Installing Symantec Critical System Protection on Windows

Installing a Windows agent

51

Installing a Windows agent

The Symantec Critical System Protection agent enforces policy on the endpoints. Each agent enforces rules that are expressed in policies, thereby controlling and monitoring application (process) and user behavior.

You must log on to an Administrator account to install a Windows agent.

About the SSL certificate file

The Windows agent installation requires access to a copy of the SSL certificate file that was created during management server installation. The certificate file is named Agent-cert.ssl, and is located in the management server installation directory. The default management server installation directory is as follows:

C:\Program Files\Symantec\Critical System Protection\Server

To place the certificate on a computer that does not run the management server, do the following:

On the management server that will be used to manage the agent, locate the server installation directory and copy Agent-cert.ssl to removable media. Optionally, you can copy the file from mapped network drives or network shares.

On the computer on which the agent will be installed, create a directory and then copy Agent-cert.ssl into the directory.

About the installation settings and options

Installation prompts you to enter a series of Windows agent values consisting of port numbers, management server name, and so forth.

Note: The agent does not support IP aliases. If your network card is bound to more than one IP address, the agent uses the first IP address on the network card.

 

Table 3-4describes the Windows agent installation settings and options.

 

Table 3-4

Windows agent installation settings

 

 

 

 

Setting

Default

 

Description

 

 

 

Installation

C:\Program Files\Symantec

The installation directory for the agent.

Directory

\Critical System Protection

 

 

\Agent

 

 

 

 

 

 

Page 51
Image 51
Symantec Critical System manual Installing a Windows agent, About the SSL certificate file