To manage the settings expand the policy groups and select the individual settings then enable that settings and enter the values desired. For example to set all agents via a Super Group Policy to use the same destination IP, port and protocol change the following:
There may be some Snare settings that require a service restart.
- After the settings have been applied they will be saved in group policy. To force the settings out in the network perform a "gpupdate /force" from an administrative command prompt.
- Once complete review the agent settings and they should have received the updated settings via group policy. You can now see the following highlighted settings are updated in the Snare Remote Control Interface.
After the changes note that:
- The settings are now managed via GPO (as highlighted by the SGP tags) and the other settings (tagged as LR) remain under local control of the agent and local registry.
- Once the settings are enabled via Super Group Policy (SGP) or Agent Group Policy (AGP), the Snare Remote Control Interface can no longer change the settings. If someone was to change the registry it will be overridden with the group policy settings.
- In general the Super Group Policy template is used to control settings that are common to all Windows Agents. Where individual agent type settings are required then the agent type policies can be selected and updated.
- Where fine grain control of agent settings from within the same type of agent is required then they should be managed via the Snare Server Agent Management Console or individually.