Installation – On a Windows machine (server, desktop or laptop) you can now run the NetWatcher Cloud Endpoint service to increase your situational awareness picture of your networks security. Under the new EndPoints tab (1) on the main menu in the customer portal you will see a ‘Download NetAgents’ button (2). Simply download the agent and run it on the asset that you want to be visible to your NetWatcher service.
The NetAgent is no cost and it provides the base asset information (IP Address, MAC address, HostName) for the computer that it is communicating to the NetWatcher service.
You can also purchase additional modules that can run within the NetAgent (4). The modules that are currently available are as follows:
- HIDS – The Host Intrusion Detection System monitors and analyzes the internals of the computer for security issues. If there is an issue it is sent to the NetWatcher sensor for additional correlation.
- Logs – The logging module monitors the Windows Event log for issues and if there are issues sends them to the NetWatcher sensor for additional correlation.
- Sensor in the Cloud – Most computers are mobile (laptops) and when they are on premise their traffic to the internet can be analyzed via a local Intrusion Detection System (IDS) located on the NetWatcher on-premise sensor. However, when a user is a home or in a coffee shop using a public WIFI they are more at risk. The Sensor in the Cloud provides that same deep packet inspection and security analysis that a local sensor would provide event when the user is offsite.
- Systray – Some organizations provide the users the ability to administrate their own computers. If this is the case a systray icon may be necessary to deploy to those computers. This module provides that systray to allow the user to start and stop the different modules deployed to the computer.
Once you install the NetAgent you can see how many agents are installed (and their corresponding modules) if you press ‘show’ on the ‘Available Modules Count’ line (3).