Configuring Agent Privileges

Independent Mode

Enable Independent mode: Allows users to disable the following features on the Security Agent to prevent the Security Agent from adversely affecting system performance:

• The Security Agent does not accept policy settings from the server

• The Security Agent does not initiate scan commands from the server

• The Security Agent does not send logs to the server

End users can manually initiate scans and updates on agents in Independent mode.

Scans

• Configure Manual Scan: Allows users to configure the Manual Scan settings on the Security Agent console

• Configure Real-time Scan: Allows users to configure the Real-time Scan settings on the Security Agent console

• Configure Scheduled Scan: Allows users to configure the Scheduled Scan settings on the Security Agent console

Scheduled Scans

• Postpone Scheduled Scan: Allows users to postpone a Scheduled Scan before the scan starts or stop a currently running scan for a specified period

  Note:

  Users can only stop a running scan once. Once the scan restarts, the Security Agent rescans all files on the endpoint.

• Skip and stop Scheduled Scan: Allows users to skip or stop a running Scheduled Scan one time

  Note:

  Users cannot skip or stop a Scheduled Scan more than one time. Even after a system restart, Scheduled Scan resumes scanning based on the next scheduled time.

Firewall

• Display the Firewall settings on the Security Agent console: Allows users to configure the Firewall settings on the Security Agent console

  • Allow users to enable/disable the firewall, Intrusion Detection System, and the firewall violation notification message: Displays the Enable/Disable Firewall and Enable/Disable IDS Mode menu options on the Security Agent system tray icon

    Note:

    The Apex One Firewall protects agents and servers on the network using stateful inspection, high performance network virus scanning, and elimination. If you grant users the privilege to enable or disable the firewall and its features, warn them not to disable the firewall for an extended period of time to avoid exposing the endpoint to intrusions and hacker attacks.

• Allow Security Agents to send firewall logs to the Apex One server: Configures the Security Agent to send Firewall logs to the server, allowing you to analyze network traffic

Behavior Monitoring

Display the Behavior Monitoring settings on the Security Agent console: Allows users to configure the Behavior Monitoring settings on the Security Agent console

Trusted Program List

Display the Trusted Program List on the Security Agent console: Allows users to configure the Trusted Program List on the Security Agent console

Mail Scan

Display the Mail Scan settings on the Security Agent console: Allows users to configure the Mail Scan settings on the Security Agent console

If enabled, Real-time Scan can detect and take action on POP3 email messages retrieved from the mail server that contain malicious threats.

Proxy Settings

Allow users to configure proxy settings: Allows users to use user-configured proxy settings only in the following instances:

• When Security Agents perform "Update Now".

• When users disable, or the Security Agent cannot detect, automatic proxy settings.

Component Updates

• Perform "Update Now": Displays the Update Now menu option on the Security Agent system tray icon

• Enable/Disable schedule-based updates: Displays the Enable/Disable Schedule-based Updates menu option on the Security Agent system tray icon

  Note:

  Administrators must first select the Enable schedule-based updates on Security Agents setting on the Other Settings tab before the menu item appears on the Security Agent menu.

Unload and Unlock

The Security Agent unloading and unlocking privilege allows users to temporarily stop the Security Agent or gain access to advanced web console features with or without a password.

• Does not require a password

• Requires a password: Type the required password and confirmation password

Uninstallation

The Security Agent uninstallation privilege allows users to uninstall the Security Agent program on local endpoints.

• Does not require a password

• Requires a password: Type the required password and confirmation password