Versions Compared

Old Version 6

changes.mady.by.user Svetlana Sheptiy

Saved on

compared with

New Version Current

changes.mady.by.user Svetlana Sheptiy

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Tip
titleRecommendation

Customers who use AMC to push configuration to the Agents, are encouraged to migrate to this new pull mechanism where Agent policies are defined in SAM, and Agents will pull its policy updates from SAM.
This new mechanism is more secure for the end points and provides ability to manage Agents configuration without having the web access enabled on every snare agent managed endpoint.

Please follow the steps on this page to migrate from AMC to SAM for remote management of Agents' configuration.

The existing AMC in Snare Central will be deprecated at a future date still yet to be announced as customers will only be able to manage agent policies from the SAM in the future. 

Table of Contents


Glossary

Terminology comparison between AMC and SAM

Snare Central AMCSAMExplanation
Snare Central | Agent Management | Snare Agents | Remote ManagementWindows SAM | Agents | Agents Management | Agents Policies
or 
Snare Central | Agent Management | Snare Agents Manager | Agents | Agents Management | Agents Policies		Location of remote Agent configuration management in the Product 
AMC ObjectiveAgents GroupEntity that allows to manage configuration of a group of Snare Agents that matches defined filters, such as Agent type, version range, IP filters, Hostname regular expression. 
Master ConfigurationMaster ConfigurationAgent configuration that is used to apply to all the Snare Agents managed by a specific Objective/Group. 
AMC pushes configuration on scheduleAgents pull configuration from SAM as per polling frequency (configurable by Group)Configuration delivery method
Agent Management Console (IA_SAM_CONFIG)Agent Management Console (IA_SAM_CONFIG)License feature required for using this functionality


Migration from AMC to SAM

Note

Before starting the migration process, please get familiar with Agents Policies Management page in this User Guide.

Please take note of Compatibility Note and Recommendation in the Release Notes for Snare Agent Manager v2.0.0

  1. Check the version of the Agents in your fleet and upgrade them to latest version (v5.8.0 or newer). Earlier versions are not supported.
    If you have Snare Agents older than 5.5.0, and plan to upgrade them using SAM, please upgrade these agents BEFORE upgrading your SAM to version 2.0.0 or newer.
  2. If using SAM on Windows, make sure SAM has "Agent Management Console" license feature.
  3. Open SAM's Agents Policies page in a separate browser window (see page location in the table above)
  4. For each AMC Objective in Snare Central:
    1. Select an AMC Objective in the list
    2. Click Schedule in the top menu, select Schedule Never to stop pushing configuration from AMC to Agents 
    3. Click Configure in the top menu
    4. In SAM, click Add New Agent Group icon
    5. Transfer AMC Objective settings to the Create New Group dialog in SAM. 
      Use one of the Agents that was managed by this AMC group to pull Master Configuration from. Enter its details in Master Configuration section of the dialog.
      Refer to SAM User Guide > Agents Policies Management > Creating Agents Group> /wiki/spaces/SAM/pages/2172977159 for details. 

       

Notes: 

  1. In SAM, each group manages a single Agent Type. Hence, if you need to manage both Windows and Desktop agents, please create 2 separate groups.
  2. SAM allows to filter Agents not only by hostname regular expression, but also by IP Netmask, CIDR Block and IP Regex. Up to 5 IP filters are allowed per group. More Details: Agents Policies Management - v2.0.0/wiki/spaces/SAM/pages/2172977159
  3. In SAM, an Agent is automatically matched to the first group which filters it matches.  
  4. While AMC is pushing configuration to the Agents, in SAM the Agents are pulling the configuration from SAM. Hence the Agents are not required to keep open web port and SAM does not need to know the Agents' passwords.
  5. In SAM, Master Configuration needs to be provided during the group creation. It can either be pulled from an Agent, or can be uploaded from a JSON file. More Details: Agents Policies Management - v2.0.0/wiki/spaces/SAM/pages/2172977159
  6. In SAM, Master Configuration can be modified either via SAM UI (selected fields only), or by editing a group and uploading it from an Agent or from a JSON file. More Details: Agents Policies Management - v2.0.0#Updating-Group’s-Master-Configuration/wiki/spaces/SAM/pages/2172977159
  7. In SAM, User can view the list of Agents managed by the Group and their status by clicking on the group name. More Details: Agents Policies Management - v2.0.0/wiki/spaces/SAM/pages/2172977159

Feature Comparison

List of Agents

AMCSAM
  • Click on an AMC Objective
  • Click Regenerate in the top menu
  • Navigate to the Left tab Snare Agents to see 4 categories of Agents: 
    • Agents matching the master configuration (if master configuration is set)
    • Agents with a configuration that is different to the master configuration
    • Agents that cannot be contacted
    • Agent with a type different than Objective's Agent Type
Image Removed

Image Added

  • Click on a Group
  • See the Agents assigned to the group listed in the right panel
Image Removed





Image Added

Master Configuration

AMCSAM
  • Click on an AMC Objective
  • Click Regenerate in the top menu
  • Navigate to the second tab Master Config to see Master Configuration details and edit selected settings.

Image Modified

  • Click on a Group
  • Click Master Configuration tab in the right panel to see Master Configuration details and edit selected settings..

Image Modified

Issues Applying Configuration

AMCSAM
  • Click on an AMC Objective
  • Click Regenerate in the top menu
  • Navigate to the Processing Errors tab to see any issues connecting to Agents

Image Added

  • Navigate to the Config Differences tab to see side by side comparison of Agent configuration to Master Config

Image Added

  • Click on a Group
  • Find the Agent in the list of Agents
  • See the Agent Status. 
    If the Agent connected to SAM, but failed to apply all or some of the settings from Master Configuration, its Status will be Out of Date. 
    More details about Agent statuses:      /wiki/spaces/SAM/pages/2172977159

Image Added

  • Click the status to view the errors in a pop-up dialog:

    Image Added