Author Topic: Offline deployment package  (Read 8212 times)

Offline andrewbssc4

  • Newbie
  • *
  • Posts: 6
Offline deployment package
« on: January 11, 2012, 08:53:11 AM »
Is there a way to create an offline deployment package that would install the Agent, Antivirus, attach it to the ESM server, and assigned to the proper group all silently to the end user?

Offline glenmm

  • Moderator
  • Comodo Member
  • *****
  • Posts: 47
Re: Offline deployment package
« Reply #1 on: January 24, 2012, 05:02:48 PM »
Nothing like that currently exists, but it is a feature we are looking at. For now, you could deploy 2 packages, one with the CIS 5.9 msi itself, then deploy the downloaded Agent, and endpoints will connect to the Unassigned group. From there you can move them to specified groups.

Offline andrewbssc4

  • Newbie
  • *
  • Posts: 6
Re: Offline deployment package
« Reply #2 on: February 06, 2012, 11:59:06 AM »
I think I understand what your saying.  If I push the agent only to all the machines, then ask the users to install the CIS themselves at their leisure, I'll be able to see in the admin console the computers coming online after the CIS install and move them to the appropriate groups.  Is this correct?

Offline andrewbssc4

  • Newbie
  • *
  • Posts: 6
Re: Offline deployment package
« Reply #3 on: February 06, 2012, 01:53:08 PM »
I tried the above but it doesn't seem to work.

First I pushed the Agent to a new machine. 
Then I installed the CIS on the client machine manually. 
But it seems the ESM never detects that the CIS was installed.

Should it?  Am I missing a step?

Offline glenmm

  • Moderator
  • Comodo Member
  • *****
  • Posts: 47
Re: Offline deployment package
« Reply #4 on: February 08, 2012, 04:05:11 PM »
If you do it in the reverse as I described (first CIS then Agent) it will work.

Offline andrewbssc4

  • Newbie
  • *
  • Posts: 6
Re: Offline deployment package
« Reply #5 on: February 09, 2012, 07:41:48 AM »
That would mean the users would be running with the CIS defaults as opposed to the defined profile until an agent is manually deployed to them and attached to the ESM.  I guess it looks like it'll be a one by one pc install.  It would be nice if you guys came up with a standalone installation process for CIS installs that would automatically connect to the ESM.  Thanks.

Offline gta3user

  • Newbie
  • *
  • Posts: 7
Re: Offline deployment package
« Reply #6 on: February 09, 2012, 08:02:02 AM »
not sure if this is what you need, but try
export this key value from the managed computer
HKEY_LOCAL_MACHINE \ SYSTEM \ Software \ COMODO \ Firewall Pro \ Options

You can then use this reg file as part of the off-line installation

Offline andrewbssc4

  • Newbie
  • *
  • Posts: 6
Re: Offline deployment package
« Reply #7 on: February 09, 2012, 11:00:19 AM »
Looks like that was the trick.

- Export that registry value.
- Push Agent to all machines from ESM.
- On clients run exported reg file FIRST.
- Install CIS.
- Reboot after CIS install.

After the reboot the CIS will automatically be hooked to the ESM and be updated with the policies.

Thanks GTA3USER.

Offline Denmihalich

  • Newbie
  • *
  • Posts: 17
Re: Offline deployment package
« Reply #8 on: February 14, 2012, 12:01:56 PM »
I tried the above but it doesn't seem to work.

First I pushed the Agent to a new machine. 
Then I installed the CIS on the client machine manually. 
But it seems the ESM never detects that the CIS was installed.

Should it?  Am I missing a step?

Hello!

Could you provide some additional information to help us solve the problem?
- What OS type was your endpoint?
- Which versions were CIS and ESM?
- What was the type of CIS you have installed (standalone or not)?
- Did endpoint machine reboot after CIS installation?

Thanks for your answers in advance!

Offline alex_gubernsky

  • CESMUser
  • Newbie
  • *
  • Posts: 12
Re: Offline deployment package
« Reply #9 on: March 30, 2012, 10:30:47 AM »
Hi Andrew,

We are glad to inform you that the feature you were asking about some time ago is now available in the latest beta version, which was released yesterday. By using new updates manager you’ll be able to choose a CIS package you like to embed into ESM Agent installation and download it.

Please visit this link with the announcement for more details: http://forums.comodo.com/endpoint-security-manager-20-business-edition/endpoint-security-manager-business-edition-21-beta-released-t83315.0.html

We will be glad to hear your feedback about this feature particularly and the new version of the product in general.

Sincerely,
 Alexander

 

Seo4Smf 2.0 © SmfMod.Com | Smf Destek