When SMA runs a script task against a resource is the script data saved locally and encrypted?

Products

• IT Management Suite

Issue/Introduction

Questions:

1. When Symantec Management Agent (SMA) runs a script task against a resource is the script data saved locally?
2. Is the data within the script transmitted securely (ie. Is it encrypted)?
3. When we create a task to run a script on a resource, is the script itself saved locally on the target resource? If it's saved there, is it encrypted on the drive?

Environment

ITMS 8.x

Resolution

The script is saved as part of the task in SMA secure storage, so it is encrypted on the disk.

The task associated with the script is encrypted during transmission from the server to the client.

Note: The only time the script can be intercepted is during the task execution:

• the local batch file is created, executed, and then removed. That local batch file contains the original script.
• The temporary script file is created in a folder configured in Folder for executable files (under SMP Console>Settings menu>All Settings>Agents/Plug-ins>Symantec Management Agent>Settings>Targeted Agent Settings>select desired client policy>Advanced tab) as shown here:
  
  
  
  
• The file is given proper permissions so only the agent service and the user account whose identity is used to run the script have access to the file.

Additional Information

https://knowledge.broadcom.com/external/article/181702