Questions[endpoint](server)

I have an AKS (Azure Kubernetes cluster) that is on a VNET (Azure Virtual Network) that needs to connect to multiple On-prem hadoop machines to read/write data. I have a private DNS zone connected to VNET to resolve hostnames to IP - I tested with a couple of them and it works.

The problem is I have about 900 machines I need to connect and resolve them (These are present in my hosts file and I can read data when tested locally).

In Azure private DNS zone I need to add hostnames one by one manually. Is there an easy way to do this?

some endpoints are returning the content type as text/html while the expected is application/json causing CORS error in the client side. when requesting from my localhost or from the server's IP address, the data is returned as expected. which means that the problem occurs from cloudflare. i am using portzilla to route traffic on the domain name to the required port to access the server-side code. i tried specifying the content type header in portzilla, however, the same behaviour happened.

is any more information needed to provide better assistance?

all. Is there any chance that my public cluster endpoint on GKE will be replaced by other IP? I want to allow connections from my cluster to some service outside my cluster.

So back to the question: If we scaling the cluster nodes / playing with the master nodes / any other thing (which is not deleting the cluster) the endpoint ip will stay the same?

We have SEP 12.1 RU1 Small Business Edition and we're deploying to Windows 2008 R2 machines. It seems that SEP is disabling the native firewall. Has anyone seen this?

Specifically, The SEP Firewall policy on the management server does not have the "Enable this Firewall Policy" checkbox checked -- that is, the policy is disabled. I've pushed the client out to some of our servers and the client is modifying the native Windows firewall, Windows now shows that the native firewall is "Active", but it's also "managed by Symantec" and if you look at the list of active rules there are none. I've confirmed that the firewall is indeed not active by accessing the server on ports that should be blocked. I've also confirmed that I'm setting up the native firewall correctly by doing the same config on another server that doesn't yet have SEP and traffic gets blocked.

Has anyone configured SEP 12.1 SBE and left the native Windows firewall enabled? If so, how? And before you suggest I just enable the SEP firewall, I'd need a different policy for each server as there are different needs/services on each server so that just seems like a silly thing to do.

We have a Symantec Endpoint infrastructure in our organization. Also, the individual computers connect to the internet through a proxy server.

Now, for some reason, the Endpoint client is repeatedly messing up the proxy address setting in explorer. If, for example, the proxy is set to be "10.200.1.10", then after a reboot, or just some time, it's changing to "a&.200.1.10" or "a0.200.1.10", and the user can't surf the web, making for lots of small, annoying support tickets.

Anyone knows how to stop it from doing that?

Thanks!