Managed device help

The Agent configuration window (Tools > Configuration > Agent configuration) is where you customize device agent configurations. Use the Agent configuration dialog box to specify the agents you want to install and the options for those agents. You can create as many agent configurations as you want. Only one configuration can be the default. You can use this window to create Windows, Macintosh, Linux, and server agent configurations.

To create a configuration
  1. Click Tools > Configuration > Agent configuration.
  2. Click the New button to select the configuration platform.
  3. Complete the Agent configuration dialog box as described in the following sections. Click Help on a page for more information.

NOTE: If you use the Agent configuration dialog box to create a new default agent configuration, be aware that all devices that are configured by WSCFG32 using login scripts will be automatically reconfigured with the new default configuration settings the next time a user logs in, even if their current settings match the new default settings.

The following sections describe the Agent configuration dialog box pages.

About the Start page

The Agent configuration dialog box's Start page contains the following options:

  • Configuration name: This option appears above all dialog box pages. Enter a name that describes the configuration you're working on. This can be an existing configuration name or a new one. This name appears in the Agent configuration window.
  • Default configuration: When selected, makes this configuration the default configuration that gets installed when no other configuration is specified.

Agent components to install (Standard):

  • Standard Ivanti agent: Installs the standard Ivanti agent that forms the basis of communication between devices and the core server. This option is required. You can't disable it, but you can customize the components associated with it. (Note that the security scanner is automatically installed with the standard Ivanti agent, but you configure it with the options on the security and patch scan page below.)
  • Custom data forms: Presents a form to users for them to complete. You can query the core database for the data users enter. Use this to retrieve customized information from users directly.
  • Remote control: Lets you take control of a device or server from across the network. Minimizes the time it takes to resolve customer issues from a centralized help desk. Use this to provide remote management of devices across the LAN/WAN.

Power Management:

  • Power Management: Allows you to control the power consumption on your managed computers from a central location. You can easily create and deploy power management policies and generate reports to evaluate financial and power savings. You control the conditions under which computers and monitors stand by, hibernate, or power down. However, users can delay specific power management actions using a client-side user interface to ensure that unsaved data is protected.

Distribution:

  • Software distribution: Automates the process of installing software applications or distributing files to devices. Use this to install applications simultaneously to multiple devices or to update files or drivers on multiple devices. This option is required. You can't disable it, but you can customize the components associated with it.

Security:

  • Ivanti Antivirus: Installs the Antivirus agent on managed devices. Antivirus uses the security scanner (installed with the standard Ivanti agent) to scan for and identify viruses on managed devices, and to provide options for handling infected files and folders. Administrators download virus definition updates and configures virus scans at the console, including how the Antivirus client displays on managed devices and which options are available to the end user. You must first select the Antivirus agent check box on the Agent configuration's Start page in order to configure the Antivirus page under Security.
  • Endpoint Security: Installs the Endpoint Security agent on managed devices. Endpoint Security protects your managed devices from zero-day attacks, firewall intrusions, and unauthorized device connections. Endpoint Security services is comprised of three separate and complementary security components: Enpoint security, Ivanti Firewall, and Device Control.

Real-time Inventory and Monitoring:

Provides several methods to monitor a device’s health status. While alert rulesets are defined at the Core Server Console and deployed to multiple devices, on individual devices you can define performance monitoring counters to monitor specific performance issues.

  • Baseline components: Installs an agent that monitors system hardware such as fan speeds, disk space, and overall temperature of the device.
  • Extended components: Installs an agent that monitors system process, services, and overall performance.

Other options:

  • .NET installation: When the agent is installed, you can select whether to install Microsoft .NET 4.0 on the managed device. This is a convenience that is useful for two new options that can be installed on devices: Portal Manager (the new version of Desktop Manager) and the Location Detection option (under Inventory settings), both of which require .NET 4.0. If you include either of these options in an agent configuration, select one of the following bundling options.
    • Include .NET in agent installation package: The .NET install is contained within the agent package and is always installed.
    • If .NET is not installed, download and install: .NET is not automatically installed. After the agent is installed, it checks to see whether the managed device already has .NET 4.0 installed. If it does not, the agent uses Vulscan.exe to download and install .NET 4.0. (Any earlier versions of .NET are not affected by this installation.)
  • Include software in inventory scan during installation: After this configuration is installed on clients, do a full inventory scan (hardware ad software). Software scans can take a while, but you can enable this if you don't want to wait for the inventory scanner to do one on it's own. By default, the inventory scanner does a software scan once a day.
  • Show start menu on end user device: When checked, creates Windows Start menu entries for installed agents that have a user interface. Clearing this option installs the agents but doesn't create any Start menu entries.
  • Temporary install directory: Specifies the temporary folder used on managed devices during agent installation. This folder must be writeable for agent installation to succeed.

