ESET Remote Administrator 6. Version 6.0 Product Details

Transcription

1 ESET Remote Administrator 6 Version 6.0 Product Details

2 ESET Remote Administrator 6.0 is a successor to ESET Remote Administrator V5.x, however represents a major step forward, completely new generation and approach to user-experience, performance, and architecture. The changes are described below. 1. NEW FEATURES Independent ESET Remote Administrator Agent By separation of remote management communication from ESET security products, administrator is able to achieve a state, which was not possible before. As the agent is independent, and policies are executed through it (agent executes the policies / tasks / events) the administrator can feel safe, even in case, when there is no direct connection to the server during the occurrence of critical event. Agent also simplifies the deployment, as it does not interfere with any critical operating system processes like standard security software. Via agent, the admin is able to install other (even 3rd) party software, and also perform an uninstall (via standard Windows uninstallation tasks). It also simplifies the infrastructure upgrade, as in case of a new ESET Remote Administrator Server / Agent version, customer is not forced to update also the security product. Server / Proxy architecture The approach towards the product architecture has been changed in the new ESET Remote Administrator 6. For deployment in simple & small organization (up to 1000 clients), a one-machine approach is sufficient. ESET Remote Administrator database performance has been fine-tuned to support installation on the same server as ESET Remote Administrator itself. Alongside the ESET Remote Administrator server, also Web Server with ESET Remote Administrator console is installed. This is a cost-effective solution that should fit to most customers. Console Web Server ERA Server Agent Agent Agent Agent Agent

3 Console Web Server ERA Server Distant link Proxy Proxy Agent Agent Agent For deployment in mid-sized environments (up to clients), ESET Remote Administrator architecture is engineered in a way that it offers a large level of flexibility and customization. Database can be located on a separate machine, as well as the server and the webserver. Remote locations do no longer need a server installation, only new ESET Remote Administrator Proxy which will collect and forward the aggregated data towards the main server. This minimizes network load, and also improves the stability of the network. Computer/Group centric approach New ESET Remote Administrator 6 focuses on computers (sometimes referenced as clients ). As a computer (client) we reference every machine that connects to ESET Remote Administrator, regardless the device type or machine type. This approach is similar to the Active Directory approach, which is now integrated into ESET Remote Administrator (provides automatic synchronization with AD and adopts its group structure). The console provides a simple overview on the hierarchical structure of groups. ESET Remote Administrator recognizes two types of groups. Static groups (each client could be a member of only one static group) and Dynamic groups. Membership in a dynamic group is triggered by meeting inclusion criteria defined in a dynamic group template. Main advantage of this approach is the possibility of assigning a policy to a dynamic group. If a machine is infected, and it enters the dynamic group infected machines with a strict security policy applied (firewall disables connection, device control disables all removable media, etc.) and relevant tasks are executed (on-demand scan with strict cleaning parameters). Entering a dynamic group can also trigger a notification and report generation. Web console The new ESET Remote Administrator 6 features a completely new web-based console. Developed together with a leading user-experience agency after a in-depth user research, it helps to address the needs of real users. It contains interactive dashboards with drill-down capability, intuitive computer / group lists with context menu navigation and clear status indication, separate threat list, informing about the recent discoveries of ESET security products, a section dedicated to reports with pre-defined report templates and huge customization options and detailed administration section, allowing to configure everything, from policies, tasks, triggers, notifications, dynamic group templates, licenses and access rights.

