Manage Agent Config

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

How to add, modify, or remove an Agent Configuration property in the Console.

Environment

• App Control Agent: All Supported Versions
• App Control Console: All Supported Versions

Resolution

Modify Existing: (Recommended when possible)

1. Log in to the Console and navigate to: https://<ServerAddress>/agent_config.php
2. Click Show Filters > Value > contains > relevant Value > Apply
3. Click View Details (pencil icon) and modify accordingly.

Add New:

1. Log in to the Console and navigate to: https://<ServerAddress>/agent_config.php
2. Click Add Agent Config.
3. Complete all of the desired fields based on Carbon Black's recommendations.

Additional Information

• Warning: It's recommended to work with Support anytime a configuration is added.
• Agent Configs are case sensitive.
• The authenticated command dascli configprops filter *VALUE* can be used to confirm the Agent Config has been received. Example:

  cd "C:\Program Files (x86)\Bit9\Parity Agent\"
  dascli password GlobalPassword
  dascli configprops filter *usn_journal*

• macOS Agents do not currently support Policy specific configurations.
• Agent Configs can be applied per-Agent, per-Policy, or Globally (Agents in all Policies).
• If the Agent receives multiple Agent Configs for the same Property the will be honored as follows:
  • per-Agent is ranked highest and will be honored first.
  • per-Policy is ranked next, and will be honored if no per-Agent Property exists.
  • Global is ranked last, and will be honored only if no per-Agent or per-Policy Property exists.
• It's recommended to only have one type of exclusion per group of devices to prevent confusion or unintentional overlap.
  Ex: Avoid multiple Agent Configs for the same Value where one is Host ID specific, one is Policy specific, and one is All Hosts.