Ivanti Neurons Agent

The Ivanti Neurons Agent is the end-point facility of the Ivanti Neurons Platform. The Agent is in charge of a range of tasks, including endpoint registration and configuration, common messaging, error reporting, etc.

Proxy Configuration for Ivanti Neurons Agent is configurable through the options file, applicable only to Windows devices.

Engines such as the Edge Intelligence engine and its sensors, or the Automation engine can be installed by the agent. Engine tasks can then be scheduled and triggered by the agent.

The engines and sensors often require privileged access to perform their work, so they generally run as LocalSystem. For example, if you use the agent to execute a PowerShell script, the Automation engine runs the script as LocalSystem.

Requirements

To be able to take advantage of all features1 General availability of features depends on the license for your Ivanti Neurons environment. Meeting the requirements ensures that the licensed features will be available on your endpoints after installing the Neurons Agent. of the Neurons Platform, endpoints on which the Neurons Agent will be installed need to comply with all of the following requirements. This may preclude some versions of otherwise supported operating systems, because they cannot meet other requirements.

• A supported operating system.
  For an overview of supported operating systems, and the features that are supported on them, go to Operating System Compatibility Matrix.

  • .NET runtimes (Windows only)

    • .NET is not a prerequisite for installing the Neurons Agent. If a deployed capability requires a supported .NET runtime and the runtime is not present on the endpoint, the Neurons Agent installs the required prerequisite automatically.

    • Runtime requirements vary by capability.

      Capability/Engine	Runtime requirement
      Agent UI, App Distribution, Software Distribution (SWD), Operating System Deployment (OSD), Portal, Power Management, Collector.	.NET 10
      Deployment, Preferred Server Synchronization, Trusted Agent	.NET Framework 4.8
      Avalanche, SidekickCore (Automation)	.NET 5
      Edge Intelligence (WildPulse)	.NET Framework 4.8 (Windows only)
      Patch, App Control, Inventory, Discovery (including Agentless Discovery and CSEP), UWM	No managed runtime required (native Visual C++ components)

     For information about .NET compatibility with Microsoft Windows versions, see Microsoft .NET documentation. 

    For information about .NET Framework compatibility with Microsoft Windows versions, see Microsoft .NET Framework documentation.

    Runtime requirements are capability-specific. Installing, removing, or upgrading a .NET runtime may affect only the capabilities that depend on that runtime.

• TLS 1.2 enabled. For details refer to this Microsoft support article.
• Communication between the agent and the Neurons Platform uses:
  • HTTPS port 443
  • MQTT
    • MQTT port 8883 (default)
    • MQTT port 443 (websocket)
      If you experience firewall or proxy issues with the default MQTT setup (port 8883), you can contact Ivanti Support to enable MQTT traffic/communication over port 443 (websocket) for your Neurons environment (Currently supported on Windows and Linux agents; macOS support is not yet available).
• One or more of the following ciphers:
  • TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
  • TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
  • TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
  • TLS_DHE_RSA_WITH_AES_128_GCM_SHA256

If you have firewalls that prevent communication between the Neurons Platform and an Ivanti Neurons Agent, create a firewall exception for *.ivanticloud.com.
For more information, refer to Required URLs, IP addresses and ports.