ESET Remote Administrator 6

Transcription

ESETRemoteAdministrator 6Version 6.0Product Details

ESET Remote Administrator 6ESET Remote Administrator 6.0 is a successor to ESET Remote Administrator V5.x, however represents a major stepforward, completely new generation and approach to user-experience, performance, and architecture. The changes aredescribed below.1. NEW FEATURESIndependent ESET Remote Administrator AgentBy separation of remote management communication from ESET security products, administrator is able to achieve astate, which was not possible before. As the agent is independent, and policies are executed through it (agent executesthe policies / tasks / events) the administrator can feel safe, even in case, when there is no direct connection to theserver during the occurrence of critical event. Agent also simplifies the deployment, as it does not interfere with anycritical operating system processes like standard security software. Via agent, the admin is able to install other (even3rd) party software, and also perform an uninstall (via standard Windows uninstallation tasks). It also simplifies theinfrastructure upgrade, as in case of a new ESET Remote Administrator Server / Agent version, customer is not forcedto update also the security product.Server / Proxy architectureThe approach towards the product architecture has been changed in the new ESET Remote Administrator 6. Fordeployment in simple & small organization (up to 1000 clients), a one-machine approach is sufficient. ESET RemoteAdministrator database performance has been fine-tuned to support installation on the same server as ESETRemote Administrator itself. Alongside the ESET Remote Administrator server, also Web Server with ESET RemoteAdministrator console is installed. This is a cost-effective solution that should fit to most customers.ConsoleWeb ServerERA ServerAgentAgentAgentAgentAgent

ESET Remote Administrator 6ConsoleWeb ServerERA ServerDistant linkProxyAgentProxyAgentAgentFor deployment in mid-sized environments (up to 10 000 clients), ESET Remote Administrator architecture isengineered in a way that it offers a large level of flexibility and customization. Database can be located on a separatemachine, as well as the server and the webserver. Remote locations do no longer need a server installation, only new“ESET Remote Administrator Proxy” which will collect and forward the aggregated data towards the main server. Thisminimizes network load, and also improves the stability of the network.Computer/Group centric approachNew ESET Remote Administrator 6 focuses on computers (sometimes referenced as “clients”). As a computer (client)we reference every machine that connects to ESET Remote Administrator, regardless the device type or machine type.This approach is similar to the Active Directory approach, which is now integrated into ESET Remote Administrator(provides automatic synchronization with AD and adopts its group structure). The console provides a simple overviewon the hierarchical structure of groups. ESET Remote Administrator recognizes two types of groups. Static groups(each client could be a member of only one static group) and Dynamic groups. Membership in a dynamic group istriggered by meeting “inclusion criteria” defined in a dynamic group template. Main advantage of this approach is thepossibility of assigning a policy to a dynamic group. If a machine is infected, and it enters the dynamic group “infectedmachines” with a strict security policy applied (firewall disables connection, device control disables all removablemedia, etc.) and relevant tasks are executed (on-demand scan with strict cleaning parameters). Entering a dynamicgroup can also trigger a notification and report generation.Web consoleThe new ESET Remote Administrator 6 features a completely new web-based console. Developed together with aleading user-experience agency after a in-depth user research, it helps to address the needs of real users. It containsinteractive dashboards with drill-down capability, intuitive computer / group lists with context menu navigation andclear status indication, separate threat list, informing about the recent discoveries of ESET security products, a sectiondedicated to reports with pre-defined report templates and huge customization options and detailed administrationsection, allowing to configure everything, from policies, tasks, triggers, notifications, dynamic group templates,licenses and access rights.

