Viewing the health status of an agent
The agent's Protection status dashboard displays the operation of the agent's four main protection modules according to the following color code:
- Green: all modules are running,
- Orange: A protection in a module is stopped or waiting for restart,
- Red: a module is not functioning,
- Gray: A protection in a module has been disabled in the agent group configuration.
Click on the module names or on the shield to access the protection status details. The Protections tab in the Help and Support panel appears. It shows the status of modules and their protections. This list of protections corresponds to the features you can enable or disable in the agent configuration in the administration console. For more information, see Choosing the features to enable on agents.
The middle area displays the last three Alert or Emergency level events, which resulted in a block, that were issued on the agent. Identical events are grouped together.
The lower part of the dashboard provides details about the configuration of SES Evolution:
- Agent group: name of the agent group to which this agent belongs,
- Security policy: name of the security policy applied to this agent,
- Last policy update: date on which this agent updated its security policy for the last time,
- Last connection: Date on which this agent last connected to the agent handler.
The agent connects automatically to the agent handler by default as frequently as configured. Click on Check for updates if you want agents to connect to the agent handler and perform the following operations:
- Send data about the status of the agent to the agent handler, including logs,
- Retrieve new configurations, policies or updates if there are any.
You can also force connection to the agent handler via a script, by running the EsGui program ([...]\StormshieldSES EvolutionAgentBin\Gui) with the command line option /ForceConnection
.