Configuring Agent Settings

Add and modify agent settings.

From Agent Settings, you can:

• Set EPPM Agent Self Protection and interval settings
• Set EPPM Agent Operation settings
• Set EPPM Agent Patch File Download Prevention settings

Add EPPM Agent Policy

Enable Offline Policy to change the policy to Offline Policy when the agent cannot connect to the server for the set time. Offline Policy is only available for agents that cannot connect to the server. When the agent gets to connect to the server, Online Policy will be deployed. Set the offline elapsed time between 1 and 12 hours to apply Offline Policy. If you enable Use offline policy after, you must set Online Policy and Offline Policy individually. To add an agent policy:

Note

Click Default on the bottom to apply the agent's default settings.

1. Click Policy/Advanced Rule on the top.
2. Select the Policy tab.
3. Click Add.
4. Click Add > Agent Policy.
5. In <Agent Settings>, configure the settings.

• Use offline policy after: Enable this option to change the policy to Offline Policy when the agent cannot connect to the server for the set time. Offline Policy is only available for agents that cannot connect to the server. When the agent gets to connect to the server, Online Policy will be deployed. If you enable this option, set Online Policy and Offline Policy individually.
• Online Policy: Agent policy that will apply when the agent is connected to the server.
• Offline Policy: Agent policy that will apply when the agent is not connected to the server. Set the offline elapsed time between 1 and 12 hours to apply the policy. (Default: 3 hours)

6. Configure the Interval Settings.

• Policy Download: The interval to download the policy. When the agent computer is turned on, it connects to the server to check for policies, and downloads the policies at the set interval.  Set the interval between 10 and 1440 minutes. (Default: 240 mins)
• Agent Information Upload: The interval to upload agent information (security program status and asset information).
• Administrative Command Check: The interval to check the commands. Set the interval between 5 and 480 minutes. (Default: 15 mins)
• Security Program Information: The interval to upload security program information. Set the interval between 60 and 480 minutes. (Default: 240 mins)
• System Information: The interval to upload hardware and software information. Set the interval between 120 and 1440 minutes. (Default: 15 mins)
• Hardware Information: The interval to upload hardware information. Set the interval between 120 and 1440 minutes. (Default: 15 mins)
• Software Information: The interval to upload software information. Set the interval between 120 and 1440 minutes. (Default: 15 mins)

7. Configure the Synchronize with the server settings.

• Synchronize with the server: Synchronize the agent's time with the server's time.
• Synchronization Interval: The synchronization interval.  The agent connects to the server at the set interval to synchronize the time. Set the interval between 1 and 365 days. (Default: 1 day)

Note

The server uses the specified time server's time. The server's time will be synced with the agent's time regardless of whether the time server is enabled in the server.

8. Configure the Communication port. Port number must be between 1 and 65535.
9. Configure the  EPPM Agent Self Protection settings.

• EPPM Agent Self Protection: Block malware from changing the agent's folder, process and registry to prevent infection. Select the targets to protect - installation folder, process and/or registry.

10. Select whether to enable EPPM agent Watchdog service.

• Enable EPPM agent Watchdog service: Use Watchdog service to monitor abnormal activities in EPPM agent.

11. Specify Display Option.

• Show the agent icon on the taskbar: Display the agent icon on the taskbar.
• Show the notification on the agent screen: Display notifications on the agent screen.

12. Configure the Agent Operation settings.

• Turn off agent: Allow the agent to turn off.
• Allow when a correct agent password is entered: Allow agent to turn off when the correct agent password is entered.
• Always allow: Always allow the agent to turn off.
• Always deny: Never allow the agent to turn off.  The End menu that appears when you right-click on the agent icon on the taskbar will be deactivated.
• Delete agent: Allow the user to delete the agent.
• Allow when a correct agent password is entered: Allow the user to delete the agent when the correct password is entered.
• Allow when an one time password is entered: Allow the user to delete the agent when the correct OTP is entered.
• Always allow: Always allow the user to delete the agent.
• Always deny: Never allow the user to delete the agent.
• Remote Control: Allow the administrator to remotely control the agent PC.
• Allow under user consent: The message requesting remote control will appear on the agent's screen. The user needs to consent to allow the administrator to remotely control the agent.

• Timeout (seconds): The timeout for the user consent. The request will be canceled when the timeout expires.
• Automatically login after time out: Allow remote control when the timeout expires.

• Always deny: Never allow remote control request.
• Always allow: Always allow remote control request.

13. Configure the Agent ID/Connection settings.

• Agent ID/Connection: Specify new agent ID setting.
• Always create agent ID: Always create new agent ID when communicating withe the server.

14. Configure the Patch File Download Prevention settings.

• Patch File Download Prevention: Set the times (up to 5 times) to not allow patch file download.

15. Configure the Enable power control options in agents settings.

• Enable power control options in agents: This option is based on the agent's "Turn off the display" settings, not the server's settings
• Turn off monitor: Turn off the monitor after period of inactivity. Set the time in minutes (1, 2, 3, 5, 10, 15, 20, 25, 30 or 45) or hours (1, 2, 3, 4 or 5).
• Turn off hard disk: Turn off the hard disk after period of inactivity. Set the time in minutes (3, 5, 10, 15, 20, 25, 30 or 45) or hours (1, 2, 3, 4 or 5).
• System standby: Turn off the system after period of inactivity. Set the time in minutes (1, 2, 3, 5, 10, 15, 20, 25, 30 or 45) or hours (1, 2, 3, 4 or 5).

Note

This option is not available for server OS as there are often periods of inactivity in servers.

16. Configure the IE Compatibility Mode settings.

• IE Compatibility Mode: If you enable Use Microsoft compatibility lists in Microsoft Internet Explorer 11, you cannot redirect PCs in a NAT environment to install the agent. Disable Microsoft compatibility list to redirect PCs in a NAT environment to install the agent. This only applies to Microsoft Internet Explorer 11 and higher versions.
• Apply the IE compatibility mode settings specified in the agent: Do not change the agent's Use Microsoft compatibility lists setting.
• Apply the IE compatibility mode settings specified in the server: Change the agent's APC Use Microsoft compatibility lists setting to the server's setting.
• Use Microsoft compatibility lists: If this option is enabled, agent installation redirection is not supported in NAT environment. To enable agent installation redirection in NAT environment, disable this option.

Note

IE compatibility mode settings only apply to Internet Explorer 11 and higher in NAT environment.

17. Click Save.
18. In <Add Policy>, set the  Name and Target.

• Name: The agent policy's name.
• Target: The agent to which to apply the policy.
• Description: The policy's description.

19. Click OK.

Compatibility View Settings

To enable or disable Use Microsoft compatibility lists:

1. In Internet Explorer 11, click Tools > Compatibility View.

2. In Compatibility View Settings, select Use Microsoft compatibility lists.

Note

Click Default on the bottom to apply the agent's default settings.