To ensure that contained hosts on a VPN connection continue to communicate with the Endpoint Security (HX), add the IP address for your VPN to the containment whitelist. If the VPN IP address is not whitelisted, Endpoint Security (HX) requests, including containment cancellation requests, do not reach the host endpoint because the VPN connection is disrupted after containment occurs. See Maintaining the contained host allow list.
Note
Trellix recommends HX or DMZ reachability without the use of a VPN or Proxy.