Add a New Action Rule
For each action rule, you can specify organizational objects, conditions, and actions to take on each endpoint.
- Create a new action rule. Select SettingsAgentActions and then Add a new rule.
- Select the type of task you want to perform. Select one of the following action rule types and then configure the settings according to the type of action:
- Agent Data— For more information, see Manage Data Collected by Traps.
- Agent Installation— For more information, see Uninstall or Upgrade Traps on the Endpoint.
- Agent License— For more information, see Update or Revoke the Traps License on the Endpoint.
- (Optional) Add Conditions to
the rule. By default, a new rule does not contain any conditions. To specify a condition, select the Conditions tab, select the condition in the Conditions list, and then Add it to the Selected Conditions list. Repeat this step to add more conditions, as needed. To add a condition to the Conditions list, see Define Activation Conditions for a Rule.
- (Optional) Define the Target Objects to
which to apply the action rule. By default, a new rule applies to
all objects in your organization. To define a subset of target objects, select the Objects tab, and then enter one or more Users, Computers, Groups, Organizational Unit, or Existing Endpoints in the Include or Exclude areas. The Endpoint Security Manager queries Active Directory to verify the users, computers, groups, or organizational units or identifies existing endpoints from previous communication messages.
- (Optional) Review the rule name and description.
The ESM Console automatically generates the rule name and description
based on the rule details but permits you to change these fields,
if needed. To override the autogenerated name, select the Name tab, clear the Activate automatic description option, and then enter a rule name and description of your choice.
- Save the action rule. Do either of the following:
After saving or applying a rule, you can return to the Actions page at any time to Delete or Deactivate the rule.
- Save the rule without activating it. This option is only available for inactive, cloned, or new rules. When you are ready to activate the rule, select the rule from the SettingsAgentActions page and then click Activate.
- Apply the rule to activate it immediately.
Uninstall or Upgrade Traps on the Endpoint
Uninstall or Upgrade Traps on the Endpoint Create a new agent actions rule to uninstall Traps from the target objects or upgrade Traps using software ...
Update or Revoke the Traps License on the Endpoint
Update or Revoke the Traps License on the Endpoint Create a new action rule to update or revoke a license for a Traps agent on ...
Add a New Agent Settings Rule
Add a New Agent Settings Rule For each agent settings rule, you can specify organizational objects, conditions, and Traps preferences to apply. Create a new ...
Manage Service Protection
Manage Service Protection Service protection allows you to protect the Traps service running on your endpoints. When service protection is enabled, users cannot change registry ...
Change the Uninstall Password
Change the Uninstall Password By default, you must enter the uninstall password specified during installation to uninstall Traps from an endpoint. Change the default password ...
Create a Forensics Rule
Create a Forensics Rule Create a forensics rule to define memory dump and forensics collection preferences. Configure a new forensics rule. Select Policies Forensics Management ...
Define Heartbeat Settings Between the Agent and the ESM Server
Define Heartbeat Settings Between the Agent and the ESM Server During the heartbeat communication, the Traps agent requests the current security policy and sends a ...
Hide or Restrict Access to the Traps Console
Hide or Restrict Access to the Traps Console By default, a user can access the Traps Console to view information about the current status of ...
Manage Data Collected by Traps
Manage Data Collected by Traps To manage data collected by Traps, you can configure an action rule that runs only one time on the endpoint; ...