Agent Policy Capabilities
To access the Agent Policy Capabilities navigate to Agents > Agent Policies > Agent Policy > Capabilities tab.
The available capabilities are license dependent, please refer to your Ivanti Neurons package for included product capabilities. To learn more about the product capabilities refer to the relevant Help topic.
Any combination of capabilities can be enabled in a policy. For example, Connectors, Deployment, Active Discovery, and Passive Discovery.
There is a tile for each available capability, select the check box for each capability you want to enable for the agent policy:
- Active Discovery: Enables discovery of devices by scanning IP ranges. Uses ICMP, NetBIOS, reverse DNS queries, OS detection, Remote inventory, and SNMP OIDs. Any devices outside of the IP range will be discovered by global discovery using remote inventory and SNMP.
- Agent UI: Neurons Agent end-user-interface component which allows local administrative tasks and limited reporting to the end user.
- App Control: Enables privilege and application control, providing endpoint security. Create configurations with application rules that can allow, deny, elevate and check for trusted vendors. Learn more about App Control.
- Configuration: Select the App Control configuration to assign to the policy. The configuration must be in a Published state.
- App Distribution: Downloads and installs applications as assigned in the App catalog.
- Application Control (Hybrid): Enables privilege and application control, providing endpoint security. Learn more in the Application Control Help.
Deploy Application Control configurations via Ivanti Neurons. Manage configurations via the on-premise Application Control console.- Configuration: Select the Application Control configuration to assign to the policy. The configuration controls which Application Control settings are deployed to the endpoint. Learn more about Ivanti Neurons and Application Control integration.
For this feature you may need to add URLs to the allow list of your firewall. For more information, see the Accessing and interacting with the Neurons Platform portal section of the 'Required URLs, IP addresses and ports' topic.
- Automation: Enables Neurons Platform to communicate with a wide array of systems outside of Neurons Platform. It can be used to retrieve information or to perform tasks. The user experience revolves around three concepts: What, Who, When.
If Automation is disabled, you will not be able to run actions on those devices targeted by the policy from Ivanti Neurons Platform > Devices/Edge Intelligence/Neurons, including the creating and viewing of support tickets in ISM and ServiceNow. - Connector Server: Enables the import of data from configured connectors. Connectors are configured on the Connectors page.
- Configuration: Select the configuration to assign to the policy.
- Deployment: Enables deployment of the Ivanti Neurons Agent and Policy to devices on the network. Secure device credentials are stored locally for use in agent management.
- Edge Intelligence: Provides real-time insights, as well as remediation and alerting capabilities for your environment. Data is retrieved from devices in real-time, at the moment you request it.
If Edge Intelligence is disabled, troubleshooting data will not be present in Devices. Certain functionality in People will also be impacted; latest location, Active Directory Status. Edge Intelligence and Neurons will not return data against those devices targeted by the policy. - Environment Manager (Hybrid): Enables a consistent and portable user environment, delivering on-demand personalization and context-aware policy controls. Learn more in the Environment Manager Help.
Deploy Environment Manager configurations via Ivanti Neurons. Manage configurations via the on-premise Environment Manager console.- Configuration: Select the Environment Manager configuration to assign to the policy. The configuration controls which Environment Manager settings are deployed to the endpoint. Learn more about Ivanti Neurons and Environment Manager integration.
For this feature you may need to add URLs to the allow list of your firewall. For more information, see the Accessing and interacting with the Neurons Platform portal section of the 'Required URLs, IP addresses and ports' topic.
- Inventory Scanner: Enables the deep inventory scanner for the device. Enabled by default when creating a new policy.
- Passive Discovery: Enables discovery of connected devices on the subnet by listening to network traffic. Uses ARP, NetBIOS, reverse DNS queries, and OS detection. Includes CSEP if required, learn more about the Client Self-Election Process.
- Patch Management: Provides zero trust security capabilities and brings a continuous vulnerability management experience to help organizations manage and prioritize vulnerabilities, from detection through to remediation.
- Configuration: Select the patch configuration to assign to the policy.
- Performance Manager (Hybrid): Allows system resources to be monitored and controlled, helping to deliver an optimal user experience. Learn more in the Performance Manager Help.
Deploy Performance Manager configurations via Ivanti Neurons. Manage configurations via the on-premise Performance Manager console.- Configuration: Select the Performance Manager configuration to assign to the policy. The configuration controls which Performance Manager settings are deployed to the endpoint. Learn more about Ivanti Neurons and Performance Manager integration.
For this feature you may need to add URLs to the allow list of your firewall. For more information, see the Accessing and interacting with the Neurons Platform portal section of the 'Required URLs, IP addresses and ports' topic.
- Power Management: Enables power management settings.
- Remote Control: Allows IT analysts to securely remote control endpoints so they can troubleshoot problems.
Unattended remote control is not currently supported on macOS.