Command line options for the Sisipsconfig Tool
search cancel

Command line options for the Sisipsconfig Tool

book

Article ID: 151857

calendar_today

Updated On:

Products

Critical System Protection Data Center Security Server Data Center Security Server Advanced Endpoint Security for Servers Endpoint Security Cloud Workload Protection

Issue/Introduction

This document covers the command line options available to the sisipsconfig tool. 

Environment

Critical System Protection (CSP)
Cloud Workload Protection - Compute (CWP)
Data Center Security Server (DCS)
Data Center Security Server Advanced (DCS:SA)
Symantec Endpoint Protection - Symantec Linux Agent (SEP Linux)

 

The agent config tool is located in the following directories on an agent computer:

Windows agents named sisipsconfig.exe

  • Located (for SCSP) in: C:\Program Files\Symantec\Critical System Protection\agent\ips\bin
  • Located (for SDCS) in: C:\Program Files (x86)\Symantec\Data Center Security Server\Agent\IPS\bin

UNIX agents named sisipsconfig.sh ​(You will need to su to sisips to run this tool on *nix su - sisips -c "./opt/Symantec/sdcss/IPS/sisipsconfig.sh)

  • Located (for SCSP) in: opt/Symantec/scspagent/IPS
  • Located (for SDCS) in: opt/Symantec/sdcssagent/IPS

Resolution

SEP Linux, CWP Linux and DCS:SA Linux agent cmdline tool options

sisipsconfig tool options

Descriptions

SEP Linux

CWP Linux

DCS:SA

-view (-v)

Prints the values configurable by this tool.

ü

ü

ü

-utilport (-u)

Sets the Utilities service port (1-65535).

N/A

ü

ü

-setpolicy (-s)

Replaces the current policy with the applied policy.

N/A

ü

ü

-resetpolicy (-r)    

Replaces the current policy with the default policy.

N/A

ü

ü

-toggleipsstate (-i) 

This option is deprecated now. Please use -ipsstate on/off instead.

N/A

ü

ü

-ipsstate on/off

Enables or Disables state of the IPS Driver.

N/A

ü

ü

-overridetimeout (-o)

Timeout value (in seconds) for policy translation during policy override.

N/A

N/A

ü

-trace

Turns Trace to the desired value.

ü

ü

ü

-rollagent (-a)

Forces the Agent log file to rollover.

ü

ü

ü

-rollcsv (-csv)

Forces the CSV log file to rollover.

ü

ü

ü

-retranslate (-n)

Forces a policy retranslation.

N/A

ü

ü

-export (-export)

Prints out the config file.

ü

ü

ü

-rtfim on/off        

Turn RealTime FIM on or off.

N/A

ü

ü

-rtnfsc on/off

Turn RealTime FIM NFS Client watch on or off.

N/A

ü

ü

-kstat

Driver Stats

N/A

ü

ü

-apstate on/off      

Enables or Disables state of AP Driver.

ü

ü

ü 2

-amd on/off

Enables or Disables AP feature.

ü

ü

ü 2

-approfile 10/20     

Enable AP profiling for 10 or 20 minutes.

ü

ü

ü

-host (-h)

Sets the target Management Server hostname. This could be a comma separated list of multiple servers.

N/A

N/A

ü

-port (-p)

Sets the target Management Server port (1-65535).

N/A

N/A

ü

-certfile (-c)

Sets the path to the SSL client certificate file.

N/A

N/A

ü

-failbackinterval

Sets the failback interval for the agent to try to communicate with the Primary Management Server.

N/A

N/A

ü

-test (-t)

Tests the connection information with the Nth server in the Server List.

N/A

N/A

ü

-forcereg

Forces the Agent to re-register with the server.

N/A

N/A

ü

-upgradeagentnow

Upgrades agent and sdcss-kmod package(s).

N/A

N/A

ü

-agentautoupgrade

Enables or Disables Agent Automatic Upgrade feature.

N/A

N/A

ü

  -2Note: - apstate and -amd  are for DCS Linux Agents (Not DCS Windows Agents)


How to use the sisipsconfig tool on Linux/Unix systems


Type "sisipsconfig.sh -help <option>" for a detailed help page for each option.

(i.e. sisipsconfig -help -export)


Examples:
This example prints out the config file
sisipsconfig -export

This example rolls over the Agent and CSV log files:
sisipsconfig -a –csv

This DCS Windows example returns the Security Group
sisipsconfig -v | findstr "Security Group"