Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Tip
titleRecommendation

Customers who use AMC to push configuration to the Agents, are encouraged to migrate to this new pull mechanism where Agent policies are defined in SAM, and Agents will pull its policy updates from SAM.
This new mechanism is more secure for the end points and provides ability to manage Agents configuration without having the web access enabled on every snare agent managed endpoint.

Please follow the steps on this page to migrate from AMC to SAM for remote management of Agents' configuration.

The existing AMC in Snare Central will be deprecated at a future date still yet to be announced as customers will only be able to manage agent policies from the SAM in the future. 

Table of Contents

Glossary

Terminology comparison between AMC and SAM

...

  1. In SAM, each group manages a single Agent Type. Hence, if you need to manage both Windows and Desktop agents, please create 2 separate groups.
  2. SAM allows to filter Agents not only by hostname regular expression, but also by IP Netmask, CIDR Block and IP Regex. Up to 5 IP filters are allowed per group. More Details: Agents Policies Management - v2.0.0
  3. In SAM, an Agent is automatically matched to the first group which filters it matches.  
  4. While AMC is pushing configuration to the Agents, in SAM the Agents are pulling the configuration from SAM. Hence the Agents are not required to keep open web port and SAM does not need to know the Agents' passwords.
  5. In SAM, Master Configuration needs to be provided during the group creation. It can either be pulled from an Agent, or can be uploaded from a JSON file. More Details: Agents Policies Management - v2.0.0
  6. In SAM, Master Configuration can be modified either via SAM UI (selected fields only), or by editing a group and uploading it from an Agent or from a JSON file. More Details: Agents Policies Management - v2.0.0#Updating-Group’s-Master-Configuration
  7. In SAM, User can view the list of Agents managed by the Group and their status by clicking on the group name. More Details: Agents Policies Management - v2.0.0

Feature Comparison

List of Agents

AMCSAM
  • Click on an AMC Objective
  • Click Regenerate in the top menu
  • Navigate to the Left tab Snare Agents to see 4 categories of Agents: 
    • Agents matching the master configuration (if master configuration is set)
    • Agents with a configuration that is different to the master configuration
    • Agents that cannot be contacted
    • Agent with a type different than Objective's Agent Type

Image Added

  • Click on a Group
  • See the Agents assigned to the group listed in the right panel





Image Added

Master Configuration

AMCSAM
  • Click on an AMC Objective
  • Click Regenerate in the top menu
  • Navigate to the second tab Master Config to see Master Configuration details and edit selected settings.

Image Added

  • Click on a Group
  • Click Master Configuration tab in the right panel to see Master Configuration details and edit selected settings..

Image Added

Issues Applying Configuration

AMCSAM