Cannot install the WSS Agent on Windows 10 LTSC or LTSB

Products

• Cloud Secure Web Gateway - Cloud SWG

Issue/Introduction

As an administrator, I would like to install the WSS Agent on the Windows LTSC/LTSB version but received an error.

Windows 10 LTSC stands for Long Term Servicing Channel. Microsoft created this deployment model to support IoT devices that cannot adapt to the "Windows-as-a-service" update model. Microsoft has clearly stated that it should not be installed on general-use end-user devices. These versions of Windows were intended to be used for purpose-built devices - such as POS systems and ATMs.

Environment

• Cloud Secure Web Gateway
• WSS Agent
• Symantec Endpoint Protection with Network Traffic Redirection Tunnel mode

Resolution

The WSS Agent or SEP NTR (tunnel mode) are not supported when using Windows LTSC. The WSS Agent or SEP installer will not allow the installation because the necessary APIs are not present on LTSC/LTSB.

• See Install the WSS Agent Application: Technical Requirements
• See Configuring Web and Cloud Access Protection: Technical requirements and limitations
  
  

The restriction is due to the fact that LTSC does not contain the appropriate APIs for WSS Agents to function accordingly, therefore, The agent cannot hook into OS components to do things such as:

• Making CTC Requests.
• Resolving the proxy/PAC file.
• Using the system crypto libraries for HTTPS communication, and
• Network change detection.
  
  

To continue protecting these endpoints running Windows LTSC and If the traffic is coming from a Static IP. It is recommended  to use the following access method to WSS:

• VPN Pre-Shared Key with Static IP
• Explicit Over IPsec
• About Explicit Proxy
  
  

See Connectivity: Fixed Location Methods for more information.