What this "Prefer Secure Gateway Connect" regkey under HKEY_LOCAL_MACHINE\SOFTWARE\Altiris\Communications does?
There is a setting which controls how a client machine in CEM mode should try connecting first - ‘Prefer Secure Gateway Connect’ in HKEY_LOCAL_MACHINE\SOFTWARE\Altiris\Communications.
Now when HTTP transport mechanism on the client machine receives some URL that it needs to connect to, the transport mechanism uses client machine’s information about last good server connection state.
Network Monitor logs a few events like "server up" and "server down" when some server’s connection state changes. All the network related events from lower level transport are logged on the trace level in the agent logs, there could be errors and successes because monitor’s ping can either fail or succeed.