Agent Information

You can check the details about agent including IP address, user, operating system, virtual environment, etc, application status of policies delivered from the server, asset information, and shared folder.

Note Note

Click the IP address or computer name from the agent list of Agent Status to move to the screen of agent details.

Agent Information

You can view the details about an EPP agent and APM agent. You can check the information about server connection status of an EPP agent, integrity check result, and policy status, and details about patch installation rate, required/prohibited software installation status, agent version, and license expiry date. You can also send a management command to the selected agent.

Send Management Command

You can send a command to the selected agent using Send Management Command or collect the information from the agent.

Agent Information

You can check the details about agent, user, operating system, virtual system, detected malware or suspicious behavior from the screen of agent details.

Agent: You can view the details about an agent.
Agent ID: IP address assigned to an agent.
Computer Name: Name of a computer where Windows system information is configured.
Agent IP Address: IP address of an agent connected to the server. If an agent has more than two IP addresses, the IP address connected to the server is displayed.
Windows Task Group Task group which is configured in the Windows system information.
Last Connection Time: The last time when an agent last logged in.
Logged in User The currently logging in user.
AhnLab EPP Management Agent Version: Version of AhnLab EPP Management Agent.
AhnLab EPP Management Agent Installation Date: Installed date of AhnLab EPP Management Agent.

User: User information of the PC where an agent is installed.
User Name: User name of the computer where an agent is installed.
Department: Department of a PC user, where an agent is installed.
Phone: Phone number of a PC user, where an agent is installed.
E-Mail: Mail address of a PC user, where an agent is installed.
Employee No.: Employee number of a PC user, where an agent is installed.
Modification by Admin: Indicates the modification status of agent user information. If an administrator modifies the information, the status is shown as Modified, if not modified, Not modified.

Operating System: Shows the information about the operating system installed in an agent.
Name: Shows the information about the operating system. ex) Microsoft Windows 7 Enterprise K
Type: Indicates the details about the operating system. Shows the type of operating system and service pack. ex) Microsoft Windows 7 Enterprise K Service Pack 1 64-bit
Platform: Shows the platform of operating system. ex) Windows NT
Product ID: Shows the product ID of operating system. You can check the product ID in the control panel of operating system.

Note Note

If the product ID is Windows 7, click Control Panel > System and Security > System to display the product ID in Windows genuine product certification at the bottom of the screen.

Version: Shows the version information about the operating system. You can check the current operating system by entering winver from the Start menu for Windows 7. ex) 6.1
Installed Date: Indicates the installed date of the operating system.

Virtualization System Type User information of the virtual system where an agent is installed.
Virtual Environment: Indicates the virtual environment is enabled or disabled in the system where an agent is installed. If the virtual environment is used, the status is shown as enabled, if not used, the status is shown as disabled.
Host OS ID: Indicates an identifier of host OS collected from the virtual system management server. The data format can vary depending on a virtual system.

Summary

Shows the status of EPP agent and APM agent.

EPP Agent Status

Shows the status of EPP agent.

Connection Status: Connection Status: Shows the connection result to the server of an agent.
Connected (): The agent is connected to the server.
Not Connected (): The agent is not connected to the server.
Distribution Status Indicates the V3 policies are applied to an agent. The application status of policy is as following; distributed (), distributing (), failed.
Integrity Check Result: Displays the integrity check result for an agent file.
Normal: Indicates an agent file is found normal during integrity check.
Corrupted: Indicates an agent file is found corrupted during integrity check.
Unknown: Indicates an agent file is found unknown during integrity check.

AhnLab EPP Management Agent Version: Indicates the version of AhnLab EPP Management Agent.

APM Agent Status

Shows the status of APM agent.

Patch Installation Rate: Indicates the installation rate of patch.
Required: Displays the installed patches out of total required patches in percentage. ex) Required 90%
Total: Displays the currently installed patches out of total patches to be installed in percentage. ex) Total 94%
AhnLab Patch Management Agent Version: Displays the version of AhnLab Patch Management Agent. ex) 5.0.0.3 (184)
Expiration Date: Displays the expiration date of AhnLab Patch Management Agent. ex) ~2018-10-31 00:00:00
Required Software Installed: Displays the currently installed required software programs out of total required software programs to be installed in percentage.
Prohibited Software Installed: Displays the currently installed prohibited software programs out of total prohibited software programs in percentage.

