Enable or Disable the Startup of Traps Components on the Endpoint

Use the
cytool startup [enable|disable]
command optionally followed by the component name to override the default behavior for starting Traps drivers and services on and endpoint.
Making changes to the startup behavior requires you to enter the supervisor password when prompted.
Changes to Traps drivers and services do not take effect until the system restarts. To make changes to Traps drivers and services that take effect immediately, see StartorStopTrapsRuntime Components on the Endpoint.
  1. Open a command prompt or terminal as an administrator and navigate to the Traps folder (see Access Cytool).
  2. To change the startup behavior for a specific driver or service, use the
    cytool startup
    command:
    Windows:
    C:\Program Files\Palo Alto Networks\Traps>
    cytool startup [enable|disable] <component>
    where
    <component>
    is either a driver:
    cyverak
    ,
    cyvrmtgn
    ,
    cyvrfsfd
    ; or a service:
    cyserver
    ,
    CyveraService
    .
    Alternatively, you can omit
    <component>
    from the command to change the startup behavior for all drivers and services.
    The following example displays output for disabling the startup behavior of the cyvrmtgn driver. The
    Startup
    column displays the revised behavior as
    Disabled
    .
    C:\Program Files\Palo Alto Networks\Traps>
    cytool startup disable cyvrmtgn
    Enter supervisor password: Service Startup cyverak System cyvrmtgn Disabled cyvrfsfd System cyserver Automatic CyveraService Automatic
    Mac:
    PANM2637HQ:bin jdoe$
    sudo ./cytool startup [enable|disable] <component|all>
    Where
    <component>
    is a process on the Mac endpoint. Alternatively, you can specify
    all
    to change the startup behavior for all startup processes.
    The following example displays output for disabling the startup behavior of the trapsd process. The
    Startup status
    column displays the revised behavior as
    Disabled
    .
    PANM2637HQ:bin jdoe$
    sudo ./cytool startup disable trapsd
    Process name Startup status traps_agent Enabled trapsd Disabled authorized Enabled pmd Enabled kproc-ctrl Loaded

Related Documentation