Deploying the SES Evolution environment
To apply the configuration of agent groups, security policies and new software versions of the agent to your pool of agents, the environment must be deployed.
Doing so will generate for each agent group the information to send to agents. Configuration and policy packages are generated and stored in databases. Agents log in regularly to their agent handlers to update their statuses. The agent handler then detects updates to apply to agents when they become available.
By default, agents connect to their handlers every 60 seconds by default. This means that it takes less than one minute for a new deployment to be applied. This duration can be modified in the configuration of agent groups using the Agent status update setting. For further information, refer to the section Monitoring agents in real time.
The environment must be deployed again every time you make changes in the administration console to the following items and you wish to apply them to the pool:
- Policies and rule sets,
- Agent group configuration,
- Agent handler configuration,
- Configuration of a USB key’s trustworthiness.
Ensure that you hold the Environment-Deploy privilege to perform this action.
To deploy the environment on agents in the pool:
- Change one or several of the configuration items mentioned above.
An orange dot appears to the right of the Security > Deployment menu and the Deployment icon in the upper banner of the console turns orange
. This means that new elements must be deployed in order to be operational. - Click on the Deployment icon, or select the Security > Deployment menu, and click on Deploy.
The orange dot disappears and the Deploy button turns gray until the next time the configuration is edited.
NOTE
The more cores the machine hosting the backend component has, the shorter the deployment time, especially when you have configured a large number of agent groups. The minimum recommendation is two cores. For more information on system requirements, see the
As for the versions of rule sets deployed with a policy, you can select Always use latest version in the policy’s general panel. In this case, after the policy is deployed, the version number of the deployed rule sets appears in the drop-down list. When you click on Edit in this panel, the Always use latest version setting is retained for each set. For further information, refer to the section Managing versions of a policy or a rule set.
If the environment cannot be deployed, the interface shows a message providing the reason or the actions that must be performed before it can be deployed.
The environment can be deployed from the console only on agents connected to agent handlers. To apply configuration or software updates to agents that are not connected to agent handlers, refer to the section Updating agents.