App Control: How to Manage Agent Config

[#1]

Environment

• App Control Agent: All Supported Versions
• App Control Console: All Supported Versions

Objective

How to add, modify, or remove an Agent Configuration property in the Console.

Resolution

Modify Existing: (Recommended when possible)

1. Log in to the Console and navigate to: https://ServerAddress/agent_config.php
2. Click Show Filters > Value > contains > relevant Value > Apply
3. Click View Details (pencil icon) and modify accordingly.

Add New:

1. Log in to the Console and navigate to: https://ServerAddress/agent_config.php
2. Click Add Agent Config.
3. Complete all of the desired fields based on Carbon Black's recommendations.

Additional Notes

• Warning: It's recommended to work with Support anytime a configuration is added.
• Agent Configs are case sensitive.
• The authenticated command dascli configprops filter *VALUE* can be used to confirm the Agent Config has been received. Example:

  cd "C:\Program Files (x86)\Bit9\Parity Agent\"
  dascli password GlobalPassword
  dascli configprops filter *usn_journal*

• macOS and Linux Agents do not currently support Policy specific configurations.
• Agent Configs can be applied per-Agent, per-Policy, or Globally (Agents in all Policies).
• If the Agent receives multiple Agent Configs for the same Property the will be honored as follows:
  • per-Agent is ranked highest and will be honored first.
  • per-Policy is ranked next, and will be honored if no per-Agent Property exists.
  • Global is ranked last, and will be honored only if no per-Agent or per-Policy Property exists.
• It's recommended to only have one type of exclusion per group of devices to prevent confusion or unintentional overlap.
  Ex: Avoid multiple Agent Configs for the same Value where one is Host ID specific, one is Policy specific, and one is All Hosts.

Related Content

App Control: How to Find the Host ID of an Agent
App Control: How to Use Dascli Command (Windows)
App Control: How to Use B9cli Command (Linux)
App Control: How To Use B9cli Command (macOS)