4.10.2 Agent Settings

4.10.2 Agent Settings

The Agent Settings tab allows users to configure how Vulndetect agents are deployed and how inspections are scheduled.

Agent download 

Provides access to the installer.
You can download the Agent installer in two ways: 
  1. Use Agent download to download the Agent MSI installer 
  2. Use PatchPro for Intune to integrate the Agent for easier install for Hosts 

The MSI installer lets you deploy the agent to multiple systems. It works with nearly any distribution tool, including PowerShell scripts.
Alert
IMPORTANT: 
The MSI Installer was designed to be run using MSIEXEC or via other software distribution tools in an elevated context(admin) without any user interaction. 
The EXE installer is no longer available 

Agent deployment (MSI installer) 

Use the following command if you want to deploy the agent silently to other hosts: 
msiexec.exe /i secteerSetup.msi /qn 
Once installed, the agent runs silently in the background and starts reporting back to the SecTeer VulnDetect console. 

  1. You can also specify the group to install the agent to by wrapping the arguments around the MSI installer. Example: msiexec.exe /i secteerSetup.msi /qn WRAPPED_ARGUMENTS="/options=group=groupname" 
  2. Furthermore, you can also specify which tags the agent should get when it enters VulnDetect, also by wrapping the arguments. Example: msiexec.exe /i secteerSetup.msi /qn WRAPPED_ARGUMENTS="/options=tags=tagname" 
  3. Wrapped arguments can be used for both groups and tags at the same time, as well as multiple tags if needed. Example: msiexec.exe /i secteerSetup.msi /qn WRAPPED_ARGUMENTS="/options=group=groupname;tags=tagname1,tagname2" 
  4. Both groups and tags can be created this way as well, if there isn’t already an existing group or tag by the names specified in the wrapped arguments. Also note that the wrapped arguments are case-insensitive. 
  5. If the group or tag name has spaces in it, then it needs to be quoted, and those quotes need to be escaped with another quote. The format in this case is: WRAPPED_ARGUMENTS="/options=group=""group name with spaces"""

(note the sequence of one double quote, then two, then three at the end) 
Please also refer to Deploying the MSI Installer for Sites. 

Alert
IMPORTANT:
The Agent MSI Installer is keyed to a site and cannot be used to install agents for other sites. The MSI Installer is not enabled by default on newly created sites. To enable them, contact SecTeer’s support team. 

Inspect & Update Schedule 

This Tab defines when agents perform inspection and update operations. 
Users can configure: 
  1. Inspection days 
  2. Inspection hours 
It is important that you specify Days of week to run inspections and updates and Hour of day to run inspections and updates where the hosts are most likely to be online. 
Hosts that are consistently offline during this time period, will not be inspected or updated 
The more restrictive the schedule is, the greater the risk that some hosts will rarely be inspected and updated. 

Setting Inspection Days 

The Days of week to run inspection and updates is a list of specific days the agent will be actively inspecting the Hosts.
  1. Select one or more days to specify when Agent should run its Inspection and updates scan. 

Setting Inspection Hours 

The Hour of day to run inspections and updates designates the starting time of the inspection. 

Alert
IMPORTANT: 
  1. Actual inspections are randomly distributed over an interval of up to 10 hours, starting at the selected time. 
  2. The Inspection time for each agent is set randomly during the first 7.5 hours. 
  3. The Final 2.5 hours is used as a buffer for agents that weren’t online at the time when they were scheduled to be inspected. 
We recommend that the Hour of day to run inspections and updates is set close to the most common start of the work hours for the particular group or entire company.