Cyolo Connect - Troubleshooting & Helpful Information

User Connectivity Restricted

If a user's connectivity is restricted when they are signed into the Cyolo tenant, uncheck the Apply restrictions to signed-in users option in the device policy.

Browser Doesn't Open Automatically on Windows

If a captive portal is allowed, and the browser doesn’t open automatically on Windows devices, add www.msftncsi.com the allowed networks to the device policy file (see more details in the Microsoft documentation).

Cyolo Connect Device Policy File

The device policy resides in device_restrictions/policy.json, which is accessible only to administrators.

This file contains all of the necessary rules and exceptions for the Device Policies functionality.

It is stored in the directory where the Cyolo Connect Agent daemon runs, with different locations per operating system:
● Windows: C:\Program Data\Cyolo\Connect\device_restrictions\policy.json ● macOS: /Library/Application Support/cyolo/connect/device_restrictions/policy.json ● Linux: /usr/local/share/cyolo/connect/device_restrictions/policy.json

The file is retrieved from the IDAC at every policy poll. Polling occurs when a user first connects and every five minutes thereafter. This polling occurs whenever the user first connects and every five minutes thereafter. If the policy file is deleted or corrupted, the device policy is disabled. T

The policy is obtained via the following API: https://agents.[tenant-suffix]/v1/device_policies/me.

Here is an example of the file:

{
  "network_indicator":null,
  "when_indicator_available":null,
  "when_indicator_unavailable":
  {
    "allowed_networks":["website.com","192.168.5.10"],
    "apply_kill_switch_when_connected":false,
    "connectivity_mode":"restricted"
  },
  "allow_captive_portal":false
}