Uploaded by Paradox

AppGuard Installation and User Guide Feb 2023

advertisement
AppGuard Enterprise
Agent Installation Guide
This report contains a guide to installing the AppGuard Enterprise agent. This also provides you
with information about AppGuard and its functionality.
1|Page
CONFIDENTIAL
Contents
Executive Summary .......................................................................................................................................................... 3
AppGuard Enterprise Agent Install ...................................................................................................................... 3
AppGuard Enterprise Agent Options .................................................................................................................6
About… ..................................................................................................................................................................................... 6
Help ............................................................................................................................................................................................ 6
View Log ................................................................................................................................................................................. 7
Send Log ................................................................................................................................................................................ 7
Log Severity .........................................................................................................................................................................8
View Policy............................................................................................................................................................................8
Refresh Policy.....................................................................................................................................................................8
View AppGuard Activity Monitor .......................................................................................................................8
Suspending AppGuard Protection .................................................................................................................. 9
Uninstalling the Agent ............................................................................................................................................... 9
Private & Confidential
RESTRICTED USE WARNING
The information contained in this report is strictly confidential and intended solely
for the use of the recipient. Any other use and any communication, publication or
reproduction of the report or any portion of its contents without the written
consent of the authors is strictly forbidden. The recipient agrees to indemnify and
hold harmless against any damages or claims resulting from such unauthorised
use.
AppGuard Enterprise Agent Installation Guide
2
CONFIDENTIAL
Executive Summary
AppGuard is completely different from traditional cybersecurity solutions. It’s not anti-virus, it
doesn’t detect and respond, it simply PREVENTS all attacks at the kernel level and it prevents
everything; zero day, memory scraping, code injection, weaponised documents, etc.
We are pleased to be able to offer you the AppGuard Enterprise agent to be able to
demonstrate how easy it really is to move your organisation from continually “Reacting” to
security events to reach the goal of being “Proactive” and blocking malicious activity
immediately.
The additional intelligence that an organisation can get from AppGuard also shows the
Indicators of Attack (IoA) which can be fused with your existing technology stack to enrich your
situational awareness.
AppGuard Enterprise Agent Install
IMPORTANT
Please ensure that you have allowed the following through your firewall Outbound:
Ports: TCP 443
Destination IP (UK) 20.68.105.157 and 52.151.90.21
Destination IP (USA) 13.90.209.89 and 13.64.66.31
Step1: Save the Installer File
You will receive your Installation Agent in the form of an executable installation package (.exe) or
an Microsoft Installer (.msi), please save this file to your device.
Step 2: Run the file
To install the AppGuard Enterprise Agent please right click the installation file and select “Run as
administrator”.
AppGuard Enterprise Agent Installation Guide
3
CONFIDENTIAL
You may get a User Account Control (UAC) window appear. If you do then please click Yes to
continue.
Step 3: Agent Install Wizard
You will now get the Installation Wizard start which will take you through the rest of the setup.
Please click Next when ready.
Step 4: End User Licence
You will now be presented with the AppGuard Enterprise End User Licence Agreement. Please
read through and when happy select the “I accept the terms in the licence agreement” option
and click Next.
Step 5: Install Software
You are now ready to install the AppGuard Enterprise Software. Please click Install to continue.
AppGuard Enterprise Agent Installation Guide
4
CONFIDENTIAL
Step 6: Install Complete
Once the installation has finished you will get the Install Wizard Completed. To finish the installation
and close the wizard please click Finish.
AppGuard Enterprise Agent Installation Guide
5
CONFIDENTIAL
AppGuard Enterprise Agent Options
Once the installation is complete the AppGuard Agent icon will appear in your taskbar.
To access the AppGuard Agent options please “Right Click” the icon.
About…
This will show you the information about the agent that you have installed.
Help
This provides access to the AppGuard Agent Help and Troubleshooting files.
AppGuard Enterprise Agent Installation Guide
6
CONFIDENTIAL
View Log
This option under the ‘advanced operations’ tab will show you all the AppGuard log information
that has been collected but not yet sent to the Managed Service Provider. This can be useful
when identifying blocked applications or software.
Send Log
This will send the current collected logs straight to the managed service provider. This is located in
the ‘advanced operations’ dropdown.
AppGuard Enterprise Agent Installation Guide
7
CONFIDENTIAL
Log Severity
This option changes the logging level of the agent. This should be kept at Level 4 unless instructed
to change as part of investigations. This is also located in the ‘advanced operations’ dropdown.
View Policy
This option allows you to view the raw policy file that is applied to the agent. This is also located in
the ‘advanced operations’ dropdown.
Refresh Policy
This option allows you to manually refresh your policy. This will connect and download the latest
policy version available. This is used if a policy change has been made and the normal time to
refresh is required to be immediate.
View AppGuard Activity Monitor
This option will show you the status of the agent as well as the policy version and administration
functions.
AppGuard Enterprise Agent Installation Guide
8
CONFIDENTIAL
Suspending AppGuard Protection
If you require to disable or suspend protection to install software, then click the Suspend
AppGuard Protection button.
To activate administration mode then you can either enter the “Break Glass” password in the Pass
Phrase box or you can enter your Windows Logon and Password (This option requires you to be a
local administrator)
Please ensure you tick the relevant box and then click Enable.
AppGuard is now in Administration Mode and you can install software. The icon in your taskbar will
have also changed.
This mode will timeout after 15 minutes and revert to fully protected or you can click Disable.
Uninstalling the Agent
To uninstall an agent that is in the protected mode first click the Suspend AppGuard Protection
button and then click Disable self-protection (TamperGuard) button. After this enter admin mode
using one of the methods described above. The AppGuard agent can now be uninstalled using
the windows Add or Remove Program in the control panel.
AppGuard Enterprise Agent Installation Guide
9
Download