathy 2021-12-10 11:04:29 +05:30 committed by GitHub
parent a7fe5dc514
commit 1a41dd2059
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -61,7 +61,7 @@ manager: dansimp
This policy setting provides the list of URLs (separated by Unicode character 0xF000) to endpoints accessible only within an enterprise's network. If any of the URLs can be resolved over HTTPS, the network would be considered authenticated. This policy setting provides the list of URLs (separated by Unicode character 0xF000) to endpoints accessible only within an enterprise's network. If any of the URLs can be resolved over HTTPS, the network would be considered authenticated.
When entering a list of TLS Endpoints in MEM (Microsoft Endpoint Management), you must follow this format even in the UI: When entering a list of TLS Endpoints in MEM (Microsoft Endpoint Management), you must follow this format even in the UI:
```<![CDATA[https://nls.corp.contoso.com&#xF000;https://nls.corp.fabricam.com]]>``` ```<![CDATA[https://nls.corp.contoso.com&#xF000;https://nls.corp.fabricam.com]]>```
- The HTTPS endpoint must not have any additional authentication checks such as login or multi-factor authentication. - The HTTPS endpoint must not have any additional authentication checks, such as login or multifactor authentication.
- The HTTPS endpoint must be an internal address not accessible from outside the corporate network. - The HTTPS endpoint must be an internal address not accessible from outside the corporate network.
- The client must trust the server certificate, so the CA cert the HTTPS server cert chains to must be present in the client machines root certificate store. - The client must trust the server certificate, so the CA cert the HTTPS server cert chains to must be present in the client machines root certificate store.
- A certificate should not be a public certificate. - A certificate should not be a public certificate.