How can I best address installing and managing Agents over slow WAN links? (NETIQKB1288)

  • 7701288
  • 02-Feb-2007
  • 04-Apr-2012

Environment

Security Manager 6.0

Security Manager 6.5

Situation

How do I install agents outside of the firewall?
How do I install agents on a slow WAN link?
How do I install agents using a slow connection?

Resolution

The Manual agent installer designed to be run on the agent(s) that are unable to be installed as managed agent(s). This type of agent install, will save the bandwidth used by Central Computer to send the necessary files to a prospective agent. Additionally, it is designed to address firewall concerns. For more information about this new feature, please refer to the following Knowledge Base article:

    Other settings to consider modifying are as follows:

    • Review your need for heart-beating and service availability reporting. These settings are configurable globally from the Configuration | Global Settings | Agent Properties page.
    • Consider increasing the buffering time slightly. Significantly increase the communication failure retry times, and simultaneously reduce the number of retry attempts. These settings are also configured from the Agent property pages, as described above.
    • Make configuration and rule changes in batches. All such changes are pushed out dynamically, at the next heartbeat interval. If you only make changes once a day, for example, new configurations will go out only once a day to all Agents.


    Cause

    There are times when the Central Comptuer and the Security Manager agents to be monitored are connected via slow link. Also there are times when the agents are outside of the firewall.

    Additional Information

    Formerly known as NETIQKB1288