VMware Workspace ONE Community
dfollis
Enthusiast
Enthusiast

Boxer "Device not compliant"

Today we started seeing issues on the devices with Boxer installed.  Appeared to impact 5.22.1 and 5.23 builds.  Our SEG was running an older build of 2.0.9.  Symptom was people would receive an alert that their device was not compliant with DeviceResponseStatus of 403 in the SEG logs which we dump to Splunk.

We updated our SEG to 2.16 and rebooted.  Devices using the native client work fine without issue, but the 10 or so devices we have with Boxer installed stop being able to send/receive email.  One odd thing we've noticed is that if we restart the SEG service Boxer clients will work for a few minutes and then start to timeout again.

These devices seems to show a message relating to "Device not compliant."  We have attempted to disable the compliance policy but the issue persists.

Native clients are communicating without interruption.  Only Boxer enabled (Android and iOS) are impacted.  Some of the client combinations that are impacted:

BoxerManagedAndroidAirWatch Boxer (SM-G960U; Android 10) Version 5.23.0.1/2313
BoxerManagedAndroidAirWatch Boxer (SM-J700T; Android 7.1.1) Version 5.23.0.1/2313
BoxerManagedAndroidAirWatch Boxer (moto x4; Android 9) Version 5.23.0.1/2313
BoxerManagediPhoneAirWatch Boxer (Apple iPhone; iOS 14.2) Version 5.23.0/6692

 

We have a ticket open but wondering if anyone else has seen this.

Labels (1)
Tags (2)
0 Kudos
1 Reply
dfollis
Enthusiast
Enthusiast

VMWare confirmed this is a Boxer bug.

 

Devices being blocked because inactivity is a known issue affecting console version 2010 when Inactivity Email Compliance Policy is enabled.

Work around:
- Turn off the Compliance Policy for Inactivity on Email >> Compliance Policies

Please note: Devices should change status from blocked to allowed, it might take several minutes to allow again the devices.
- If you whitelisted connections as a work around you can revert that by Override them to Default. If device is compliant its connection will be allowed.

For the inactivity compliance policy:

Instead of enabled inactivity compliance policy on Email >> Compliance Policies, we encourage you to enable Device Last Seen on Devices >> Compliance Policies >>

0 Kudos