ESET Remote Administrator 6Role-based managementThe new ESET Remote Administrator 6 allows the administrator to create multiple user accounts and define individual(customizable) sets of privileges for them. In case of multi-location deployment, it allows admin to create a “superioradmin” with the rights to define general company policies and a set of local administrators, being able to view &manage only their local clients. Reviewer privilege is also available, to offer “harmless” access to relevant employees, forexample within internal security department, to be able to oversee the status of the network.Improved policy managementThe approach towards management of policies has been completely changed. In new ESET Remote Administrator,administrator is able to define policies per product, and clearly specify their mutual relationship. The more specificpolicy overwrites the more general policy; however there is now a possibility to force the policy setting, meaning itcould not be overwritten by another policy down the hierarchy. Also settings, which are kept in default values can beforced, meaning that nobody will be able to change them. Each policy will show in which groups and for which clientsit is applied, and on each client, there will be a clear indication what policies are being applied and what is the resultingconfiguration, respecting the mutual relationship between policies. Policies are being executed on agent, resulting insuch a state that even without a connection to ESET Remote Administrator server; the agent is able to apply policiesassigned to a specific dynamic group, in case client enters such. This brings a completely new level of usability andmanagement. Last, but not least, unified & simplified design of the configuration settings has been adopted, to provideclean and matching user interface for the settings configuration known from ESET security products. ESET will providepolicy templates with pre-defined values for each of its security products, respecting needs of various customer groups(restrictive policy, soft policy, policy specified for laptops, policy specified for server usage, etc.).Configurable triggersBy configuring a variety of triggers, the administrator is able to specify when a specific task is executed. You candefine scheduled triggers (set for a specific date & time for once or multiple (repeating) occurrences) or define specificconditions to be met to run the task. Triggers can be paired with dynamic groups (taking into account membership,size, time period), resulting in a such state that when specified criteria paired to a specific dynamic group (e.g. infectedcomputers) are met, a resulting action is taken (e.g. a notification is generated, on-demand scan is started etc.). Youcan even set triggers for specific event types, as recorded in the log file of a particular product.New approach towards tasksAn administrator using ESET Remote Administrator is now able to create his own list of tasks, according to specificneeds, which could be then saved, and used later. Tasks are created in a wizard-like approach, when the console clearlyindicates all the necessary data to be filled in prior to their execution. Tasks are clearly sorted out for the specific ESETsecurity products. ESET will provide a list of pre-configured tasks, which when executed on specific clients (possibleeven via context menu directly in client list), will perform desired action.

ESET Remote Administrator 6Dramatically enhanced reporting optionsReporting is an extremely demanded feature, allowing administrators and decision makers to have clear insight intothe status of the network in real time, or anytime in the past. In the new ESET Remote Administrator, possibilitiesof reporting are limitless. Custom report templates enable admins to define the right set of data for each of them,combining the proper data values and visualizing them in a proper form. Reports can be viewed directly in ESETRemote Administrator, exported into PDF, and also mailed, in a form of e-mail report notification. ESET will of courseprovide a set of pre-defined report templates, which will make ESET Remote Administrator ready for general usefrom the moment of installation. Also, this new approach optimizes the database performance, as ESET RemoteAdministrator will collect only data which will be used for report generation. Other logs won t be downloaded, butwill be stored on clients. Report templates will be stored in a separate list, with a clear indication of output, and humanunderstandable description.Each report template could be also shown as a dashboard element. By these options, administrators could achieve anexcellent level of visibility into their company computer network status in real time, just by logging into ESET RemoteAdministrator console.Customizable notificationsMost of the administrators are not connected to ESET Remote Administrator all around the day. However, each ofthem desires to be informed in case something goes wrong. By creating a proper notification options, administratorcan be alerted when something bad has happened. Notifications can be configured in a wizard-like style, and aregenerally triggered by a list of pre-defined templates. Templates are mapped towards dynamic groups’ membership,and also executed by specific indications (active threats, outdated operating system, outdated security product, lowstorage device capacity) and also by other events, as recorded in event logs. ESET will provide pre-defined notifications,which when configured properly will make ESET Remote Administrator ready to alert administrators in a matter ofminutes.Simplified product deploymentInitial deployment of new security software is always a key task. In new ESET Remote Administrator, it is split intotwo steps. First, the ESET Remote Administrator Agent is deployed, and second, the agent executes the installationof an ESET Security product. As the agent is a small piece of software, which does not mess with key operating systemprocesses its installation is more trouble-free. ESET Remote Administrator automatically determines the type of agentto be installed according to the target operating system. Agent downloads and installs the product with parametersvia standard installation scripts. Installation is now simpler, and more intuitive.New licensing systemLicense management is in a centerpiece for business customers. With new ESET Remote Administrator 6, admins havea clear insight into the license status of each computer, and each license. Together with a new online ESET LicenseAdministrator, which allows customers to pair their license with their own unique e-mail address (or even multipleaddresses) and view a real status of each license, with clear indications of errors, it enhances the control over thelicenses for ESET security products. The customer is now able to define which exact license is being applied to whichspecific group / client. In-product license manager enables admins to create notifications based on license status, andeven show the clear licensing status in the product dashboard.

ESET Remote Administrator 6Strengthened securitySecurity is always a concern, even more when it is related to security software. ESET Remote Administrator 6 nowutilizes Transport Layer Security (TLS) 1.0 standard (1.1 is planned) & for peer identification (server, proxy, server)an it creates and generates its own certificates (to digitally sing & encrypt communication between its individualcomponents). Administrator is able to create his own PKI (public-key infrastructure) or utilize existing one (ActiveDirectory). If the first approach is used, certificates & certification authority are crated during installation (or couldbe changed afterwards), and certificates are then assigned during deployment of each ESET Remote Administratorcomponents. By utilizing certificates, admins achieve a more secure environment.Rogue detection sensorDetection of computers within the network is always crucial, as an unprotected and unmanaged computer representsa security risk. By deploying the new Rogue Detection sensor, a passive network probe, which searches for traces ofcomputers on the network, the administrator will have a better level of visibility over the devices located within thecorporate network. All discovered machines are automatically located in the “lost & found” group, from which admincan move them to specific static groups, and proceed with management tasks.2.COMPONENTSESET Remote Administrator 6 consists of several components:ESET Remote Administrator ServerESET Remote Administrator Server is the key component of the ESET Remote Administrator infrastructure. It handlesthe communication with agents, and it collects and stores all of the application data into the database. It s the heart &brain of the ESET Remote Administrator.ESET Remote Administrator ProxyThe proxy is used to collect and aggregate data from computers in remote / distant locations and their forwarding tocentralized ESET Remote Administrator server. This helps to optimize the overall load and server performance andalso lowers the communication costs (data synchronization happens only in selected time period and only once for allclients behind proxy).ESET Remote Administrator Web-consoleWeb console interprets the data stored in the ESET Remote Administrator database. It visualizes the vast amounts ofdata into clear dashboards, lists, and it also sends commands to agents and other ESET applications.ESET Remote Administrator Rogue Detection SensorThis part of ESET Remote Administrator infrastructure is used to discover rogue machines on the network. Quite often,even when ESET Remote Administrator server is synchronized with Active Directory, a rogue machine could appear andpotentially spread an infection. RD sensor discovers all machines on the network, by listening to their traces.ESET Remote Administrator AgentESET Remote Administrator Agent is a small GUI less application which executes the commands it receives from ESETRemote Administrator on connected clients. It executes the tasks, collects logs from the ESET applications, interpretsand forces the policies and performs other valid tasks, as software deployment and general computer monitoring.

ESET Remote Administrator 6FeatureESET Remote Administrator 5.x problemESET Remote Administrator V6 solutionWindows and Linux compatible with all componentsMulti - platform coverageWindows binaries only - subject to Microsoft licensingtermsCentralized managementMultiple servers necessary to create organizationalhierarchy with local accessOne central server using proxies to process data fromdistant branches, role & group based managementEnhanced Database performanceSize-limited internal database, high performancedatabase only as external optionBuilt-in industry standard - MS SQL - as the defaultdatabaseDuplicating clientsUnique client ID for each clientHard to set up, error-prone remote push installationPre-deployment conflict-free agent with othersoftware uninstallation possibilitiesImpossible to perform direct actions from thedashboard, required ESET Remote AdministratorconsoleDashboards offering drill-down optionsStatic license files, unclear indication of appliedlicenses on productsNew dynamic assignment of product licenses,dynamic license update in real-timeToo-complex & not intuitive configuration editorNew policy editor, with clear indication of appliedvalues and applied policies for each clientIn default configuration, ESET Remote Administratorwasn t providing anything pre-configured, making themanagement for users difficultPre-defined reports, tasks, notifications, policies aremaking the ESET Remote Administrator a more usableconsoleClear computer identificationSimplified remote deploymentInteractive dashboardsNew licensing systemImproved policy managementPre-configured key product elementsCommonly used webservers, web browsers and databases supported with the new ESET Remote Administrator 6:Web ServerApache Tomcat 6 Glassfish 3.1 Supported Web BrowsersFirefox 20 Internet Explorer 9 Chrome 23 Safari 5 (originally 4 ) Opera 12 Mobile web browsers Supported DatabasesMySQL 5.5 Microsoft SQL Server 2008R2 (all editions)

ESET Remote Administrator 63. SYSTEM REQUIREMENTSOperating SystemServerAgentProxyRD SensorWindows Server 2008 x64 R2 SP1 Windows Server 2008 x86 SP2 Windows Server 2008 x64 SP2 Windows Server 2012 x64 Windows Server 2012 x64 R2 Microsoft Small Business Server 2011 x64 Standard Microsoft Small Business Server 2011 x64 Essential Windows XP x86 SP3 Windows XP x64 SP2 Windows Vista x86 SP2 Windows Vista x64 SP2 Windows 7 x86 SP1 Windows 7 x64 SP1 Windows 8 x86 Windows 8 x64 Windows 8.1 x86 Windows 8.1 x64 Ubuntu 12.04 LTS and higher x86/x64 Cent OS 6.5 and higher x86/x64 Note: P lease note that installation of ESET Remote Administrator 6 Server & Proxy is no longer officially supported on desktop Windows operatingsystems. This is due to the violation of Microsoft licensing terms, which do not allow this type of server-like usage.

two steps. First, the ESET Remote Administrator Agent is deployed, and second, the agent executes the installation of an ESET Security product. As the agent is a small piece of software, which does not mess with key operating system processes its installation is more trouble-free. ESET Remote Administrator automatically determines the type of agent