How long a bay may go without posting an enforcement report before the fleet view calls it stale.
Default 30. A bay enforces on its own cycle, so set this above the cycle length or every bay reads as stale between runs.
Fleet PCs on a trusted network can reach the GE-Enforce client endpoints
(manifest, payload, report) without a per-PC token. List the trusted
networks below. Leave it empty to require a geenforce.fetch
token instead.
192.0.2.0/24, 198.51.100.0/26. A caller from any of these
networks may pull manifests + payloads and post reports with no token.