search

netbirdio / netbird

Connect your devices into a single secure private WireGuard®-based mesh network with SSO/MFA and simple access controls.
https://netbird.io
BSD 3-Clause "New" or "Revised" License
9.79k stars 424 forks source link

Assign Posture Check for a specific peer #2210

Open papoe opened 3 days ago

papoe commented 3 days ago

Currently, it is only possible to assign a posture check to both peers in a policy configuration. For example, if you configure a "Process Posture Check," both peers need to run the same process. Therefore, you cannot set up a policy where, for example, Peer A runs a process and Peer B only sends sensor data to Peer A for this process.

There should be the possibility to assign posture checks to specific peers, instead of requiring both peers to fulfill the posture check.

bcmmbaga commented 3 days ago

Hello @papoe , Currently, the posture checks are only applied to the peers of the policy source group. We will update the docs and dashboard to make this clear.

For example, you could create a policy with peer B (as part of the source group) and peer A (as part of the destination group) and apply the posture check. This will only require peer B to fulfill the check requirement before connecting to peer A.