The HPE Networking SSE Agent Always On feature lets administrators enforce a policy that prevents users from pausing or quitting the HPE Networking SSE Agent, or logging out of the Agent UI, which helps ensure continuous enforcement of security controls.

Example use cases:

• Continuous Zero Trust Network Access (ZTNA) enforcement.
• Continuous Secure Web Gateway (SWG) policy enforcement.
• Continuous device connectivity and posture monitoring.
• Compliance requirements for persistent agent presence.

Functional Overview

The HPE Networking SSE Agent Always On feature is configured in the management console as a tenant-wide "on" or "off" setting, including and exceptions list of user or user groups.

The effective behavior for a user is determined by the combination of the tenant-wide setting and whether the user is included in the exceptions list.

Prerequisites

Ensure that the following conditions are met:

• Permissions—you must have access the configure Agent Settings in the management console.
• Version—ensure that you agent is running version 3.103.0 or higher, in order to view the Agent Always On status per enrolled agent. Older versions may show Not Reported until the agent supports the status update.

  📘

  Notes:

  • User Groups from 3rd party IDP, Identity groups and tags are not yet supported in the exception list option.
  • If the Agent Always On option is not visible in Agent Settings, use the tenant Apply Changes to Commit Changes. If this doesn't resolve this please contact Axis Support/your Axis representative.