Configuring SES Evolution agent handlers

Agent handlers are SES Evolution servers that make it possible to distribute security policies and software updates to agents. It is also possible to receive:

• agents’ event logs, which can be saved and sent to Syslog servers.
• the status of agent monitoring data and display them in the Agents tab of the agent group.

Every agent handler belongs to a group of agent handlers.

The parameters of each agent handler and each group must be defined. Agent handlers-Modify privileges are required.

We recommend that you install at least two agent handlers per handler group, installed on two separate servers, to ensure service continuity. For more information, see Ensuring service continuity in the Installation guide.

The following limits apply in order to prevent disk saturation of an agent handler:

• a limit of 500 MB on folders named “InvalidPackages” located in the “Normal” and “Urgent” folders at the location “%programdata%\Stormshield\SES Evolution\Server\AgentLogs”. These folders store log packages sent by the agents that the agent handlers cannot manage properly.

• a limit of 100 MB on the folder named “InvalidCertificates” located at the location “%programdata%\Stormshield\SES Evolution\Server”. This folder stores the certificates of the agents considered invalid (revoked or expired).

When these limits are reached, the oldest files are deleted to free up half of the folder storage capacity.