Snare Agent QuickStart

Owned by Stephen Irecki
Last updated: Oct 13, 2022 by Andrew Madge
1 min read

Summary

This QuickStart Package is designed to assist customers in setting up Snare agents and to provide expert advice on how to fully utilize its functionality and apply it in business operations. This package also provides direction on Snare agent installation and configuration to enable data collection, destination configuration and licensing.

Pre-requisites

The following list of requirements must be met by the customer before work can begin:

  • Login details for the Snare SLDM portal.

  • Administrative access to 1x system per operating system that the customer wishes to use.

  • Administrative access to a Windows server for installation of SAM (if required), with agents able to connect to the system on port 6262.

  • Domain admin access for GPO review (if required).

Agent QuickStart Package

The following items are included in the QuickStart package:

  • Demonstration of retrieving licenses and installation media from SLDM.

  • Review licensing strategy:

    • Standalone

    • Snare Agent Manager (SAM).

  • Installation and configuration of SAM if required (Windows server to be supplied by customer).

    • License registration and installation.

    • Authentication key.

    • Agent tags.

  • Installation of 1 x Snare agent per required operating system, with demonstration/overview of the following:

    • Audit policy configuration inc. USB, FAM & RAM (Windows only).

    • Log configuration. o File Integrity Monitoring.

    • Registry Integrity Monitoring (Windows only).

    • Heartbeat & Agent Log.

    • Licensing.

    • Destination configuration.

    • Access configuration.

    • General configuration.

    • Confirmation of log flow.

  • Review centralised configuration options:

    • GPO

    • Agent Management Console (demonstration of AMC configuration pull & push if purchased)

  • Review of deployment strategies covering both new configuration deployment and in-place upgrades:

    • Manual installation.

    • MSI builder.

    • Silent installer.