Deploying the standard Ivanti agent

All Endpoint Manager components require the standard Ivanti agent, which is installed by default on all device installations. Among other things, the standard Ivanti agent provides device discovery and manages core server/device communication.

By default, the standard agent includes the Ivanti® Endpoint Security for Endpoint Manager security scanner.

Use the Standard Ivanti agent pages to configure the Standard Ivanti agent, which includes these components and settings:

  • Client connectivity
  • Inventory settings
  • Alerting
  • Reboot settings
Standard Ivanti agent global settings

The Standard Ivanti agent page has two global settings you can set:

  • Never reboot: Disable all product-related reboots. This overrides any agent install reboot settings you specify.
  • Never autofix: Disable automatic remediation for security vulnerabilities.

These global settings override any reboot and autofix settings you make elsewhere in the product. Consider using these settings on critical devices where you want to manage reboots and autofixes manually.

About the Client connectivity page (under Standard Ivanti agent)

Use the Client connectivity page to select and apply a collection of Client connectivity agent settings that have already been specified and saved with a single unique identifier or to create a new collection of Client connectivity agent settings. Client connectivity settings are required by agent configurations.

  • Client connectivity: Lists the collections of settings that are available. Click an identifier in the list, then click Save to apply those settings to the agent configuration.
  • Edit... Opens the Client connectivity settings dialog box, where you can change an existing collection of settings.
  • Configure...: Opens the Configure Client connectivity settings dialog box. This dialog lists the collections of Client connectivity settings you have configured.
    • New...: Opens theClient connectivity settings dialog box, where you can create a new collection of settings.
    • Edit...: Opens theClient connectivity settings dialog box, where you can change the specified collection of settings.
    • Copy...:Creates a copy of the selected collection of settings and opens the Client connectivity settings dialog box. This is helpful when you want to create a new collection of settings that are similar to a collection you have already configured. Modify the copy of the selected settings and then rename the collection of settings with a unique identifier.
    • Use selected: Applies the selected settings to the agent configuration.

About the Inventory settings page (under Standard Ivanti agent)

Use the Inventory settings page to select and apply a collection of Inventory settings that have already been specified and saved with a single unique identifier or to create a new collection of Inventory settings.

  • Inventory settings: Lists the collections of settings that are available. Click an identifier in the list, then click Save to apply those settings to the agent configuration.
  • Edit...: Opens the Inventory settings dialog box, where you can change an existing collection of settings.
  • Configure...: Opens the Configure Inventory settings dialog box. This dialog lists the collections of Inventory settings you have configured.
    • New...: Opens theInventory settings dialog box, where you can create a new collection of settings.
    • Edit...: Opens theInventory settings dialog box, where you can change the specified collection of settings.
    • Copy...:Creates a copy of the selected collection of settings and opens the Inventory settings dialog box. This is helpful when you want to create a new collection of settings that are similar to a collection you have already configured.
    • Use selected: Applies the selected settings to the agent configuration.

About the Alerting page (under Standard Ivanti agent)

Alert rulesets define which events require immediate action or need to be logged for your attention. A ruleset contains a collection of alert rules, each of which has a corresponding alert action. When you define an alert ruleset you can deploy it to one or more devices to monitor the items that are important for that kind of device.

You can deploy one of the predefined rulesets or you can deploy rulesets you've created inside the alerting tool.

The Alerting page contains the following features:

  • Add: Click to add an existing ruleset to the Selected alert ruleset list. Rulesets in this list will be deployed to devices receiving this agent configuration.
  • Remove: Click a ruleset and click Remove to remove it from the Selected alert ruleset list.

About the Reboot settings page (under Standard Ivanti agent)

Use the Reboot settings page to select and apply a collection of reboot settings that have already been specified and saved with a single unique identifier or to create a new collection of settings.

  • Reboot settings: Lists the collections of settings that are available. Click an identifier in the list, then click Save to apply those settings to the agent configuration.
  • Edit...: Opens the Reboot settings dialog box, where you can change an existing collection of settings.
  • Configure...: Opens the Configure Reboot settings dialog box. This dialog lists the collections of Device reboot settings you have configured.
    • New...: Opens theReboot settings dialog box, where you can create a new collection of settings.
    • Edit...: Opens theReboot settings dialog box, where you can change the specified collection of settings.
    • Copy...:Creates a copy of the selected collection of settings and opens the Reboot settings dialog box. This is helpful when you want to create a new collection of settings that are similar to a collection you have already configured.
    • Use selected: Applies the selected settings to the agent configuration.

Deploying custom data forms

You can create and distribute custom data forms to collect device information that will supplement the standard information available in the core database. The forms you create using the form designer can be distributed by a device deployment service or by using the Agent configuration dialog box.

Customize the forms that are distributed to devices in your management domain using the form designer. For more information, see Using custom data forms.

About the Custom data forms page

The custom data forms section consists of two pages. The Custom data forms page contains the following features:

  • Manual update forms: Selected forms are sent to each device. If the forms change or new forms are added, you must manually resend the forms to remote devices.
  • Automatic update: Remote devices check the core server for updated forms each time the inventory scanner is run, such as at startup. Each device must have a drive mapped to the ldlogon directory on the core server to access the updated forms.
  • Display forms to end user: Choose how remote devices access custom forms:
    • On startup: The selected forms run automatically at startup on each device.
    • When inventory scanner runs: The selected forms run only when the inventory scanner is run on each device. The inventory scanner runs automatically on startup, and can be run manually by devices at any time.
    • When launched from the Ivanti program folder: The selected forms appear as items in the device's Ivanti Management folder. They aren't automatically run.

About the Forms sent with agent page (under Custom data forms)

The Forms sent with agent page lists all defined custom data forms. Select which forms are made available to devices receiving this configuration task. You'll have to create forms ( Tools > Configuration > Custom Data Forms) before they can appear in this list.

Deploying software distribution

Software distribution automates the process of installing software applications and distributing files to devices. Use this agent to install applications simultaneously to multiple devices or to update files or drivers on multiple devices.

Software distribution uses a Web or file server to store packages. Devices access this package server when downloading a package. You'll need to configure a package server as described in the software distribution section. You can deploy the software distribution agent to devices before you set up a package server. For more information, see About software distribution.

About the Distribution and Patch page

Use the Distribution and Patch page to select and apply a collection of Distribution and Patch settings that have already been specified and saved with a single unique identifier or to create a new collection of settings.

  • Distribution and Patch settings: Lists the collections of settings that are available. Click an identifier in the list and then click Save to apply those settings to the agent configuration.
  • Edit...: Opens the Distribution and Patch settings dialog box, where you can change the specified collection of settings.
  • Configure...: Opens the Configure Distribution and Patch settings dialog box. This dialog lists the collections of Distribution and Patch settings you have configured.
    • New...: Opens the Distribution and Patch settings dialog box, where you can create a new collection of settings.
    • Edit...: Opens the Distribution and Patch settings dialog box, where you can change the specified collection of settings.
    • Copy...:Creates a copy of the selected collection of settings and opens the Distribution and Patch settings dialog box. This is helpful when you want to create a new collection of settings that are similar to a collection you have already configured.
    • Use selected: Applies the selected settings to the agent configuration.

About the Portal Manager page (under Distribution and Patch)

Use the Portal manager page to select and apply a collection of Portal manager settings that have already been specified and saved with a single unique identifier or to create a new collection of settings. The options on this page are enabled if you select the Use Portal Manager option on the Software Distribution page of the agent configuration.

