...
At the end of each setting on the configuration pages, one of these characters may be displayed: (SGP), (AGP), (LR), (D). These are sources from where the setting came as explained below:
- SGP (Super Group Policy (SGP): If different types of snare Snare agents (Snare for Windows, Snare Epilog for Windows, Snare for MSSQL) are running on a network then super group policy can be applied and all the agents will adhere to this policy. The registry path of SGP is SOFTWARE\Policies\InterSect Alliance\Super Group Policy.
- AGP (Agent Group Policy (AGP): This is the regular group policy applied to all Epilog agents. The registry path is SOFTWARE\Policies\Intersect Alliance\Epilog.
- LR (Local Registry (LR): This is the setting assigned to the agent during installation and applied to the agent when neither of the SGP and AGP are applied to the agent.
- D (Default (D): If due to any reason the agent cannot read either of SGP, AGP or LR registry values then it assigns the default settings referred to as (D).
Below is a sample of an Administrative Template (ADM) file that can be loaded into a Group Policy Object to assist with selecting and setting configuration options.
CLASS MACHINE
CATEGORY !!"InterSect Alliance Snare Epilog Settings" #if version >= 4 EXPLAIN !! "Contains examples of different policy types.\n\nShould display policy settings the same as \nADMX File - Example Policy settings category." #endif CATEGORY !!"Config" ;sets policy under "Software\Policies\InterSect Alliance\Epilog\Config" POLICY !!"Override detected DNS Name" #if version >= 4 SUPPORTED !!"This setting works with all agents" #endif EXPLAIN !!"This setting specifies the Hostname of the client.\n\n Must be not more than 100 chars, otherwise will be truncated." KEYNAME "Software\Policies\InterSect Alliance\Epilog\Config" PART !!"Override detected DNS Name with:" EDITTEXT EXPANDABLETEXT VALUENAME "Clientname" END PART END POLICY END CATEGORY;CONFIG_CATEGORY