| Info |
|---|
Thank you for choosing CyberCNS. Please find below scenarios to help you choose the type of Agent suitable for your environment. Please note CyberCNS supports only 64-bit systems for scanning and agent installation purposes. |
...
The Probe is a Windows Service that is installed on the Windows machine in the network you would be running scans on. The Windows Service runs under the local system permission but requires the following prerequisites
4 core CPU on the machine
Minimum of 4 GB RAM for the first 1000 Assets and 1GB for every additional 500 assets.
Reachability to all the subnets needs to scanbe scanned.
Ports 443 outbound opened to the installation domain <yourcompany>.mycybercns.com
Admin SMB shares permission to login into the remote system and fetches required data.
The Probe is useful for an office environment where you have controlled IP Addressing.
It deploys the following techniques to get to the devices
Windows - It attempts to use the Admin SMB share to send a small executable called the Dissolvable agent that it then runs on the remote machine to fetch the details. It probes the shares using standard SMB tools and does an NFS discovery to check any NFS shares.
Active Directory - It uses SMB to query the users, and groups from the Credentials provided during the AD setup in the Master credentials.
Linux - It uses SSH credentials to log in to the box and figure out using Linux commands what is running on the machines.
Network Devices - It uses SNMP to discover the Sysobjectid and look up the version of the device and then query the vulnerabilities for the version. It also connects to OEM APIs to get the vulnerability details.
You can discover multiple subnets(CIDR/IP Range/Static IP) using a single Probe.
The probe will require AD Credentials in the case of the AD environment for scanning purposes.
In the case of a Non-AD Environment, if any central system is able to communicate with the other systems in the network it solves the purpose.
...
Navigate to the Company under which the agent is to be installed and open the Probes/Agents section to get the installation command. ( Below image can be referred)
Select the install option as to either Probe, Lightweight or Scan install.
Click on Download once the option is chosen, and then run the command for the selected company as shown below. OR Copy the complete command to the clipboard using the copy option in the command box.
Open Powershell as an administrator, and run the script.
A probe or lightweight agent will be installed in the devicechosen asset.
If Probe/ Lightweight is chosen then it installs the CyberCNS service into the agent system, whereas the Scan agent will only scan that system without installing a CyberCNS service. Using the installed service we can use a feature of the scheduler to help schedule further scans.
Select Exe/ Msi format of the installer for the window Windows operating system.
...
To Install as a Lightweight Agent
...
| Info |
|---|
Web installer format is available for Lightweight agent only. |
Click on select Exe/Msi/web installer format for the window operating system.
...
to install lightweight agent on the windows system.
Either download a Lightweight agent for the selected company as per below image or use the command shown in the grey box to copy and run it under Powershell as an administrator for windows.
...
Click on Select Web Installer format for the Windows operating system.
The agent will be downloaded in the download folder ( or the set folder for download) of the system used for download.
...
Navigate to the download folder, Right-click on the downloaded file, and click on Run as administrator.
| Table of Contents |
|---|
...
WebInstaller installation window will appear as below showing the status of agent installation.
To run a scan
Once the download is completed, select the option to Scan and run the command.
A scan agent will help to do a one-time scan.
...
Uninstallation Steps for Windows(Probe & LightWeightAgent)
...
Please use the option with the proxy format for an authenticated proxy:
-p username:password@IPaddress or Hostname:port
e.g. -p user:pass@proxy.example.me:3128
For unauthenticated Proxy
-p IP address or Hostname:port
e.g. -p proxy.example.me:3128
Tags support for LightWeight Agent
...