  • Portal Manager settings: Lists the collections of settings that are available. Click an identifier in the list and then click Save to apply those settings to the agent configuration.
  • Edit...: Opens the Portal manager settings dialog box, where you can change the specified collection of settings.
  • Configure...: Opens the Configure portal manager settings dialog box. This dialog lists the collections of Portal Manager settings you have configured.
    • New...: Opens the Portal manager settings dialog box, where you can create a new collection of settings.
    • Edit...: Opens the Portal manager settings dialog box, where you can change the specified collection of settings.
    • Copy...:Creates a copy of the selected collection of settings and opens the Portal manager settings dialog box. This is helpful when you want to create a new collection of settings that are similar to a collection you have already configured.
    • Use selected: Applies the selected settings to the agent configuration.
  • Shortcut configuration: Select the locations where you want to add Portal Manager shortcuts on the managed device.
  • Start up/shut down options: Select this option if you want Portal Manager to always open when the end user logs on. This will ensure that required policy-based tasks will run on a regular basis.

About the Ivanti Workspace page (under Distribution and Patch)

Use the Ivanti Workspace page to add a Ivanti Workspace shortcut to the Ivanti program group. Note that Ivanti Workspaces are no longer included in a default installation of Ivanti Endpoint Manager.

Deploying Ivanti Security services

The security scanner (patch and compliance scanner) is installed by default with the standard Ivanti agent. However, you need to use the options on the specific Security and compliance pages when creating device agent configurations in order to configure certain aspects of how and when the security scanner runs on managed devices. You can also enable and configure custom variable override settings, frequent security scans, real-time spyware, and application blocking.

The security scanner allows you to scan managed devices for known OS and application vulnerabilities and other security risks, such as spyware, viruses, unauthorized applications, software and driver updates, system configuration security threats, custom security definitions, and more. The content of your security scan depends on your Endpoint Security for Endpoint Manager content subscription and which security type definitions you've downloaded. You can also remediate detected problems via autofix, repair tasks, and repair policies. For details on these procedures, see Patch and Compliance.

About the Custom variables page

Use this page to assign a custom variable override setting to devices with this agent configuration. The security scanner can utilize custom variables (editable values included in the definitions of certain security types) to scan for and modify specific settings and to implement standard system configuration settings to managed devices. You can change the value of a setting and select whether to override the current value with the new value, and then use this agent configuration to apply the configuration to target devices. In some situations, you may want to ignore a custom variable setting, or in other words, create an exception to the rule. Custom variable override settings let you decide which custom variables to essentially ignore when scanning devices so that they are not detected as vulnerable and are not remediated even if they meet the actual conditions of a definition's detection rules.

This page contains the following options:

  • Apply custom variables settings to this configuration: Enables custom variables and allows you to select from the Custom variables settings list.
  • Custom variable settings: Lists the collections of settings that are available. Click an identifier in the list, then click Save to apply those settings to the agent configuration. The custom variable override settings will be used on target devices when they're scanned for security definitions that include custom variables (such as security threats and viruses). Custom variable override settings let you specify setting values you want to ignore or bypass during a security scan. This is very useful in situations where you don't want a scanned device to be identified as vulnerable according to a definition's default custom variable settings.
  • Edit...: Opens the Custom variables settings dialog box, where you can change an existing collection of settings.
  • Configure...: Opens the Configure custom variables settings dialog box. This dialog lists the collections of Custom variables settings you have configured.
    • New...:Opens theCustom variables settings dialog box, where you can create a new collection of settings.
    • Edit...:Opens the Custom variables settings dialog box, where you can change an existing collection of settings.
    • Copy:Creates a copy of the selected collection of settings and opens the Custom variables settings dialog box. This is helpful when you want to create a new collection of settings that are similar to a collection you have already configured. This is helpful when you want to create a new collection of settings that are similar to a collection you have already configured.
    • Use selected: Applies the selected settings to the agent configuration.

About the Ivanti Antivirus page

Use this page to select an antivirus setting that applies to devices with this agent configuration, and to select whether to remove any existing antivirus products from those devices when they are configured.

In order to select an antivirus setting, you must first select the Ivanti Antivirus agent's check box on the Start page.

Antivirus settings let you control how the antivirus scanner operates on target devices. You can define antivirus scan parameters such as files and folders to be scanned or excluded, manual scans, real-time scans, scheduled scans, quarantine and backup options, virus pattern file update options, and the information and interactive options that display on end user devices during the antivirus scan.

