Overview

Saner CVEM enables you to manage agent settings at various levels of control. These configurations allow you to define how agents perform scans, remediation, content updates, upgrades, and logging.

By default, Saner CVEM assigns a standard configuration to all Saner Agents. However, you can create custom agent configurations and assign them to specific groups to better control agent behavior.

This article explains the different agent settings available in Saner CVEM and how you can configure them.

Agent Configuration Categories

You can configure the following Saner Agent settings:

• Scan

• Schedule

• Remediate

• Network

• Upgrade

• Language

• Logs

Each setting is explained in detail below.

1. Scan Configuration

Control how the agent performs vulnerability and compliance scans.

• Scan Mode:
  Choose between:

  • Low Throttle: Specify a CPU usage limit to minimize scan impact. You can adjust the percentage of CPU allocated during scans.

  • Full Throttle: Uses up to 25% of available CPU (or one core) to perform scans more quickly.

• Scan Types: 

  • Scan for Vulnerabilities: Enabled by default.

  • Scan for Compliance: Scan for Compliance is enabled by default. 
    Note :  You can disable this setting based on your scan requirements. 

• Missed Scan Behavior:
  Define what happens if a scheduled scan is missed:

  • Immediate Scan: Start as soon as a missed scan is detected.

  • Postpone by X Hours: Delay the scan by a specific number of hours.

  • Next Scheduled Scan: Wait until the next scheduled scan time.

2. Schedule Configuration

Set the timing for downloads and scans.

• Download Time: Choose when agents should download updated security content.

• Scan Time: Specify when agents should start scanning.

• Agent Messaging Mode:

  • Live Mode: Maintains a continuous connection with Saner CVEM for instant command execution.

  • Poll Mode: Checks the Saner CVEM server periodically for updates or commands.

3. Remediate Configuration

Control where the agent downloads patches from.

• Vendor Patch Server:

  • Default: Use the device’s configured update sources.

  • Default with Alternate/Secondary Microsoft Patch Server: If the default server is unavailable, an alternate server is used.

• Third-Party Patch Server:

  • Default: Use Saner CVEM’s patch repository.

  • Local: Configure a local server (HTTP, HTTPS, or FTP) for third-party patch downloads.

• Buffer Patches:

  • Enable patch buffering during downloads.

  • Configure maximum cache size (50MB to 999MB) and maximum buffering speed (10% to 99%).

• Missed Automation Rule Behavior:

  • Immediate Execution: Execute as soon as a missed rule is detected.

  • Next Scheduled Execution: Execute based on the next schedule.

4. Network Configuration

Configure proxy settings if needed.

• Proxy Settings:

  • Enter the Proxy Host Name or IP Address (without protocol or port).

  • Enter the Proxy Port.

  • If required, enable authentication and provide the User ID and Password.

Example:

• Hostname: proxy.example.com or 192.168.1.1

• Port: 8080

5. Upgrade Configuration

Manage how Saner Agents are upgraded.

• Automatic Upgrade: Agents automatically update to the latest version.

• Manual Upgrade (Disabled): Agents must be updated manually.

6. Language Configuration

Select the preferred language for the agent.

• Currently, English (ENG) is the only supported language.

7. Logs Configuration

Control how logs are generated and saved.

• Enable Logs: Turn logging on or off.

• Log Types:

  • Audit Logs: Save minimal operational logs.

  • Debug Logs: Save detailed troubleshooting logs.

Key Notes

• Saner CVEM provides default configurations, but it's highly recommended to create custom agent configurations based on organizational needs.

• Assign configurations at the group level for easier management.

• Always review proxy and patch server settings carefully when deploying to restricted networks.

Conclusion

Configuring Saner Agents with the right settings ensures optimal performance, timely scanning, accurate remediation, and secure communications. Saner CVEM provides a flexible and powerful platform to customize agent behavior according to your organization’s needs.

If you require further assistance with agent configuration, please contact our support team.