Environment
- App Control Agent: All Supported Versions
Objective
Change the Agent's Enforcement Level locally when the Server is disconnected, or otherwise unavailable.
Resolution
|
Please Note:
- The Enforcement Level of the Agent is controlled by the Server.
- If the connection to the Server is active, or restored, the Enforcement Level will not be able to be set locally.
- This means the Agent must be instructed to disconnect from the Server first, even if the connection is otherwise unavailable.
- These commands will require authentication in order to be successfully entered.
- The proper way to adjust the Enforcement Level is by moving the Agent to the relevant Policy via the Console to be sure it is also honoring Custom Rules, Publisher Approvals, etcetera relevant for the Enforcement Level and the role of the machine.
|
Windows:
cd "C:\Program Files (x86)\Bit9\Parity Agent"
dascli password GlobalPassword
dascli disconnect
dascli enforcement <low/med/high/disabled/visibility>
Linux:
cd /opt/bit9/bin
./b9cli --password GlobalPassword
./b9cli --disconnect
./b9cli --enforcement <low/med/high/disabled/visibility>
macOS:
cd /Applications/Bit9/Tools/
./b9cli --password GlobalCLIPassword
./b9cli --disconnect
./b9cli --enforcement <low/med/high/disabled/visibility>
Additional Notes
- When Enforcement is set via the cli commands, it will not persist a reboot or if the connection to the Server is restored.
- If the Global Password is not known, modification of the Enforcement Level will not be possible.
- The numerical Enforcement Levels/Values are:
- High Enforcement: 20
- Medium Enforcement: 30
- Low Enforcement: 40
- Local Approval: 35
- Visibility: 60
- Disabled: 80
Related Content
