2.8.4. Agent Configuration

In this section, we can configure the agent options, download it, see the required patches, and generate tags creating rules matched by an expression.

../../_images/agent_configuration_principal.png


2.8.4.1. DOWNLOAD & PARSE

In the Download & parse tab, we will find information about the Parser options, the agent download and install options, and the different agent versions for each OS.

../../_images/agent_configuration_download.PNG


- Parser options

The computer information sent by the ON Agent is processed in the ON Core. Some information is automatically saved in the user’s device using tags. The remaining data could be manually processed using ON Agent Parsers.

  • Autoload software tags: Enabling it generates an IAI tag for each software found by ON Agent.

  • Autoload software compliance: Enabling it adds a NCA tag if a specific software does not meet the requirements of its corresponding TAR tag (Autoload software tags must be enabled to take effect).

  • Autoload root CA certificates: Enabling it adds CAI tags if there is some certificate in the agent response.

  • Strict software compliance: Enabling it adds NCA tags if there is no TAR for a specific software (Autoload software compliance must be enabled to take effect).

  • Only process trusted payloads: By enabling it, only authenticated agent payloads will be processed. If they are not authenticated, the payload will be received but the information collected will not be used later to add tags, run scripts, etc. It will also trigger the notification “Only authenticated agents can send data to opennac server” to users.

- Download & Install agent options

This section sets up the configuration the agent is installed with and from where it can be installed.

  • Server IP or name: Indicates where the agent can be downloaded. IP or FQDN are possible values. This is where the soluble ON Agent will send the payloads.

  • Enable UI autostart: Allows running the Agent’s UI when the Agent is installed.

  • Create shortcut on desktop: Enabling it creates an Agent shortcut in the desktop.

  • Display Terms & Conditions: Disable this flag if you want avoid being asked to accept the Terms & Conditions disclaimer in massive deployments.

  • Enable Wireguard: Inserts the Wireguard plugin in the agent configuration. The same happens with the Enable OpenVPN option, which will insert the OpenVPN plugin into the agent configuration.

  • Use CDN to download agent soluble: Flag to enable using Content Delivery Network (CDN) to download the soluble agent. The CDN infrastructure optimizes the download process for the soluble agent.

  • CDN URL (Windows): Field to insert CDN URL specific to Windows.

  • CDN URL (Linux): Field to insert CDN URL specific to Linux.

  • CDN URL (Macosx): Field to insert CDN URL specific to Macosx.

- Download agents links

This section contains the links to the different types of agents for downloading:

Installers

Solubles

Others

Windows Agents Bundle

Windows Agent Soluble

Script to install using ActiveDirectory GPO

Macosx Agent (x64)

Macosx Agent Soluble

Macosx Agent (arm64)

Linux Agent

Linux Agent Soluble

See the Deployment and basic configuration section for more information about how to install the Agent.

2.8.4.2. LICENSES

In the Licenses tab, you can create licenses for the soluble and installable versions of the Agent in multiple languages.

../../_images/agent_configuration_licenses.png


To create a new license, click on the add new button. It will display the following configuration window:

../../_images/agent_configuration_new_license.png


  • License title: Specify a title for the new license.

  • License: Provide the license text in this field.

  • Type: Select either Soluble or Installable, depending on your specific case.

  • Language: Choose the preferred language from the available options: Basque, Catalan, English, French, Galician, German, Italian, Spanish.

In addition to creating licenses, you can edit and delete them. The corresponding buttons for these actions are located next to the add new button. This allows you to make changes to existing licenses or remove them from the system as needed.

2.8.4.3. REQUIRED PATCHES

In the Required patches tab, you can define a required patch list. They are the minimal patches that must be installed in the user device to comply with the security policy and access to the network.

../../_images/agent_configuration_patches.PNG


2.8.4.4. WINDOWS AGENT RULES

The Windows agent rules tab is going to be removed in future versions, so it is recommended to move all the windows agent rules to multiplatform agent rules. For more information about agent rules, see the section Multiplatform agent rules on the next topic.

../../_images/agent_configuration_windows_rules.PNG


2.8.4.5. MULTIPLATFORM AGENT RULES

In the Multiplatform agent rules tab we will be able to configure the agent rules. These rules are used to add tags related to the information retrieved by the agent depending on data found in the user device.

../../_images/agent_configuration_multiplatform_rules.PNG


To create a new rule, click on the Add new button. Add a name, an optional description, and configure the expression for the rule. After that, we will be able to choose the action that we want to be performed once the expression matches with the information retrieved from the user device, add or delete a tag or a prefix if the expression matches or not.

../../_images/agent_multiplatform_rules.png


In the Expression column, we can see the configured expression that matches the configured rule. We will be able to see it by clicking the eye icon, the expression will be displayed in a toolbox at the top right of the screen.

../../_images/agent_configuration_multiplatform_rules_toolbox.PNG


If the expression matches, the tag that will be added is specified in the column Tag name if match. If the tag doesn’t match the tag that will be added is specified in the column Tag name if not match.

It is allowed to add new rules, edit them (not all), delete them, make a tag simulation, and Manage rule variables. On Manage rule variables there are defined variables to facilitate the creation of rule expressions.

../../_images/agent_configuration_multiplatform_rules_variables.PNG