4 Role-based management The new ESET Remote Administrator 6 allows the administrator to create multiple user accounts and define individual (customizable) sets of privileges for them. In case of multi-location deployment, it allows admin to create a superior admin with the rights to define general company policies and a set of local administrators, being able to view & manage only their local clients. Reviewer privilege is also available, to offer harmless access to relevant employees, for example within internal security department, to be able to oversee the status of the network. Improved policy management The approach towards management of policies has been completely changed. In new ESET Remote Administrator, administrator is able to define policies per product, and clearly specify their mutual relationship. The more specific policy overwrites the more general policy; however there is now a possibility to force the policy setting, meaning it could not be overwritten by another policy down the hierarchy. Also settings, which are kept in default values can be forced, meaning that nobody will be able to change them. Each policy will show in which groups and for which clients it is applied, and on each client, there will be a clear indication what policies are being applied and what is the resulting configuration, respecting the mutual relationship between policies. Policies are being executed on agent, resulting in such a state that even without a connection to ESET Remote Administrator server; the agent is able to apply policies assigned to a specific dynamic group, in case client enters such. This brings a completely new level of usability and management. Last, but not least, unified & simplified design of the configuration settings has been adopted, to provide clean and matching user interface for the settings configuration known from ESET security products. ESET will provide policy templates with pre-defined values for each of its security products, respecting needs of various customer groups (restrictive policy, soft policy, policy specified for laptops, policy specified for server usage, etc.). Configurable triggers By configuring a variety of triggers, the administrator is able to specify when a specific task is executed. You can define scheduled triggers (set for a specific date & time for once or multiple (repeating) occurrences) or define specific conditions to be met to run the task. Triggers can be paired with dynamic groups (taking into account membership, size, time period), resulting in a such state that when specified criteria paired to a specific dynamic group (e.g. infected computers) are met, a resulting action is taken (e.g. a notification is generated, on-demand scan is started etc.). You can even set triggers for specific event types, as recorded in the log file of a particular product. New approach towards tasks An administrator using ESET Remote Administrator is now able to create his own list of tasks, according to specific needs, which could be then saved, and used later. Tasks are created in a wizard-like approach, when the console clearly indicates all the necessary data to be filled in prior to their execution. Tasks are clearly sorted out for the specific ESET security products. ESET will provide a list of pre-configured tasks, which when executed on specific clients (possible even via context menu directly in client list), will perform desired action.

5 Dramatically enhanced reporting options Reporting is an extremely demanded feature, allowing administrators and decision makers to have clear insight into the status of the network in real time, or anytime in the past. In the new ESET Remote Administrator, possibilities of reporting are limitless. Custom report templates enable admins to define the right set of data for each of them, combining the proper data values and visualizing them in a proper form. Reports can be viewed directly in ESET Remote Administrator, exported into PDF, and also mailed, in a form of report notification. ESET will of course provide a set of pre-defined report templates, which will make ESET Remote Administrator ready for general use from the moment of installation. Also, this new approach optimizes the database performance, as ESET Remote Administrator will collect only data which will be used for report generation. Other logs won t be downloaded, but will be stored on clients. Report templates will be stored in a separate list, with a clear indication of output, and human understandable description. Each report template could be also shown as a dashboard element. By these options, administrators could achieve an excellent level of visibility into their company computer network status in real time, just by logging into ESET Remote Administrator console. Customizable notifications Most of the administrators are not connected to ESET Remote Administrator all around the day. However, each of them desires to be informed in case something goes wrong. By creating a proper notification options, administrator can be alerted when something bad has happened. Notifications can be configured in a wizard-like style, and are generally triggered by a list of pre-defined templates. Templates are mapped towards dynamic groups membership, and also executed by specific indications (active threats, outdated operating system, outdated security product, low storage device capacity) and also by other events, as recorded in event logs. ESET will provide pre-defined notifications, which when configured properly will make ESET Remote Administrator ready to alert administrators in a matter of minutes. Simplified product deployment Initial deployment of new security software is always a key task. In new ESET Remote Administrator, it is split into two steps. First, the ESET Remote Administrator Agent is deployed, and second, the agent executes the installation of an ESET Security product. As the agent is a small piece of software, which does not mess with key operating system processes its installation is more trouble-free. ESET Remote Administrator automatically determines the type of agent to be installed according to the target operating system. Agent downloads and installs the product with parameters via standard installation scripts. Installation is now simpler, and more intuitive. New licensing system License management is in a centerpiece for business customers. With new ESET Remote Administrator 6, admins have a clear insight into the license status of each computer, and each license. Together with a new online ESET License Administrator, which allows customers to pair their license with their own unique address (or even multiple addresses) and view a real status of each license, with clear indications of errors, it enhances the control over the licenses for ESET security products. The customer is now able to define which exact license is being applied to which specific group / client. In-product license manager enables admins to create notifications based on license status, and even show the clear licensing status in the product dashboard.