If another antivirus product is installed on target devices, it will be removed automatically during Ivanti Antivirus agent configuration.

This page contains the following options:

  • Ivanti Antivirus settings: Antivirus settings determine whether the Antivirus icon appears in the device system tray, availability of interactive options to end users, email scan and real-time protection enabling, file types to scan, files and folders to exclude, infected file quarantine and backup, scheduled antivirus scans, and scheduled virus definition file updates. Select a setting from the list. Click Configure to open the Ivanti Antivirus settings dialog box, where you can create a new setting.
  • Reboot settings: Lists the collections of settings that are available. Click an identifier in the list, then click Save to apply those settings to the agent configuration.

Self-contained agent package or agent push settings

Use these options to configure how Ivanti antivirus will be installed on managed devices. The option you choose affects how large the antivirus installation package download will be. You can choose from the following options:

  • Include both 32-bit and 64-bit Antivirus setup files
  • Include only 32-bit Antivirus setup files
  • Include only 64-bit Antivirus setup files
  • Exclude Antivirus setup files
  • Include the latest virus definitions approved for distribution

About the Windows Firewall page

Use this page to enable and configure the Windows firewall on managed devices with this agent configuration. You can enable/disable the firewall, as well as configure firewall settings including exceptions, inbound rules, and outbound rules (for services, ports, and programs).

This page contains the following options:

  • Configure Windows Firewall: Enables automatic Windows firewall configuration on devices with this agent configuration.
  • Windows Firewall settings: Specifies the Windows firewall settings deployed on target devices with this agent configuration. Select a setting from the list to apply it to the configuration you're creating.
  • Configure...: Opens the Configure custom variables settings dialog box. This dialog lists the collections of Windows Firewall settings you have configured.
    • New...:Opens theWindows Firewall settings dialog box, where you can create a new collection of settings.
    • Copy...:Creates a copy of the selected collection of settings and opens the Windows Firewall settings dialog box. This is helpful when you want to create a new collection of settings that are similar to a collection you have already configured. This is helpful when you want to create a new collection of settings that are similar to a collection you have already configured.
    • Use selected: Applies the selected settings to the agent configuration.

About the Endpoint Security page

Use this page to select an Endpoint Security setting for managed devices with this agent configuration. Endpoint Security includes three components: Enpoint security, Ivanti Firewall, and Device Control.

In order to select an Endpoint Security setting, you must first select the Endpoint Security agent check box on the Start page.

This page contains the following options:

  • Machine configuration: Specifies the Endpoint Security settings for managed devices with this agent configuration. Endpoint Security settings determine general Endpoint Security operation (such as location awareness, administrator password, end user stop option, and pop-up messages), as well as which security policies are deployed for Endpoint security, Ivanti Firewall, and Device Control.
  • Edit...: Opens the Endpoint security settings dialog box, where you can change an existing collection of settings.
  • Configure...: Opens the Configure Endpoint security settings dialog box. This dialog lists the collections of Endpoint security settings you have configured.
    • New...:Opens theEndpoint security settings dialog box, where you can create a new collection of settings.
    • Edit...:Opens the Endpoint security settings dialog box, where you can change an existing collection of settings.
    • Copy...:Creates a copy of the selected collection of settings and opens the Endpoint security settings dialog box. This is helpful when you want to create a new collection of settings that are similar to a collection you have already configured. This is helpful when you want to create a new collection of settings that are similar to a collection you have already configured.
    • Use selected: Applies the selected settings to the agent configuration.

About the Agent Watcher page

Use this page to enable and configure the Ivanti Agent Watcher utility on devices with this agent configuration.

Agent Watcher allows you to actively monitor devices for selected Ivanti agent services and files. Agent watcher restarts agent services that have been stopped and resets the startup types for services that have been set to automatic. The utility also removes monitored agent files from lists of files to be deleted on reboot, in order to prevent deletion. Additionally, Agent Watcher alerts you when agent services can't be restarted, when agent files have been deleted, and when agent files are scheduled to be deleted on reboot.

