Resolved! Agent 702 on Server 2003?
This is embarrassing, but part of the mess I inherited were four Win2003 boxes still in production. They are currently using the old on-prem endpoint security manager setup and agent 3.4.3.
Until I get get rid of these liabilities, at the very least
...