Enable or Disable the Startup of Traps Components on the Endpoint
Table of Contents
4.2 (EoS)
Expand all | Collapse all
-
- Set Up the Endpoint Infrastructure
- Activate Traps Licenses
-
- Endpoint Infrastructure Installation Considerations
- TLS/SSL Encryption for Traps Components
- Configure the MS-SQL Server Database
- Install the Endpoint Security Manager Server Software
- Install the Endpoint Security Manager Console Software
- Manage Proxy Communication with the Endpoint Security Manager
- Load Balance Traffic to ESM Servers
-
- Malware Protection Policy Best Practices
- Malware Protection Flow
- Manage Trusted Signers
-
- Remove an Endpoint from the Health Page
- Install an End-of-Life Traps Agent Version
-
-
- Traps Troubleshooting Resources
- Traps and Endpoint Security Manager Processes
- ESM Tech Support File
-
- Access Cytool
- View the Status of the Agent Using Cytool
- View Processes Currently Protected by Traps Using Cytool
- Manage Logging of Traps Components Using Cytool
- Restore a Quarantined File Using Cytool
- View Statistics for a Protected Process Using Cytool
- View Details About the Traps Local Analysis Module Using Cy...
- View Hash Details About a File Using Cytool
Enable or Disable the Startup of Traps Components on the Endpoint
Use the cytool startup [enable|disable] command
optionally followed by the component name to override the default
behavior for starting Traps drivers and services on and endpoint.
Making
changes to the startup behavior requires you to enter the supervisor
password when prompted.
Changes to Traps drivers and
services do not take effect until the system restarts. To make changes
to Traps drivers and services that take effect immediately, see StartorStopTrapsRuntime
Components on the Endpoint.
- Open a command prompt or terminal as an administrator and navigate to the Traps folder (see Access Cytool).
- To change the startup behavior for a specific driver
or service, use the cytool startup command:Windows:
C:\Program Files\Palo Alto Networks\Traps> cytool startup [enable|disable] <component>
where <component> is either a driver: cyverak, cyvrmtgn, cyvrfsfd; or a service: cyserver, CyveraService.Alternatively, you can omit <component> from the command to change the startup behavior for all drivers and services.The following example displays output for disabling the startup behavior of the cyvrmtgn driver. The Startup column displays the revised behavior as Disabled.C:\Program Files\Palo Alto Networks\Traps> cytool startup disable cyvrmtgn Enter supervisor password: Service Startup cyverak System cyvrmtgn Disabled cyvrfsfd System cyserver Automatic CyveraService Automatic
Mac:PANM2637HQ:bin jdoe$ sudo ./cytool startup [enable|disable] <component|all>
Where <component> is a process on the Mac endpoint. Alternatively, you can specify all to change the startup behavior for all startup processes.The following example displays output for disabling the startup behavior of the trapsd process. The Startup status column displays the revised behavior as Disabled.PANM2637HQ:bin jdoe$ sudo ./cytool startup disable trapsd Process name Startup status traps_agent Enabled trapsd Disabled authorized Enabled pmd Enabled kproc-ctrl Loaded