Intel EMA and Dual Zoning / Homing

Sylvester — Thu, 03 Apr 2025 08:54:31 GMT

I have a scenario whereby my Intel EMA Server and my Swarm Server, which are both located in Azure, cannot simulataneously communicate with the SQL Database for security reasons.

I want to understand if it would be possible to dual zone / dual home the Intel EMA Server to allow connectivity both internally as well as externally. One NIC would be on a trusted network, and the other NIC will be on the untrusted network.

Re:Intel EMA and Dual Zoning / Homing

Arun_Intel1 — Thu, 24 Apr 2025 21:31:08 GMT

Hi Sylvester,

Greetings!

We see that you are looking for Dual Homing / Zoning for utilizing both Internal trusted and External Untrusted communication as well with two NIC's.

In your scenario, you are considering dual-homing the Intel Endpoint Management Assistant (EMA) server to allow it to communicate with both internal and external networks. Dual-homing involves configuring a server with two network interfaces (NICs), each connected to different networks, to facilitate communication across distinct network zones. Here’s how you can approach this setup:

Considerations for Dual-Homing Intel EMA Server:

Network Configuration:

Trusted Network NIC: Connect one NIC to the trusted internal network where the SQL database resides. This NIC will handle secure communications with internal resources.

Untrusted Network NIC: Connect the second NIC to the untrusted external network, which might be used for communication with the Swarm Server or other external services.

Security Implications:

Isolation: Ensure that the two networks are properly isolated to prevent unauthorized access from the untrusted network to the trusted network.

Firewall Rules: Implement strict firewall rules to control traffic between the two networks, allowing only necessary communications.

Access Control: Use access control lists (ACLs) and security policies to manage which services and ports are accessible on each NIC.

Routing and DNS:

Routing Configuration: Configure routing rules to ensure that traffic is correctly directed through the appropriate NIC based on the destination network.

DNS Settings: Ensure that DNS settings are configured to resolve internal and external addresses correctly, depending on the network interface.

Network Security:

VPN or Tunneling: Consider using VPNs or secure tunneling protocols to encrypt traffic between the EMA server and external services, enhancing security.

Monitoring: Implement network monitoring to detect and respond to any suspicious activity on either network interface.

Azure Configuration:

Azure Networking: Utilize Azure’s networking features, such as Network Security Groups (NSGs) and Virtual Network (VNet) configurations, to manage and secure traffic between the EMA server and other resources.

Subnets: Place each NIC in separate subnets to maintain clear separation between trusted and untrusted networks.

Steps to Implement Dual-Homing:

Provision Additional NIC:

In Azure, provision an additional NIC for the EMA server and attach it to the appropriate virtual network.

Configure Network Interfaces:

Assign IP addresses and configure network settings for each NIC according to the requirements of the trusted and untrusted networks.

Set Up Security Rules:

Define firewall rules and security policies to control traffic flow between the two networks, ensuring that only authorized communications occur.

Test Connectivity:

Test connectivity to ensure that the EMA server can communicate with both internal and external resources as intended.

Monitor and Maintain:

Continuously monitor network traffic and security logs to ensure the setup remains secure and functional.

By carefully configuring dual-homing for the Intel EMA server, you can achieve the desired connectivity while maintaining security across different network zones. If you encounter any challenges, consulting with network security experts or Azure support can provide additional guidance.

Please feel free to revert any further queries!

Best Regards

Arun

Intel Customer Support Technician

intel.com/vPro

Re:Intel EMA and Dual Zoning / Homing

Arun_Intel1 — Fri, 02 May 2025 23:01:38 GMT

Hi Sylvester,

Greetings!

Thank you for contacting Intel, please feel free to revert for any further query!

Thanks & Regards

Arun

Intel Customer Support Technician

topic Re:Intel EMA and Dual Zoning / Homing in Intel vPro® Platform

Intel EMA and Dual Zoning / Homing

Re:Intel EMA and Dual Zoning / Homing

Re:Intel EMA and Dual Zoning / Homing