An endpoint agent for Windows, macOS, Linux, iOS, and Android that establishes remote-access VPN tunnels to a gateway and enforces the connection policy pushed down from that gateway. Beyond the tunnel itself, it is a modular container: optional modules add endpoint posture assessment, wired and wireless 802.1X supplicant behaviour, DNS-layer protection, network flow telemetry export, and diagnostic log collection. Administrators configure it through profiles distributed from the headend rather than on each device.
