Start or Stop Traps Runtime Components on the Endpoint
Table of Contents
4.2 (EoS)
Expand all | Collapse all
-
- Set Up the Endpoint Infrastructure
- Activate Traps Licenses
-
- Endpoint Infrastructure Installation Considerations
- TLS/SSL Encryption for Traps Components
- Configure the MS-SQL Server Database
- Install the Endpoint Security Manager Server Software
- Install the Endpoint Security Manager Console Software
- Manage Proxy Communication with the Endpoint Security Manager
- Load Balance Traffic to ESM Servers
-
- Malware Protection Policy Best Practices
- Malware Protection Flow
- Manage Trusted Signers
-
- Remove an Endpoint from the Health Page
- Install an End-of-Life Traps Agent Version
-
-
- Traps Troubleshooting Resources
- Traps and Endpoint Security Manager Processes
- ESM Tech Support File
-
- Access Cytool
- View the Status of the Agent Using Cytool
- View Processes Currently Protected by Traps Using Cytool
- Manage Logging of Traps Components Using Cytool
- Restore a Quarantined File Using Cytool
- View Statistics for a Protected Process Using Cytool
- View Details About the Traps Local Analysis Module Using Cy...
- View Hash Details About a File Using Cytool
Start or Stop Traps Runtime Components on the Endpoint
In situations where the Traps agent cannot
reach the ESM Server or you do not have permission to change the
behavior of Traps from the ESM Console but must solve an urgent
issue related to Traps drivers and services, you can use the cytool runtime [start|stop] command
to override the default runtime behavior. The command is useful
when you must take immediate action to start or stop all Traps components
or start or stop a specific Traps driver or service.
Changes
to the runtime behavior of Traps drivers and services reset when
the system restarts. To make changes to the startup behavior of
Traps drivers and services, see Enable
or Disable the Startup of Traps Components on the Endpoint.
Making
changes to the runtime behavior requires you to enter the supervisor (uninstall)
password when prompted.
- Open a command prompt as an administrator and navigate to the Traps folder (see Access Cytool).
- To start or stop a driver or service, use the cytool
runtime start <component> command:Windows:
C:\Program Files\Palo Alto Networks\Traps> cytool runtime start <component>where <component> is either a driver: cyverak, cyvrmtgn, cyvrfsfd; or a service: cyserver, CyveraService.Alternatively, you can omit <component> from the command to change the runtime behavior for all drivers and services.The following example displays output for stopping the cyserver service. The Startup column displays the revised component status, either Running or Stopped.C:\Program Files\Palo Alto Networks\Traps> cytool runtime stop cyserver Enter supervisor password: Service Startup cyverak Running cyvrmtgn Running cyvrfsfd Running cyserver Stopped CyveraService Running