Add a New Agent Settings Profile
Agent Settings Profiles enable you to customize Traps settings for different platforms and groups of users.
- Add a new profile.On new tenants created in June 2018 or later, you must change the default uninstall password to a new password which meets the Traps management service security standards before you can create a new profile. If you later need to change the password, you can do so by configuring or editing an Agent Settings Profile.
- From the Traps management service, select Profiles.
- Select the operating system type to which the profile applies.
- Click CreateAgent Settings.The Traps management service displays the settings that you can configure for the platform you selected.
- Define the basic settings.
- Enter a unique Name to identify the profile. The name can contain only letters, numbers, or spaces, and must be fewer than 64 characters. The name you choose will be visible from the list of profiles when you configure a policy rule.
- To provide additional context for the purpose or business reason for the creation of the profile, enter a profile Description. For example, you might include an incident identification number or a link to a help desk ticket.
- (Windows, Mac, and Linux only) Configure the Disk Space to
allot for Traps logs.Specify a value in MB from 100 to 10,000 (default is 5,000).
- (Windows and Mac only) Configure User
Interface options for the Traps console.By default, Traps management service uses the settings specified in the default agent settings profile and displays the default configuration in parenthesis. When you select a setting other than the default, you override the default configuration for the profile.
- Hide tray icon—Enable this option to hide the Traps icon from the notification area (system tray).
- Disable access to the Traps console—Enable this option to prevent users from opening the Traps console.
- Hide Traps user notifications—Enable this option to operate Traps in silent mode where the Traps agent does not display any notifications in the notification area.
- (Android only) Configure network usage preferences.When the option to Upload Using Cellular Data is enabled, Traps uses cellular data to send unknown apps to the Traps management service for inspection. Standard data charges may apply. When this option is disabled, Traps queues any unknown files and sends them when the endpoint connects to a Wi-Fi network. If configured, the data usage setting on the Android endpoint takes precedence over this configuration.
- (Windows only) Configure Agent Security options
that prevent unauthorized access or tampering with Traps components.Similar to the User Interface options, use the default agent settings or customize them for the profile.
- Enable or disable Agent Anti-Tampering Protection.
- When Agent Anti-Tampering Protection is enabled, configure granular protection options for Traps services, processes, files, and registry values, if desired.
- (Windows only) Set a password the user must
enter to uninstall the Traps agent.The default uninstall password is Password1. To set a new password, the password must satisfy the following requirements:
To change the password:
- Contain eight or more characters.
- Contain English letters, numbers, or any of the following symbols: !()-._`~@#"'.
- Click the edit icon in the Uninstall Password area.
- Enter and confirm the new uninstall password.
- (Windows only) Configure Windows
Security Center Configuration.The Windows Security Center is a reporting tool which monitors the system health and security state of Windows endpoints on Windows 7 and later releases. By default, Traps registers to the Windows Security Center as an official Antivirus (AV) software product and enables Windows to install updates for Meltdown/Spectra vulnerability patches. If you do not want to allow Windows to automatically install patches, change the setting to Enabled (No Patches), or to disable Traps registration to the Windows Security Center completely, select Disabled. When registration is disabled, the Action Center indicates Virus protection is Off.
- Save the changes to your profile.
- Assign the profile to a policy (see Configure a Policy Rule ).