Created a CEM Off-Line install package and installed it on a non-company workstation not joined to our domain. Agent install starts but does not finish.
Wireshark traces show it was unable to resolve the gateway server.
In this case, the workstation where the CEM installation did not complete was on a second domain within the organization, and it was not able to resolve the hostname of the gateway server shown in the CEM policy.
Updated the DNS settings to allow name resolution