Virtual Machines for Armor Anywhere

After you sync your public cloud account with the Armor Management Portal (AMP), you can use the Virtual Machines screen to view the instances associated with your public cloud account.

Additionally, the Virtual Machines screen will display the security status of these instances. All instances for the synced public cloud account will be displayed; however, instances without the Anywhere agent will be labeled as Unprotected.

Review Virtual Machines

The Virtual Machines screen provides a high-level view of all of your virtual machines.

1. In the Armor Management Portal (AMP), in the left-side navigation, click Infrastructure.
2. Click Virtual Machines.
   • Search by Virtual Machine, Primary IP, or Tag.
   • Filter by Type, State, or Power Status.

Review Details for a Specific Virtual Machine

From the Virtual Machines screen, you can access detailed information for each virtual machine.

1. In the Armor Management Portal (AMP), in the left-side navigation, click Infrastructure.
2. Click Virtual Machines.
3. Locate and select the desired instance.

Overview

This section displays detailed information for the virtual machine.

Sub-Agent Health Table

This section displays the sub-agent health related to your Armor-protected virtual machines.

Review Sub-Agent Health Details for a Virtual Machine

For each of your virtual machines, you can view sub-agent health details. You can use this information to troubleshoot agents that may be in a bad state.

1. In the Armor Management Portal (AMP), in the left-side navigation, click Infrastructure.

2. Click Virtual Machines.

3. Locate and select the desired instance.
4. Locate and hover over the sub-agent that you want to view.
5. Click the name of the desired sub-agent. Or, click the vertical ellipses, then click View Details.
6. On the left-side of the screen, select the sub-agent that you want to view.
   1. The information that displays on the right-side of the screen will change based on the sub-agent that is selected.

Armor Agent

Review specific information and troubleshooting steps for the Armor Agent service.

File Logging

Review specific information and troubleshooting steps for the File Logging service.

File Integrity Monitoring

Review specific information and troubleshooting steps for the File Integrity Monitoring (FIM) service.

Intrusion Detection System

Review specific information and troubleshooting steps for the Intrusion Detection System (IDS) service.

Malware Protection

Review specific information and troubleshooting steps for the Malware Protection service.

Vulnerability Scanning

Review specific information and troubleshooting steps for the Vulnerability Scanning service.

Add Tags and Notes to a Virtual Machine

You can use the Tags + Notes section to add tags to your instance, to improve categorization and search capabilities. You can also add notes to help track changes and tasks related to an instance.

1. In the Armor Management Portal (AMP), in the left-side navigation, click Infrastructure.
2. Click Virtual Machines.
3. Locate and select the desired virtual machine.
4. Click Tags + Notes.
   1. In the Tags section, enter the desired tag, then click the ( + ) symbol to add.

      1. Multiple tags may be added.

   2. In the Notes section, enter the desired note.
5. Click Save Changes.

Remove Tags and Notes from a Virtual Machine

1. In the Armor Management Portal (AMP), in the left-side navigation, click Infrastructure.
2. Click Virtual Machines.
3. Locate and select the desired virtual machine.
4. Click Tags + Notes.
   1. In the Tags section, click the "X" next to the tag that you want to remove.
   2. In the Notes section, delete or edit the note.
5. Click Save Changes.

Enable Auto-Removal of Inactive Virtual Machines

The auto-remove feature allows you to remove your virtual machines from AMP that are no longer communicating with Armor.

1. In the Armor Management Portal (AMP), in the left-side navigation, click Infrastructure.
2. Click Virtual Machines.
3. Hover over the plus ( + ) icon, and then click the Virtual Machine Settings icon.
4. Click the Auto remove VMs setting to enable the auto-remove feature.
   1. Click the setting again to disable the feature.
5. In Remove VMs after, select the desired time frame for when your virtual machines should be removed - 7 Days, 14 Days, or 30 Days.
6. Click Save.

Export Usage Data

1. In the Armor Management Portal (AMP), in the left-side navigation, click Infrastructure.
2. Click Virtual Machines.
3. Click Export Usage.
4. In the drop-down menu, select a file type to download.
5. Select the range of data to download.
6. Click Export Usage.
   • A file will download to your local machine.

View CLI Results

Users running commands using either Command Line Interface (CLI) or the Armor Toolbox can review the results of commands invoked on a given machine using the CLI Results tab.

1. In the Armor Management Portal (AMP), in the left-side navigation, click Infrastructure.
2. Click Virtual Machines.
3. Click the desired Virtual Machine name.
4. Click CLI Results.

The CLI Results table provides information on commands run on a VM.

Clicking the Expand icon next to the Time Stamp of a result will display the output stream, which can be collapsed or expanded using the + Show More and - Show Less toggle on the far right of the stream window.

CLI Error Codes

View Vulnerabilities

Users wanting to assess vulnerabilities on an asset can do so through the Vulnerabilites tab in the Asset detail screen within the Virtual Machines section the portal.

1. In the Armor Management Portal (AMP), in the left-side navigation, click Infrastructure.
2. Click Virtual Machines.
3. Click the desired Virtual Machine name.
4. Click Vulnerabilities.

The Vulnerabilities table provides information on vulnerabilities detected on a VM.

In some instances, a solution is provided below the vulnerability. For example, vulnerabilities from the Internet Explorer category will provide a link to Microsoft's Security Update Guide. Clicking the name of the vulnerability will take the user to the Vulnerability detail screen in AMP

Was this helpful?

Topics Discussed