Agent Status

Displays the status of patches in the APM agent. You can select the period option; last 24 hours, last 30 days 30.

Recommended Patch Installation Rate: Displays the installation rate of recommended patches by date, out of all recommended patches to be installed.
All Patch Installation Rate: Displays the currently installed patches out of total patches to be installed.

Policy

You can check the status of EPP agent and APM agent, and distribution status of individual policy, and also can change the policies.

Policy Type: Shows the types of policies.
EPP Agent Policy: Policies to manage an agent.
APM Agent Policy: Policies to manage an APM agent.
Patch Policy: Policies o apply patches to an agent.
Process Termination Policy: Manages processes to block. You can register a name of process, which is known to be run by malicious code, or processes prohibited to run in a company in process termination.
Software Management Policy: Policies for the required/prohibited software installation.
Policy Name: Displays the name of policy entered when creating a policy.
Distribution Status Displays the distribution status of a policy. The application status of policy is as following; distributed, distributing, failed, uninstalled.
Individual Policy: Shows the status of individual policy. If an individual policy is enabled, the status is shown as enabled.
Policy Change: You can change the currently configured policies. Click [Change Policy] to change the details of policy and then click OK.

Asset Information

Software

Displays the changes about added/deleted software and detailed software information.

Last Update Time: Indicates the update date of software status. ex) 3/13/2018 4:41:24 AM
Software Change History: Displays the changes about added/deleted software. You can select the period option; last 24 hours, last 30 days 30.
Software added: Displays the added software in an agent. Hover the cursor over the icon to display the number of software programs and names added on the required date with a tool tip. ex) Installed Software: 1 / AhnLab EPP Agent
Software deleted: Displays the deleted software in an agent. Hover the cursor over the icon to display the number of software programs and names deleted on the required date with a tool tip.

Note Note

You can check Software Change History only when a super administrator logs in.

Installed Software: Software installed in an agent.
Export: You can export the installed software information using the export feature in csv, xlsx, or pdf.
Install: Displays as installed/uninstalled depending on the software installation status.
Type: Displays a software type. For a required software, it is displayed as required, for a prohibited software, it is displayed as prohibited, and for not recognizable to be required or prohibited, it is displayed as not applicable.
Software Name: Shows the name of software. ex) Notepad++ (64-bit x64)
Publisher: Displays the publisher of the software. ex) AhnLab, Inc.
Version: Shows the software version. ex) 4.0.2.42
File Size: Shows the software size.
Installation Date: Shows the date when a software was installed.

Hardware

Displays the changes about added/deleted hardware and detailed hardware information.

Last Update Time: Indicates the update date of hardware status. ex) 3/13/2018 4:41:24 AM
Hardware Change History: Displays the changes about added/deleted hardware. You can select the period option; last 24 hours, last 30 days 30.
Hardware added: Displays the added hardware in an agent. Hover the cursor over the icon to display the number of hardware devices and names installed on the required date with a tool tip.
Hardware deleted: Displays the deleted hardware in an agent. Hover the cursor over the icon to display the number of hardware devices and names deleted on the required date with a tool tip.
Hardware Status: Hardware installed in an agent. The table shows categories by hardware type and the details shows the detailed information by hardware device type.
Export: You can export the installed hardware information using the export feature in csv, xlsx, or pdf.
CPU: You can check the name, speed and version of CPU in details. ex) Intel(R) Core(TM) i7-6700 CPU @ 3.40GHz / 3.40GHz / Intel64 Family 6 Model 94 Stepping 3
Memory: You can check the actual memory size (MB) and virtual memory size (MB). ex) 8/15.765
BIOS: You can check the firmware date, name, manufacturer, and F22 version of BIOS. ex) 2016-11-01 / Default System BIOS / HP / N01 Ver. 02.17
Display: You can check the monitor resolution (pixel), graphic card type/chipset/memory size (MB). ex) 1280 x 1024 / Intel(R) HD Graphics Family / Intel(R) HD Graphics 530 / 1024
Harddisk (HDD): You can check the available space/total size of NTFS file system. ex) 461.979/540.379MB
Network You can check the host name, Internet explorer version, NIC information, and Windows version. ex) user3-PC / 11.0.9600.18920 (KB4074736) / 70-5a-0f-4d-19-1b

Shared Folder

You can view the details about shared folders in an agent.

