Views:

The StellarOne console facilitates agent management by allowing you to organize agents into various groups and build up multi-level hierarchy among the groups (parent groups above child groups), forming an agent/group tree structure. You can execute one-time commands to the selected groups and/or to specific agents.

Click the Agents tab in the top navigation bar of the StellarOne web console. Click the All group on the Agents screen. The Agents screen displays a list of agents managed by StellarOne and enables you to perform configuration tasks, which are one-time commands for triggering immediate actions.

Note:

All agents are under the All group by default.

Table 1. Toolbar

Tools

Description

+Add Group

This tool allows you to create groups according to location, type, or purpose for better multi-agent management. See Add Groups for more details.

Organize

This tool allows you to edit description for agent(s), move agent(s) to another group, and remove agent(s)/group(s). See Edit Description for Agents and Organize Agents/Groups for more details.

Protection

This tool allows you to configure Maintenance Mode, update Approved List when the Application Lockdown feature is enabled, and customize file scan settings. See Configure Maintenance Mode, Update Approved List, and Scan Now for more details.

Update

This tool allows you to update components and deploy patches for agents, as well as check connections with endpoints, apply group/agent policies immediately, and collect event logs (Legacy Mode only). See Update Agent Components, Deploy Agent Patches, Check Connections, Apply Policies, and Collect Event Logs for more details.

Import/Export

This tool allows you to export an agent config file (Legacy Mode only) or Approved List (Legacy Mode only), and then import it to apply the settings specified in the config file or Approved List to a batch of target agents/groups. You can also export information about the selected or all agents. See Agent Export/Import Settings for more details.
Table 2. Column Headings

Headings

Description

Name

  • : Indicates an agent

  • : Indicates a group

IP Address

Displays the IP Address of the endpoint (one IP address corresponds to a single agent)

Protection

  • : Indicates the Application Lockdown is enabled

  • : Indicates the agent protection feature is enabled

  • : Indicates the agent is in maintenance mode

  • : Indicates a maintenance period has been scheduled but not started yet

  • : Indicates the agent protection feature is disabled and the endpoint may be vulnerable to security threats

Policy Inheritance

  • Inherited: Indicates the policy settings for the agent/group are inherited from its parent group

  • Customized: Indicates the policy settings for the agent/group are customized by administrators

  • Self-managed: Indicates the agent/group is free from the StellarOne web console's policy management and its feature settings should be configured on the local console

  • : Indicates the agent's feature settings synchronize with the StellarOne console policy settings

  • : Indicates the agent's feature settings do not synchronize with the StellarOne console policy settings

  • : Indicates the agent/group is free from the StellarOne web console's policy management and its feature settings should be configured on the local console

Operations Behavior Anomaly Detection
Displays the status of Operations Behavior Anomaly Detection:

  • Learn: Indicates the agent is collecting behavioral patterns from the monitored device to establish a baseline.

  • Detect: Indicates the agent is checking and should send alerts for any unexpected changes or security threats.

  • Enforce: Indicates the agent should take preventative actions on any anomalies detected.

  • Disable: Indicates the Operations Behavior Anomaly Detection is disabled.

  • : If the agent has not established a baseline yet but is set to the Detect or Enforce mode, it will learn first and automatically switch to the specified mode. The progress bar here indicateds how many days left for learning before entering the specified mode.

  • - : Indicates the agent version or license edition does not support Operations Behavior Anomaly Detection.

Approved List

Displays the total number of applications added in the Approved List. If the endpoint is creating its Approved List, a progress bar instead will appear.

Agent Version

Displays the firmware version of the agent

Last Connection

Displays the last time the agent was connected with the StellarOne console

Function Type
Displays two function types of StellarProtect:

  • StellarProtect: for devices with Windows 7 or later versions

  • StellarProtect (Legacy Mode): for devices with legacy platforms such as Windows XP/2000

Actions
Under this heading, you can:
Table 3. Other Tools

Tools

Description

Filter

: This tool allows you to quickly find the agents/groups by sorting and searching. See Filter Options for Agents/Groups for more details.

Table Display Settings
: This tool allows you to customize the table display settings by:

  • going back and forth between the display pages

  • selecting how many agents/groups to be displayed per page and specifying only certain contents to be displayed in the Customize Table Display setting

  • manually refreshing the table for the latest outputs
Parent topic: Agents Management