Security Agent Installation Procedure

For Installation of Security agents, following activities need to be carried out:

1. Login to the desktop with an Admin account.

2. Download the Force point DLP agent from the Antarang portal (link provided below).
Once the agent setup is downloaded double click on the setup, click on next-next to
install the agent.
https://antarang.icegate.gov.in/communities/service/html/communityview?communityUuid=ef
e91974-3e09-47f7-bc9e-
3c9803c81334#fullpageWidgetId=W226b349f2bbd_4d5d_8ec8_b653a0ba3966&file=c3f3fb22
-c404-4492-b8bd-050dc44d4a0d

3. Download Trend Micro Endpoint Sensor (APT) agent from Antarang Portal (link provided
below).
https://antarang.icegate.gov.in/communities/service/html/communityview?communityUuid=ef
e91974-3e09-47f7-bc9e-
3c9803c81334#fullpageWidgetId=W226b349f2bbd_4d5d_8ec8_b653a0ba3966&file=e23285d
3-8b6b-4036-a09c-228864253b7d

Once the setup is downloaded, open command prompt and navigate to the setup path,
type EndpointSensor.exe and hit on enter (Please check snip for reference).

4. Download Symantec Endpoint Protection (SEP) setup on desktop from Antarang portal
(link provided below).
https://antarang.icegate.gov.in/files/app/s/PmYBa2XqrEFa48bMZNEqiwLwozE5

Once the agent setup is downloaded double click on the setup, click on next-next to
install the agent.

Note: Restart your machine after agent installation.

*Antarang can be accessed through SSOID only. Please take the help of Custom official or
service centre operator at location to access Antarang.
SOP for Downloading Security Agents from SFTP server to desktop at Custodian
Location

1) Create a folder in D: Drive of Desktop/AIO and name it as “Security Agents”

2) To connect SFTP server, WinSCP client is required on desktop/AIO. Access below link
to download WinSCP-5.17.3-Setup

https://drive.google.com/file/d/1nN4uT6udj-
kR9BRq2SMwNRK4m7JuWLij/view?usp=sharing

3) Copy and paste above link on system’s web browser, you will be navigated to the web
page as shown below; click on the download button to download the setup.
4) Setup will be downloaded in download folder as shown below snap.

5) Navigate to download folder> right click on downloaded setup> select Extract All option>
click on Extract button.
6) This will unzip the WinSCP-5.17.3-Setup at current location:

7) Right Click on WinSCP-5.17.3-Setup and select Run as administrator option.

8) User Access Control needs to be accepted or it will prompt for admin credentials.
9) Following pop-up will appear, click on Install for all users.

10) Click on Accept as shown in below snap.

11) Click on Next as shown below.

12) Click on next as shown below

13) Click on Install as shown below

Installation will start

14) Uncheck option Open getting start page and click on finish.
 For accessing SFTP server some configuration changes need to be performed as
shown below:

15) Click on Advance option as shown in below figure.

16) Select Executing dummy Protocol command and click on OK as shown in below snap
17) Login with the provided Hostname/IP address (10.1.101.2), username : softuser1 and
password : Pune#456 in below fields. Port number would be 2244

18) Following screen would be appeared in front of RE/User

19) RE/User have to change the Drive & folder in the left pane (destination side) and select
the new folder which is named as “Security Agents”

20) Double Click on the Folder ““Security Agents”

21) Now RE\User just needs to select all the folders in Right Pane and drag them into Left
Window towards destination
 Security agent Installation Status
Objective of document: To explain about when resident engineer has to communicate with
Saksham seva (Saksham.Seva@icegate.gov.in) and when he has to consider that a security
agent is succefully installed on desktop.
Under Section A: - successful installation of DLP/APT/Antivirus agents.
Under Section B: - problems with DLP/APT/Antivirus agents installation.

Section A: - Agents confirmation for successful installation

1. Symantec Antivirus Protection (SEPM)
To check if Symantec Endpoint Protection (SEP) Successfully installed:
a. Open SEP client from tools tray or you can type Symantec in search bar of your
system as shown in below snap shots:
b. If you found a green tick with one-day prior virus definition date (as shown in below
snap), this means SEP is installed correctly and is working fine.
 c. Click on help>troubleshooting and navigate to Server Connection Status option,
Status should always be connected as shown in below screenshot.

2. Force point Date Leakage Prevention Agent (DLP)

To check if Force point DLP agent is successfully installed:
1) Open DLP agent from tools tray or from search bar by typing Force point:
2) Click on update option from top right corner, connection status should be connected
and status should be enabled with green tick mark as shown in below snap:

3. Trend Micro Endpoint Sensor (APT Sensor)

To check if Trend Micro Endpoint sensor (APT) is installed successfully:
a. After successful installation, you will get success message as shown in below snap:
b. Navigate to below path and check if ESClient application is present in ESE folder

C:\Program Files\Trend Micro\ESE

c. Open task manager and check if below highlighted services are running:
Under Section B: - problem with DLP/APT/Antivirus agents.
In below all cases System Manager has to contact with Saksham
Seva(Saksham.seva@icegate.gov.in) with hostname of the machine, IP address of the machine
,screen shot of the error message and contact number of Resident Engineer to saksham seva.

1. Symantec Antivirus Agent(SPEM)

Case 1:- While opening SEP agent from tools tray or search bar, if you found error
message as shown in below snap it means SEP agent is not installed correctly or
got corrupt and needs to be installed again.

Case 2: - If you see a yellow coloured exclamation symbol on SEP, that means
either your SEP client is not communicating with manager server or not having
latest virus definitions.

Case 3;- Check if SEP client is communicating with its Manager, for this navigate to
help>troubleshooting>Server Connection Status option and check the error
message
(Tip: Please check your CBIC LAN connectivity status)
 2. Force Point DLP Agents issues
1) Check the connection status, if it is disconnected please check your CBIC network
connectivity if it still not works contact Saksham seva(Saksham.seva@icegate.gov.in)

3. Trend Micro Endpoint Sensor (APT Sensor) issues

a. While installing Trend Micro Endpoint sensor agent if you see error message as
shown in below snap and you are not able to see services running in task manager
that means installation got corrupted.
 1) For this you have to uninstall Endpoint sensor from system by running uninstall package
which can be downloaded from below link.
https://antarang.icegate.gov.in/files/form/anonymous/api/library/328188b3-7e42-425f-
9c0d-3bc0967308b6/document/d4715b9f-f0fb-4c52-97b1-
280a679c7c87/media/EndpointSensor_Uninstall

2) Post uninstallation reboot the machine and proceed with a fresh installation.