Type: Shows the sharing types. The types of sharing are system share and general share. The types of print share, device share, or IPC shared that the Windows provides in default for the management purpose, are known as system share. General share indicates the user defines the disk drive or folder for a shared folder.
Name: Name of shared folder. ex) IPC$, C$
Path: Location of shared folder or file.
Permission: Permission for the shared folder. Permission types are categorized as read, read (password configured), read/write, read/write (password configured), and management purpose.
Read/Write: The shared folder where read and write permissions, which allows reading the folder and changing the content are configured. If the write permission is assigned, high probability of infection by malicious code exists.
Information Update Time: Indicates the last time when the shared folder was updated.

Patch Status

You can view the patch status distributed to an agent.

APM Agent Status: Shows the APM agent status and agent status is as following; normal or unknown.
Patch Installation Rate (All | Recommended): Shows the rate of total patches and recommended patches.
Total: Shows he total number of patches.
Installed: Shows the number of installed patches.
Installing: Shows the number of patches under installation.
Not Installed: Shows the number of uninstalled patches.

Patch Type: The patch types categorized by AST server. Patch types are categorized as follows: Microsoft patch, Microsoft Office patch, 3rd party patch, error report, and admin-specified patch.
Microsoft Patch: Security patches categorized as operating system. ex) Trouble shooting for remote code execution due to vulnerability of Windows backup admin
Microsoft Office Patch: Security patches categorized as Microsoft Office. ex) Trouble shooting for remote code execution due to vulnerability of Microsoft Office
3rd-Party Patch: Security patches categorized as general software. ex) Trouble shooting for remote code execution due to vulnerability of Windows media player.
Error Report: Microsoft or patch analysis team reported error. ex) MS01-041: A service problem can occur due to PRC request.
Admin-Specified Patch The administrator registers the patch, and it is available only for Windows patches. Only available for patches, which can be extracted from WSUSSCAN with an extension of *.msu and among Windows patches.
Patch Number: The patch number is provided based on the dashboard for vulnerabilities officially released by Microsoft. For the patches not released Microsoft, the AST server assigns the number. The patch numbers released by Microsoft through the dashboard for vulnerabilities follows the format such as MS01-001, while the format of patch numbers assigned by AST server follows the formats; MSSP-Office XP, MSSP-Office 2000, MSSP-SQL Server, APSB10-26.
KB Number: Displays the KB number under the number (ex.MS16-101) in the dashboard for vulnerabilities released by Microsoft.
Patch Name: Indicates the name of patch released by Microsoft.
Severity: Indicates the severity of patches categorized by Microsoft.
Patch Properties: Patch properties include the information such as Restart system after installing patches, Display the install progress, Manual installation required, and Allow rollback.
Policy Status: Displays the distribution status of a policy. The policy status includes installed, uninstalled, test mode, or rollback, and if the policy is applied, the status is shown as installed, and if not applied, the status is shown as uninstalled. Patch test mode is shown as test mode and if the policy is rolled back, the status is shown as rollback.
Installation Status Displays the patch installation status. The patch installation status is as following; installed, installing, uninstalled, unknown.
Details: The details of patch installation are displayed, for example when the patch installation status is uninstalled. For example, the details are about insufficient hard disk space indicate that the patch is not applicable for the insufficient disk space.
Error Code: Displays the error code information.
The patch released date described in the patch information site of Microsoft. Indicates the date when the patch was released by Microsoft through the website for patch release. The information can be changed by administrator.
Patch Installation Date: Displays the date when the patch was installed in an agent.
Patch Process: Displays the patch process. Patch process include the patch through Widows update or APM. The type of patch process is as following: unknown, Windows, APM.

Distribution Information

You can check the distribution status of packages from the list of distribution packages. You can also check the result of distribution when the distribution is not successfully done.

Distribution Package Name: Displays the name of distribution package. The name entered while creating the distribution package.
Distribution Status: Displays the status of packages distributed to an agent. The distribution status is as following; not distributed, distributed.
Result: Shows the reason the package is not distributed. The reason the package is not distributed is as following; download failed, execution failed, distribution File Information corrupted, download prohibited time, insufficient disk space.
Information Update Time: Shows the time when the distribution information was updated.