- Go to Assessment > Security Compliance > Manual Report.
- Go to the Agent Tree Scope section.
- Select the root domain or a domain and click Assess.
- View Compliance Report for agent services.
For details about agent services, see Services.
- Click the Services tab.
- Under Endpoints with Non-compliant Services, check the number of agents with non-compliant services.
- Click a number link to display all affected agents in the agent tree.
- Select agents from the query result.
- Click Restart Security Agent to restart the service.
Note:
After performing another assessment and the agent still appears as non-compliant, manually restart the service on the agent endpoint.
- To save the list of agents to a file, click Export.
- View Compliance Report for agent components.
For details about agent components, see Components.
- Click the Components tab.
- Under Endpoints with Inconsistent Component Versions, check the number of agents with component versions that are inconsistent with the versions on the server.
- Click a number link to display all affected agents in the agent tree.
Note:
If at least one agent has a more up-to-date component than the Apex One server, manually update the Apex One server.
- Select agents from the query result.
- Click Update Now to force agents to download components.
Note:
To ensure that agents can upgrade the agent program:
-
Go to Agents > Agent Management.
-
Click the Settings > Privileges and Other Settings > Other Settings tab.
-
Go to the Update Settings section.
-
In the Security Agents only update the following components drop-down, select All components (including hotfixes and the agent program).
-
Click Apply to All Agents.
-
Restart the endpoint instead of clicking Update Now to update the Common Firewall Driver.
- To save the list of agents to a file, click Export.
- View Compliance Report for scans.
For details about scans, see Scan Compliance.
- Click the Scan Compliance tab.
- Under Endpoints with Outdated Scanning, configure the following:
Number of days the agent has not performed Scan Now or Scheduled Scan
Number of hours Scan Now or Scheduled Scan is running
Note:If the number of days or hours is exceeded, the agent is treated as non-compliant.
- Click Assess next to the Agent Tree Scope.
- Under Endpoints with Outdated Scanning, check the number of agents that satisfy the scan criteria.
- Click a number link to display all affected agents in the agent tree.
- Select agents from the query result.
- Click Scan Now to initiate Scan Now on agents.
Note:
To avoid repeating the scan, the Scan Now option will be disabled if Scan Now lasted more than the specified number of hours.
- To save the list of agents to a file, click Export.
- View Compliance Report for settings.
For details about settings, see Settings.
- Click the Settings tab.
- Under Computers with Inconsistent Configuration Settings, check the number of agents with settings inconsistent with the agent tree domain settings.
- Click a number link to display all affected agents in the agent tree.
- Select agents from the query result.
- Click Apply Domain Settings.
- To save the list of agents to a file, click Export.
Views: