Views:

Configure inactive agent removal, bandwidth throttling, and proxy settings that apply to all your deployed agents.

Sensor Settings Parent topic

Section
Setting
Description
Inactive Endpoint Removal Settings
Note
Note
Inactive agent removal occurs daily beginning at 00:00 (UTC + 08:00).
Automatically remove inactive Endpoint Sensor endpoints
Define the number of days that a Sensor only agent must remain disconnected from the system before automatically removing the endpoint entry from the inventory
Important
Important
Removing the endpoint from the inventory list does not uninstall the agent program or disable any features. To restore an endpoint to the inventory, you must manually uninstall and then reinstall the agent program.
Automatically remove inactive non-persistent virtual desktop Endpoint Sensor endpoints
Define the number of days that a Sensor only agent must remain disconnected from the system before automatically removing the endpoint entry from the inventory
Inactive endpoint removal settings only apply to Sensor only agents. To configure inactive agent removal for other agent types, refer to the following:
Sensor Download Bandwidth
Apply bandwidth throttling when downloading Endpoint Sensor components
Set a bandwidth limit to ensure that endpoints upgrades and component downloads do not slow your network
Note
Note
Only supported on Windows and macOS platforms.
The following table provides estimated bandwidth throttling settings to update all your endpoints within seven days using a 300 Mbps connection. The settings also affect agent deployment and configuration changes. You can adjust the settings to accelerate the speed based on your network bandwidth.

Throttling Considerations

Endpoint Count
Max Concurrent Agent Downloads
1,000
10
5,000
50
10,000
100
25,000
250
50,000
500
100,000
1000
150,000
1500
200,000
2000

Proxy Settings Parent topic

Configure proxies to allow all of your endpoints to connect to your managed services. Endpoints prioritize proxy servers connections based on the following order:
  1. Service Gateway appliances with the Forward proxy service enabled
  2. Primary custom proxy
  3. Default system proxy
If you have configured the Forward proxy service on any Service Gateway appliance, your endpoints automatically leverage this service to connect to Endpoint Security. If you do not have a Service Gateway installed or the Service Gateway is unavailable for any reason, endpoints attempt to connect to the configured custom proxy server or default system proxy. If no proxy server is available, endpoints attempt a direct connection with Endpoint Security.

Procedure

  1. Go to Endpoint Security → Endpoint Inventory → Settings global-settings.png → Global Settings.
  2. Click Proxy Settings.
  3. Check if you have an available Service Gateway by verifying that Forward proxy enabled appears next to Service Gateway above the table.
    If you do not have a Service Gateway with the Forward proxy service available, you can deploy a Service Gateway appliance. If you do have a Service Gateway available, click the link to directly access the Service Gateway Management app.
  4. If you do not use a Service Gateway, or want to configure a primary custom proxy or default system proxy settings:
    1. Locate the Protection Manager or Endpoint Group Manager that manages the target endpoints that the proxy settings are for, and click the Proxy Setting Configuration (proxyconfigicon.jpg) icon.
      Note
      Note
      If you have recently created a new Protection Manager or Endpoint Group Manager instance, you may need to wait until the provisioning process completes before the new instance appears in the list.
    2. For the primary custom proxy, specify the IP address or FQDN, port, and authentication credentials (if required).
    3. For the default system proxy, specify the authentication credentials if required.
      The default system proxy settings are specific for each agent type.
      Note
      Note
      Default system proxy settings are not supported on Linux platforms.
      • Standard Endpoint Protection default system proxy: Defined by your IAM policies, Windows, or macOS policies
      • Endpoint only default system proxy: Defined by your IAM policies
    4. Click Save.
      Note
      Note
      Agents receive the updated proxy settings after connecting to their managing Endpoint Group Manager. Configured proxy settings are automatically added to the installation packages for new agent deployments.