Enable or Disable the Startup of Traps Components on the Endpoint

Use the cytool startup [enable|disable] command optionally followed by the component name to override the default behavior for starting Traps drivers and services on and endpoint.
Making changes to the startup behavior requires you to enter the supervisor password when prompted.
Changes to Traps drivers and services do not take effect until the system restarts. To make changes to Traps drivers and services that take effect immediately, see StartorStopTrapsRuntime Components on the Endpoint.
  1. Open a command prompt or terminal as an administrator and navigate to the Traps folder (see Access Cytool).
  2. To change the startup behavior for a specific driver or service, use the cytool startup command:
    Windows:
    C:\Program Files\Palo Alto Networks\Traps> cytool startup [enable|disable] <component>
    where <component> is either a driver: cyverak, cyvrmtgn, cyvrfsfd; or a service: cyserver, CyveraService.
    Alternatively, you can omit <component> from the command to change the startup behavior for all drivers and services.
    The following example displays output for disabling the startup behavior of the cyvrmtgn driver. The Startup column displays the revised behavior as Disabled.
    C:\Program Files\Palo Alto Networks\Traps> cytool startup disable cyvrmtgn
    Enter supervisor password:
    Service Startup
    cyverak System
    cyvrmtgn Disabled
    cyvrfsfd System
    cyserver Automatic
    CyveraService Automatic
    Mac:
    PANM2637HQ:bin jdoe$ sudo ./cytool startup [enable|disable] <component|all>
    Where <component> is a process on the Mac endpoint. Alternatively, you can specify all to change the startup behavior for all startup processes.
    The following example displays output for disabling the startup behavior of the trapsd process. The Startup status column displays the revised behavior as Disabled.
    PANM2637HQ:bin jdoe$  sudo ./cytool startup disable trapsd
                      Process name              Startup status
                      traps_agent               Enabled
                      trapsd                    Disabled
                      authorized                Enabled
                      pmd                       Enabled
                      kproc-ctrl                Loaded
    

Related Documentation