Endpoint Management

A description of the endpoint management software agents that must run on each computer.

Introduction

An "endpoint" in IT parlance is a computing device on the network that interfaces with a human, and encompasses desktop computers, laptops, tablets, smartphones, printers, VoIP phones, and more. In order for CompHelp to manage a large fleet of computers and tablets, we install three endpoint management agents, as follows.

BigFix

BigFix is endpoint management software the collects inventory information (model and serial number, disk space, memory size, installed programs, et cetera), tracks operating system and software updates, and deploys software remotely. It has a long history, and is widely used on campus, which is the reason that Chemistry has opted to use it.

To install it on Windows:

  • Connect to \\chemfiles.chem.wisc.edu\Software Distribution\Windows\ in Windows Explorer
  • Run Chemistry-BigFixAgent.msi
  • Click through the steps to install the software.
  • When it is done, nothing much will seem to happen. The BES Agent runs in the background, and does not require a reboot.

To install it on Mac:

  • Connect to smb://chemfiles.chem.wisc.edu/Software Distribution/MacOS in Finder
  • Double-click on Chemistry-BigFix.dmg to mount the disk image
  • Double-click on the BESAgent-10.0.xx.xx-BigFix_MacOS11.0.pkg file.
  • Click through the steps to install the software.
  • When it is done, go to the Privacy & Security tab in System Settings to enable Full Disk Access for BESAgent.
  • When it is done, nothing much will seem to happen. The BESAgent.app runs in the background, and does not require a reboot.

To install it on Linux, please contact CompHelp to get the correct installation file for your distribution.

Qualys Cloud Agent

Qualys Cloud Agent only collects inventory information on the operating system version and installed applications, which it reports to the Qualys Cloud Platform console. The Cloud Platform compares that inventory information against its exhaustive database of security vulnerabilities, which alerts CompHelp staff to urgent security flaws, and helps us make informed decisions about software updates.

The College of Letters & Science IT staff has adopted the Qualys platform, and requires it for all L&S departments. The agent software is customized for the Dept. of Chemistry. Please let BigFix install it, or contact CompHelp to obtain the custom installer.

Cisco Secure Endpoint

Cisco Secure Endpoint is an active endpoint protection agent, which combines the functions of a traditional anti-virus software with anti-malware protection, and monitoring for suspicious activity. It will attempt to intercept and quarantine files when it detects viruses, trojans, ransomware, and the like. It reports incidents to the Secure Endpoint console for follow-up by CompHelp and L&S IT staff.

UW System policy requires endpoint protection software on all computers connected to the network. L&S has implemented CSE. The agent software is customized for the Dept. of Chemistry. Please let BigFix install it, or contact CompHelp to obtain the custom installer.



Keywordsbigfix, qualys, cisco secure endpoint, security, policy   Doc ID136173
OwnerJonathan G.GroupChemistry Department
Created2024-03-20 16:45:05Updated2024-03-21 09:39:59
SitesChemistry Department
Feedback  0   0