This page contains the following options:

  • Use the Agent Watcher: Enables the Agent Watcher utility on devices with this agent configuration.
  • Agent Watcher settings: Specifies Agent Watcher settings deployed on target devices with this agent configuration. Agent Watcher settings determine which services and files are monitored, how often, and whether the utility remains resident on the device. Select a setting from the list.
  • Configure...: Opens the Settings List dialog box. This dialog lists the collections of Agent watcher settings you have configured.
    • New...: Opens theAgent watcher settings dialog box, where you can create a new collection of settings.
    • Edit...:Opens the Agent watcher settings dialog box, where you can change an existing collection of settings.
    • Copy...:Creates a copy of the selected collection of settings and opens the Agent watcher settings dialog box. This is helpful when you want to create a new collection of settings that are similar to a collection you have already configured.
    • Use selected: Applies the selected settings to the agent configuration.

About the Other security page

Use this page to enable and configure other security settings on managed devices with this agent configuration. Other security settings include the real-time application blocker for unauthorized applications and real-time spyware blocking.

  • Apply other security settings to this configuration: Selecting this allows you to select an Other security settings profile.
  • Other security settings: Lists the collections of settings that are available. Click an identifier in the list, then click Save to apply those settings to the agent configuration.
  • Edit...: Opens the Other security settings dialog box, where you can change an existing collection of settings.
  • Configure...: Opens the Configure other security settings dialog box. This dialog lists the collections of other security settings you have configured.
    • New...: Opens theOther security settings dialog box, where you can create a new collection of settings.
    • Edit...:Opens the Other security settings dialog box, where you can change an existing collection of settings.
    • Copy...:Creates a copy of the selected collection of settings and opens the Other security settings dialog box. This is helpful when you want to create a new collection of settings that are similar to a collection you have already configured.
    • Use selected: Applies the selected settings to the agent configuration.

About the Remote control page

Use the Remote control page to select and configure remote control settings profiles. You can also change the driver settings here.

  • Remote control settings: Lists the collections of settings that are available. Click an identifier in the list, then click Save to apply those settings to the agent configuration.
  • Configure...: Opens the Configure remote control settings dialog box. This dialog lists the collections of Remote control settings you have configured.
    • New...:Opens theRemote control settings dialog box, where you can create a new collection of settings.
    • Edit...:Opens the Remote control settings dialog box, where you can change an existing collection of settings.
    • Copy...:Creates a copy of the selected collection of settings and opens the Remote control settings dialog box. This is helpful when you want to create a new collection of settings that are similar to a collection you have already configured. This is helpful when you want to create a new collection of settings that are similar to a collection you have already configured.
    • Use selected: Applies the selected settings to the agent configuration.
  • Agent settings:
    • Install mirror driver on Windows 7 devices: Selected by default, this option uses the remote control mirror driver on devices for faster remote control performance.
    • Use screen blanking driver: This Windows 7 device option uses a special driver that can tell the target device's display driver to turn off the monitor. When active, this driver filters commands going to the real display driver to prevent them from turning the monitor back on. Remote control operators can turn screen blanking on or off from the remote control viewer application. If you're having compatibility problems with this driver, you can clear the check box to use a more compatible but possibly less effective mode of screen blanking. If you don't use the screen blanking driver, the alternative mode of screen blanking may cause some screen flicker on the target device during remote control. This option requires the mirror driver.
    • Install smart card driver: Adds remote control Smart Card authentication support. For more information, see Smart Card support (2021.1 SU1).

About the Extended device discovery page

Extended device discovery is an extension of the Unmanaged device discovery tool. It finds devices on your network that haven't submitted an inventory scan to the core database. With extended device discovery, you can use one or both of the following discovery methods: ARP (address resolution protocol) discovery, and WAP (wireless access point) discovery.

Use this page to enable and configure extended device discovery on managed devices with this agent configuration.

With ARP discovery, the extended device discovery agent listens for network ARP broadcasts. The agent then checks any ARP-discovered devices to see whether they have the standard Ivanti agent installed. If the Ivanti agent doesn't respond, the ARP-discovered device displays in the Computers list. Extended device discovery is ideal in situations involving firewalls that prevent devices from responding to the normal ping-based UDD discovery methods.

Keep in mind that you don't have to deploy the extended device discovery agent to every managed device on your network, though you can if you want to. Deploying this agent to several devices on each subnet should give enough coverage.

