Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

App Control: How to Uninstall an Agent From the Console

App Control: How to Uninstall an Agent From the Console

Environment

  • App Control Console: All Supported Versions
  • App Control Agent: All Supported Versions

Objective

To automatically uninstall Agents after they are moved to a specific Policy.

Resolution

!! Warning !! 
  • Improper configuration could create a situation that would require all Agents in the environment to be reinstalled.
  • Linux and macOS Agents do not support per-Policy Agent Configs.
  • Do not create this Agent Config for macOS or Linux Agents unless full, immediate, automatic removal of those Platforms is desired.
  • Proceed with extreme caution.
  1. Log in to the Console and navigate to Rules > Policies.
  2. Click Add Policy and use the following details:
    • Name: Automatic Uninstall (or something memorable)
    • Description: Automatically, and immediately, uninstalls any Agents added to this Policy.
    • Mode: Control
    • Automatic Policy Assignment: Unchecked
  3. Click Save & Exit.
  4. Navigate to https://ServerAddress/agent_config.php
  5. Click Add Agent Config and use the following details:
    • IMPORTANT REMINDER! Limit this Agent Config to a single, specific, Policy on the Windows Platform!
    • Name: Immediate Agent Uninstall (or something memorable)
    • Host ID: 0
    • Value: allow_uninstall=2
    • Platform: Windows
    • Status: Enabled
    • Create For: Selected policies > Policy created in Step 2 (Automatic Uninstall)
  6. Click Save & Exit.
  7. When a connected Agent is successfully moved to the new Policy (Automatic Uninstall) from Assets > Computers it will now be automatically, immediately, uninstalled.

Additional Notes

  • Improper configuration could create a situation that would require all Agents in the environment to be reinstalled.
  • Linux and macOS Agents do not support per-Policy Agent Configs.
  • Do not create this Agent Config for macOS or Linux Agents unless full, immediate, automatic removal of those Platforms is desired.
  • Proceed with extreme caution.

Related Content


Labels (1)
Was this article helpful? Yes No
50% helpful (1/2)
Article Information
Author:
Creation Date:
‎09-09-2020
Views:
5680
Contributors