About the Agents Screen | Trend Micro Service Central

Views:

The StellarOne console facilitates agent management by allowing you to organize agents into various groups and build up multi-level hierarchy among the groups (parent groups above child groups), forming an agent/group tree structure. On the Agents screen, you can deploy one-time commands to the selected groups and/or agents for performing immediate actions.

Click the Agents tab in the top navigation bar of the StellarOne web console. Click the All group on the Agents screen. The Agents screen displays a list of agents managed by StellarOne.

Note

All agents are under the All group by default.

Toolbar

Tools	Description
+Add Group	This tool allows you to create groups according to location, type, or purpose for better multi-agent management. See Add Groups for more details.
Organize	This tool allows you to edit description for agent(s), move agent(s) to another group, and remove agent(s)/group(s). See Edit Description for Agents and Organize Agents/Groups for more details.
Protection	This tool allows you to configure Maintenance Mode, update Approved List when the Application Lockdown feature is enabled, and customize file scan settings. See Configure Maintenance Mode, Update Approved List, and Scan Now for more details.
Update	This tool allows you to update components and deploy patches for agents, as well as check connections with endpoints, apply group/agent policies immediately, and collect event logs (Legacy Mode only). See Update Agent Components, Deploy Agent Patches, Check Connections, Apply Policies, and Collect Event Logs for more details.
Import/Export	This tool allows you to export an agent config file (Legacy Mode only) or Approved List (Legacy Mode only), and then import it to apply the settings specified in the config file or Approved List to a batch of target agents/groups. You can also export information about the selected or all agents. See Agent Export/Import Settings for more details.

Column Headings

Headings

Description

Name

: Indicates a group
: Indicates an agent and its connection status is Online

: Indicates an agent and its connection status is Offline

Note

The criteria of displaying Online and Offline status depend on how long the agent has been disconnected from StellarOne. By default, the agent will appear Offline after disconnected from StellarOne for more than 7 days. See Manage Agent Connection Status for more details.

IP Address

Displays the IP Address of the endpoint (one IP address corresponds to a single agent)

Protection

: Indicates the Application Lockdown is enabled
: Indicates the Real-Time Scan is enabled
: Indicates the agent is in maintenance mode
: Indicates a maintenance period has been scheduled but not started yet
: Indicates all the agent protection features are disabled and the endpoint may be vulnerable to security threats
: Indicates the protection provided by the agent has been fully disabled, which is triggered by the local user via the Stop protection button on the local console. The endpoint may be vulnerable to security threats.

Policy Inheritance

Inherited: Indicates the policy settings for the agent/group are inherited from its parent group
Customized: Indicates the policy settings for the agent/group are customized by administrators
Self-managed: Indicates the agent/group is free from the StellarOne web console's policy management and its feature settings should be configured on the local console
: Indicates the agent's feature settings synchronize with the StellarOne console policy settings
: Indicates the agent's feature settings do not synchronize with the StellarOne console policy settings

Operations Behavior Anomaly Detection

Displays the status of Operations Behavior Anomaly Detection:

Learn: Indicates the agent is collecting behavioral patterns from the monitored device to establish a baseline.
Detect: Indicates the agent is checking and should send alerts for any unexpected changes or security threats.
Enforce: Indicates the agent should take preventative actions on any anomalies detected.
Disable: Indicates the Operations Behavior Anomaly Detection is disabled.
: If the agent has not established a baseline yet but is set to the Detect or Enforce mode, it will learn first and automatically switch to the specified mode. The progress bar here indicateds how many days left for learning before entering the specified mode.
- : Indicates the agent version or license edition does not support Operations Behavior Anomaly Detection.

Component Status

Displays the component update status of the agent:

: Indicates the components installed on the agent have been updated within a specified duration
: Indicates the components installed on the agent have not been updated for more than a specified duration

Note

By default, the component satus will appear Out-of-date after 1 week. See Manage Agent Component Status for more details.

Approved List

Displays the total number of applications added in the Approved List. If the endpoint is creating its Approved List, a progress bar instead will appear.

Agent Version

Displays the firmware version of the agent

Last Connection

Displays the last time the agent was connected with StellarOne

Function Type

Displays two function types of StellarProtect:

StellarProtect: for devices with Windows 7 or later versions
StellarProtect (Legacy Mode): for devices with legacy platforms such as Windows XP/2000

Actions

Under this heading, you can:

click , the Policy icon, for linking to the General Info policy page.
click the three dots More actions menu, for organizing agents and renaming/removing groups. See Edit Description for Agents and Organize Agents/Groups for more details.

Other Tools

Tool	Description
Filter	This tool allows you to quickly find the agents/groups by sorting and searching. See Filter Options for Agents/Groups for more details.
Table Display Settings	This tool allows you to customize the table display settings by: going back and forth between the display pages selecting how many agents/groups to be displayed per page and specifying only certain contents to be displayed in the Customize Table Display setting
Agent Status Settings	This tool allows you to view or change current configuration for the agent status settings, which determines the associated agent status displayed on the Agents screen and the information displayed in the corresponding widgets on the Dashboard screen. Available options include: Manage Agent Connection Status: Specify the duration (by days) to determine whether the agents should be categorized as Online, Offline, or removed from StellarOne. See Manage Agent Connection Status for more details. Manage Agent Component Status: Specify the duration (by a day, week, or month) to determine whether the agent component update status should be categorized as Up-to-date or Out-of-date. See Manage Agent Component Status for more details. Refresh: Manually refreshing the agent status for the latest outputs