This page contains the following options:

  • Use Address Resolution Protocol (ARP): Enables extended device discovery using the address resolution protocol (ARP) discovery method on devices with this agent configuration.
  • ARP discovery settings:
    • Choose an ARP discovery setting: Specifies the ARP setting that controls the extended device discovery agent when performing ARP discovery on your network. ARP settings determine the discovery scan frequency and logging level. Select a setting from the list to apply it to the configuration you're creating.
    • Configure...: Opens the ARP Discovery Settings dialog box. This dialog lists the collections of ARP Discovery settings you have configured.
      • New...:Opens theConfigure ARP Discovery Settings dialog box, where you can create a new collection of settings.
      • Edit...:Opens the Configure ARP Discovery Settings dialog box, where you can change an existing collection of settings.
      • Copy...:Creates a copy of the selected collection of settings and opens the Configure ARP Discovery Settings dialog box. This is helpful when you want to create a new collection of settings that are similar to a collection you have already configured. This is helpful when you want to create a new collection of settings that are similar to a collection you have already configured.
      • Use selected: Applies the selected settings to the agent configuration.
  • Use Wireless Access Point discovery (WAP): Enables extended device discovery using the wireless application protocol (WAP) discovery method on devices with this agent configuration.
  • WAP discovery settings:
    • Choose a WAP discovery setting: Specifies the WAP setting that controls the extended device discovery agent when performing WAP discovery on your network. WAP settings determine the discovery scan frequency and logging level. Select a setting from the drop-down list to apply it to the configuration you're creating. You can also click Configure to create and apply a new setting or to edit an existing one.
    • Configure...: Opens the WAP Discovery Settings dialog box. This dialog lists the collections of WAP Discovery settings you have configured.
      • New...:Opens theConfigure WAP Discovery Settings dialog box, where you can create a new collection of settings.
      • Edit...:Opens the Configure WAP Discovery Settings dialog box, where you can change an existing collection of settings.
      • Copy...:Creates a copy of the selected collection of settings and opens the Configure WAP Discovery Settings dialog box. This is helpful when you want to create a new collection of settings that are similar to a collection you have already configured. This is helpful when you want to create a new collection of settings that are similar to a collection you have already configured.
      • Use selected: Applies the selected settings to the agent configuration.
  • Configuration download frequency (in minutes): Specifies how often managed devices with the extended device discovery agent installed check with the core server for an updated extended device discovery configuration. The agent always updates its configuration from the core when it first loads. The default value is 720 minutes (12 hours). If you set this value too high, it will take a long time for configuration changes to propagate to devices. If you set this value too low, there will be more load on the core server and the network.

About the Power management page

Ivanti Power Management functionality allows administrators to centrally control end-node power consumption by facilitating the creation, financial evaluation, and deployment of power management policies.

Use the Power Management page to select the power policy to be distributed out to the client device. While administrators centrally control the conditions under which computers and monitors stand by, hibernate, or power down, users can forestall specific Power Management actions on the client side if needed. In addition, a “soft” shutdown option protects unsaved user data. A pre-populated database of OEM wattage consumption values is matched to actual hardware inventory data, and available custom wattage settings allow high levels of precision in the estimation of financial and power savings.

The Power Management window contains the following features:

  • Use power policy on client: Enables power management in this agent configuration.
  • Power policy settings: Selects a power policy that has been created and configured to be used on managed devices.
    • Choose a power policy: Specifies the power policy that will be sent out with the agent configuration. By default one power policy is available or none.
    • Configure...: Opens the Configure power management settings dialog box. This dialog lists the collections of Power management settings you have configured.
      • New...:Opens thePower management settings dialog box, where you can create a new collection of settings.
      • Edit...:Opens the Power management settings dialog box, where you can change an existing collection of settings.
      • Copy...:Creates a copy of the selected collection of settings and opens the Power management settings dialog box. This is helpful when you want to create a new collection of settings that are similar to a collection you have already configured. This is helpful when you want to create a new collection of settings that are similar to a collection you have already configured.
      • Use selected: Applies the selected settings to the agent configuration.

    Collect the client usage info: Collects power usage from the individual client usage. This information is used to create more accurate reports of power usage and to know the exact power demands of the managed devices and the monitors that are connected to them.

