Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Topics Discussed

...

Info

You can also manage the Trend sub-agent in the Armor Toolbox.

Recommendation Scans

...

One of the features available in Agent 3.0 is Recommendation scans. Recommendation scans provide a good starting point for establishing a list of rules that you should implement. During a recommendation scan, the Armor Agent scans the operating system for installed applications, the Windows registry, open ports, and more. To take advantage of Recommendation scans, turn on Ongoing Recommendation scans in the Toolbox.

Info

Recommendation Scans work in tandem with the Auto-Apply configuration for FIM. The results of the Recommendation Scan can only be applied when Auto-Apply for the FIM service is turned on.

The commands below can be scheduled as tasks within the Armor Toolbox.

Install Trend Sub-Agent:

...

Use the following commands to manage the File Integrity Monitoring service. These commands can be scheduled as tasks within the Armor Toolbox.

Turn On File Integrity Monitoring:

...

Column

Description

Name

For Armor 's private cloudEnterprise Cloud, the name of the virtual machine you created in AMP.

For Armor Anywhere, the name of the instance that contains the installed Anywhere agent, which includes the FIM sub-agent.

Provider

For Armor 's private cloudEnterprise Cloud, the entry will display Armor.

For Armor Anywhere, the name of the public cloud provider for the instance.

Status

The health status of the sub-agent, which is based on how long the FIM sub-agent has been offline.

There are three status types:

  • Secured (in green)

  • Warning (in yellow)

  • Critical (in red)

Connectivity

The connection status of the sub-agent.

There are three connection types:

  • Online indicates that the sub-agent is online.

  • Offline indicates that the sub-agent is currently offline.

  • Needs Attention indicates that the sub-agent has not communicated with Armor.

Timestamp

The date and time that the FIM sub-agent last communicated with Armor.

Info

To learn how the overall FIM status is determined, see Understand FIM data.


Understand FIM Data

...

In theĀ File Integrity Monitoring screen, the dashboard displays the various FIM statuses of your virtual machines (or hosts):

...

Info

Troubleshooting

Armor troubleshoots servers that contain File Integrity Monitoring sub-components in a Warning or Critical status. To troubleshoot with Armor, you must submit a support ticket.

  1. In the Armor Management Portal (AMP), click Support, and then click Tickets.

  2. Click Create a Ticket.

  3. Select or search for the desired category for your ticket request type.

  4. Complete the missing fields.

    1. In Description, enter useful details that can help Armor quickly troubleshoot the problem.

  5. Click Create.

  6. To view the status of your ticket, in the left-side navigation, click Support, and then click Tickets.

...