6 Strengthened security Security is always a concern, even more when it is related to security software. ESET Remote Administrator 6 now utilizes Transport Layer Security (TLS) 1.0 standard (1.1 is planned) & for peer identification (server, proxy, server) an it creates and generates its own certificates (to digitally sing & encrypt communication between its individual components). Administrator is able to create his own PKI (public-key infrastructure) or utilize existing one (Active Directory). If the first approach is used, certificates & certification authority are crated during installation (or could be changed afterwards), and certificates are then assigned during deployment of each ESET Remote Administrator components. By utilizing certificates, admins achieve a more secure environment. Rogue detection sensor Detection of computers within the network is always crucial, as an unprotected and unmanaged computer represents a security risk. By deploying the new Rogue Detection sensor, a passive network probe, which searches for traces of computers on the network, the administrator will have a better level of visibility over the devices located within the corporate network. All discovered machines are automatically located in the lost & found group, from which admin can move them to specific static groups, and proceed with management tasks. 2. COMPONENTS ESET Remote Administrator 6 consists of several components: ESET Remote Administrator Server ESET Remote Administrator Server is the key component of the ESET Remote Administrator infrastructure. It handles the communication with agents, and it collects and stores all of the application data into the database. It s the heart & brain of the ESET Remote Administrator. ESET Remote Administrator Proxy The proxy is used to collect and aggregate data from computers in remote / distant locations and their forwarding to centralized ESET Remote Administrator server. This helps to optimize the overall load and server performance and also lowers the communication costs (data synchronization happens only in selected time period and only once for all clients behind proxy). ESET Remote Administrator Web-console Web console interprets the data stored in the ESET Remote Administrator database. It visualizes the vast amounts of data into clear dashboards, lists, and it also sends commands to agents and other ESET applications. ESET Remote Administrator Rogue Detection Sensor This part of ESET Remote Administrator infrastructure is used to discover rogue machines on the network. Quite often, even when ESET Remote Administrator server is synchronized with Active Directory, a rogue machine could appear and potentially spread an infection. RD sensor discovers all machines on the network, by listening to their traces. ESET Remote Administrator Agent ESET Remote Administrator Agent is a small GUI less application which executes the commands it receives from ESET Remote Administrator on connected clients. It executes the tasks, collects logs from the ESET applications, interprets and forces the policies and performs other valid tasks, as software deployment and general computer monitoring.

7 Feature ESET Remote Administrator 5.x problem ESET Remote Administrator V6 solution Multi - platform coverage Windows binaries only - subject to Microsoft licensing terms Windows and Linux compatible with all components Centralized management Multiple servers necessary to create organizational hierarchy with local access One central server using proxies to process data from distant branches, role & group based management Enhanced Database performance Size-limited internal database, high performance database only as external option Built-in industry standard - MS SQL - as the default database Clear computer identification Duplicating clients Unique client ID for each client Simplified remote deployment Hard to set up, error-prone remote push installation Pre-deployment conflict-free agent with other software uninstallation possibilities Interactive dashboards New licensing system Impossible to perform direct actions from the dashboard, required ESET Remote Administrator console Static license files, unclear indication of applied licenses on products Dashboards offering drill-down options New dynamic assignment of product licenses, dynamic license update in real-time Improved policy management Too-complex & not intuitive configuration editor New policy editor, with clear indication of applied values and applied policies for each client Pre-configured key product elements In default configuration, ESET Remote Administrator wasn t providing anything pre-configured, making the management for users difficult Pre-defined reports, tasks, notifications, policies are making the ESET Remote Administrator a more usable console Commonly used webservers, web browsers and databases supported with the new ESET Remote Administrator 6: Web Server Apache Tomcat 6+ Glassfish 3.1+ Supported Web Browsers Firefox 20+ Internet Explorer 9+ Chrome 23+ Safari 5+ (originally 4+) Opera 12+ Mobile web browsers Supported Databases MySQL 5.5+ Microsoft SQL Server 2008R2+ (all editions)

8 3. SYSTEM REQUIREMENTS Operating System Server Agent Proxy RD Sensor Windows Server 2008 x64 R2 SP1 Windows Server 2008 x86 SP2 Windows Server 2008 x64 SP2 Windows Server 2012 x64 Windows Server 2012 x64 R2 Microsoft Small Business Server 2011 x64 Standard Microsoft Small Business Server 2011 x64 Essential Windows XP x86 SP3 Windows XP x64 SP2 Windows Vista x86 SP2 Windows Vista x64 SP2 Windows 7 x86 SP1 Windows 7 x64 SP1 Windows 8 x86 Windows 8 x64 Windows 8.1 x86 Windows 8.1 x64 Ubuntu LTS and higher x86/x64 Cent OS 6.5 and higher x86/x64 Note: Please note that installation of ESET Remote Administrator 6 Server & Proxy is no longer officially supported on desktop Windows operating systems. This is due to the violation of Microsoft licensing terms, which do not allow this type of server-like usage.