About the Adaptive settings page

Use this page to manage adaptive settings. Adaptive settings allow agent settings to dynamically change on a device based on location (geofencing) or IP address. For more information, see Adaptive settings.

This page contains the following options:

  • Apply adaptive settings to this configuration:
  • Adaptive settings: Lists the collections of settings that are available. Click an identifier in the list, then click Save to apply those settings to the agent configuration.
  • Edit...: Opens the Adaptive settings dialog box, where you can change an existing collection of settings.
  • Configure...: Opens the Configure adaptive settings dialog box. This dialog lists the collections of adaptive settings you have configured.
    • New...: Opens theAdaptive settings dialog box, where you can create a new collection of settings.
    • Edit...:Opens the Adaptive settings dialog box, where you can change an existing collection of settings.
    • Copy...:Creates a copy of the selected collection of settings and opens the Adaptive settings dialog box. This is helpful when you want to create a new collection of settings that are similar to a collection you have already configured.
    • Use selected: Applies the selected settings to the agent configuration.

Deploying agent configurations to Linux and UNIX servers

IMPORTANT: Version 2022 removed agent support for AIX, HP-UX, and Solaris.

You can use the console's agent configuration tool to deploy agents to supported Linux and UNIX operating systems. For more information on Linux agent deployment, see Configuring Linux evice agents.

About the Start page (under Linux/UNIX agent configuration)

The Linux Agent configuration's Start page has these options:

  • Configuration name: Enter a name that describes the configuration you're working on. This can be an existing configuration name or a new one. This name appears in the Agent configuration window.
  • Standard Ivanti agent and Software distribution: The standard Ivanti agent is installed by default and you can't disable it.
  • Ivanti vulnerability scanner: Installs the Linux version of the vulnerability scanner.
  • Install prerequisites: (2020.1 SU1) Automatically installs any missing prerequisites.
  • Use non-repository based installation: (2020.1 SU1) Use this option if you want component downloads to happen from the core server rather than the distribution's internet repository.
  • Installation search path: (2020.1 SU1): The path to the operating system tools, typically /bin;/sbin, or /usr/bin;/usr/sbin.
  • Enable debug logging and keep files: (2020.1 SU1) Stores detailed logging and interim files under /opt/landesk.

About the Standard Ivanti agent page (under Linux/UNIX agent configuration)

IMPORTANT: Version 2022 removed agent support for AIX, HP-UX, and Solaris.

The Linux Agent configuration's Standard Ivanti agent page has these options:

  • Trusted certificates for agent authentication: Certificates control which core servers can manage devices. Check the core server certificates that you want installed with this configuration. For more information, see Agent security and trusted certificates.
  • Core address: This needs to be a resolvable name or IP address that managed devices will use to communicate with the core server.
  • NOTE: The other options on this page are dimmed and don't apply to Linux agent configurations.

Endpoint Manager 2020.1 SU1 and newer have these additional options:

  • Environment: Path used when executing agent scripts.
  • Shell: Shell used when executing agent scripts, such as /bin/bash.
  • Privilege escalation command: The privilege escalation command you want to use during installation, such as /usr/bin/sudo.

About the Agent status options dialog box

Use the Agent status options dialog box (Configure > Agent status options) to configure the following agent discovery options.

  • Gather agent status:
    • Never: Never gather the agent status. Use this option if you have a lot of unreliable devices or a slow network link.
    • For selected visible items only: Specifies that a device's agent status is updated as the device is selected in the network view. Consider using this option and disabling auto-refresh if the ratio of available devices to unavailable devices is around 50/50. Using this option and disabling auto-refresh is also good when you want to reduce the amount of network traffic generated by the console.
    • For all visible items: Specifies that all visible devices in the network view will have their agent status updated according to the refresh rate. As new devices become visible, their agent status (and health) are updated. This option generates the most network traffic.
  • Refresh every < > minutes: Indicates whether agent status is automatically updated at the interval you select. To enable this option, select the box beside Refresh. This option is disabled by default, and the refresh interval only applies if the option's box is checked. If you enable this, consider using the default 5 minute interval or longer to reduce the amount of network traffic.