SYSTEM
The [SYSTEM] menu displays the real-time status information of Agents connected to the Manager, and allows you to set or check system thresholds for each Agent.
AGENT MANAGEMENT
[SYSTEM]
Manage the list and status of all Agents registered in the DeepFinder Manager.
| Item | Content |
|---|---|
| ID | Displays the Agent's unique ID (AID). |
| NAME | Displays the administrative name for Agent identification. |
| Connection | Displays the real-time communication status between the Agent and Manager. (Green: Normal, Gray: Disconnected) |
| Filter | Displays the operational status of the web server filter. Click the icon for details. ! : Policy synchronization error. The policy versions on the Manager and Agent do not match. ! : No filter information. The web server is stopped or filter integration has failed. ! : Version mismatch. The Agent and Filter versions are different. An Agent update and web server restart are required. |
| Action | Displays the default response mode set for the Agent (DENY, DETECT, etc.). |
| IP | Displays the IP address of the server where the Agent is installed. |
| CLOUD-ID | Displays the Agent's unique ID. (Used for special configurations, e.g., in cloud environments) |
| Type | Displays the type of web server where the Agent is installed (Apache, Nginx, etc.). |
| Version | Displays the version of the web server where the Agent is installed. |
| Usage (month) | Displays the Agent's cumulative monthly usage time. (Used for special configurations, e.g., cloud billing) |
| Update | Performs commands to update the Agent's program/policy or restart the web server. |
| Mode | Displays the activation status of the Agent's security functions. BYPASS: Deactivates security functions. (Allows all traffic) RUN: Security functions are activated. |
ADD AGENT
[SYSTEM] > Click [ADD AGENT] icon in the upper right
Manually registers an Agent. Click [ADD AGENT], enter the Agent information, and then click [SAVE]. When the Agent is added to the list, an audit log is created, and you must use the AID (Agent ID) issued at this time to install the Agent on the actual server.
| Item | Content |
|---|---|
| AGENT NAME | Enter an identification name for the Agent to be displayed on the management screen. |
| IP | Enter the IP address of the server where the Agent will be installed. |
| PORT | Enter the port number for communication with the Agent. |
| Web Server Type | Select the type of web server. (IIS, APACHE, NGINX, WAS) |
| Mode | Set whether to activate the Agent's security functions. RUN: Activates security functions. BYPASS: Deactivates security functions. |
| Send Domain | Set whether the Agent should automatically register unknown domain requests to the Manager. ON: When an unregistered domain is found, it is automatically added to the Agent's 'Default Domain Group'. (If no default group exists, it is registered as an unclassified domain) OFF: Does not send new domains. (Default) ※ Setting to ON may cause a load on the Manager server if many domains are collected. |
| Auto Delete | This option applies to dynamically replicated Agents (e.g., in an Auto-Scaling environment). (Not applicable to the initially manually registered Agent) ON: Automatically deleted from the list if communication with the Manager is lost for more than 1 hour. OFF: Not deleted from the list even if communication is lost. |
| Collect logs | Set whether to collect this Agent's detection logs in the Manager. (OFF: Do not collect) |
| Send detection log(syslog) | Set whether to send this Agent's detection logs to a SYSLOG server. (OFF: Do not send) |
| Managed Domain Group | Specify the domain group(s) to which the Agent will belong. (Multiple selections possible) Use this setting if one Agent needs to apply policies for multiple domains (when installed with a Company Key). However, a domain group already designated as the 'Default Domain Group' cannot be selected again in this list. |
| Default Domain Group | Specify one domain group to be used as the Agent's default policy. (If you are using individual policies per domain by setting multiple 'Managed Domain Groups', the 'Default Domain Group' can be left blank.) |
EDIT AGENT
[SYSTEM] > (Select Agent) > Click [EDIT] icon in the upper right
Select the Agent to modify and click the [EDIT] button to change its information. When the Agent information is modified, a relevant audit log is created.
In the edit window for a connected Agent, clicking the [CONFIG] button allows you to remotely view and change the contents of the Agent's local configuration file (config.xml).
REMOVE AGENT
[SYSTEM] > (Select Agent) > Click [REMOVE] icon in the upper right
Deletes an Agent. Select the Agent to delete and click the [REMOVE] button. It will be removed from the list, and a relevant audit log will be created.
You cannot delete an Agent that is currently connected (green light) to the Manager. First, stop or uninstall the Agent program on the corresponding web server, and then proceed with the deletion from the Manager.
