To manage the settings expand the policy groups and select the individual settings then enable that settings and enter the values desired. For example to set all agents via a Super Group Policy to use the same destination SAM IP address, port and protocol authentication key for all agents change the following:
( note the auhenticaiton key is the default, in a normal production environment you would set a custom key )
Note There may be some Snare settings that require a service restart.
- After the settings have been applied they will be saved in group policy. To force the settings out in the network perform a "gpupdate /force" from an administrative command prompt.
- Once complete review the agent settings and they should have received the updated settings via group policy. You can now see the following highlighted settings are updated in the Snare Remote Control InterfaceAgent Access Configuration Interface that contains the SAM settings.
After the changes note that:
- The settings are now managed via GPO (as highlighted by the SGP tags) and the other settings (tagged as LR) remain under local control of the agent and local registry.
- Once the settings are enabled via Super Group Policy (SGP) or Agent Group Policy (AGP), the Snare Remote Control Access Configuration Interface can no longer change the settings. If someone was to change the registry it will be overridden with the group policy settings.
- In general the Super Group Policy template is used to control settings that are common to all Windows Agents. Where individual agent type settings are required then the agent type policies can be selected and updated.
- Where fine grain control of agent settings from within the same type of agent is required then they should be managed via the Snare Server Agent Management Console (AMC) or individually.