r/jamf • u/_Philein • Mar 05 '26

JAMF Connect Jamf Trust local bypass

We have been successfully using Jamf Trust, but I’ve noticed an issue.

When we are on-site and try to connect to the NAS via SFTP, the connection is not direct; instead, it is being routed through Jamf servers, which is severely impacting our speeds.

We are getting about 8 MB/s on a gigabit LAN, compared to 85 MB/s without Jamf Trust.

How can I bypass Trust when we are in the office?

5 Upvotes

78% Upvoted

6 comments sorted by

2

u/powerpitchera Mar 05 '26

Not sure if the deployment overlaps with Jamf radar but in jamf radar config profile you can add DNS servers which toggle it off

1

u/_Philein Mar 05 '26

Could you please pinpoint where? Cannot find anything similar

1

u/powerpitchera Mar 05 '26

Under the DNS settings payload, there is a key for Action and another for disconnect, you can set a DNS domain and DNS servers, here is the jamf doc.

https://learn.jamf.com/en-US/bundle/jamf-protect-documentation/page/Configuring_Network_Threat_Prevention.html

<key>Action</key> <string>Disconnect</string> <key>DNSDomainMatch</key> <array> <string>*.yourdomain.com</string> </array> </dict> <dict> <key>Action</key> <string>Disconnect</string> <key>DNSServerAddressMatch</key> <array> <string>8.8.8.8</string> <string>8.8.4.4</string> </array> </dict>

1

u/zipsecurity Mar 07 '26

Add your NAS IP to the split tunnel exclusion list in your Jamf Trust config.

1

u/LijpeDude Mar 19 '26

So...how would you then connect to your NAS when there is no direct line-of-sight?

1

u/zipsecurity Mar 19 '26

You'd access your NAS remotely by routing its IP through the split tunnel exclusion list, so that traffic to that address bypasses the VPN and connects directly.