Deployment Settings
The Download Components section provides download links and configuration files for different types of installations. Mainly, there are two types of component deployments available for end-users. Agents and Outlook Add-ins. Agents are used for system-level operations like compliance checks DNS traffic filtering, and client traffic blocking. On the other hand, Outlook Add-in deployment is used for reporting suspicious e-mails from users to prevent phishing attacks.
Also Portal has support on Linux and macOS. The Installation is explained under the "Getting Started" guide. The deployment steps are similar but there are some minor differences which are explained in the guideline.
Installation Management
Microsoft Windows Agent: Users can download the agent package manager installer for the Windows-based system by clicking the download button. Once installation and configuration are completed, the threat protection module is started automatically.

You can install an agent with .exe format without requiring user interaction. To install the .exe agent silently, use the silent flag on the command line like below:
C:\"Path to Installer executable" --silent
The agent with .msi format should be installed with command that provided under the "Command to Install MSI Package" section.
Linux Agent: Users can get the installation command by clicking the "Download Service Installer" button. Copy and paste the installation command on the Linux terminal, and the machine information will appear on the portal.

The example of the installation command is like this:
macOS Agent: Users can download the installer package of the macOS agent. Click on the .pkg package and install it with the config file provided on the installation page.

Manuel Deployments
This section allows users to deploy agents manually. The users can define the specific device, the agent, and version. In the portal, users can scan the IP range with the Sensor component and assign credentials to the machines.

Advanced Agent Deployment on Windows
MSI Install/Uninstall Parameters:
Examples:
Only installation:
msiexec /i "<path_to_msi_package>" /qn /norestart URL="<URL>" PROXY_URL="<PROXY_URL>" PROXY_USERNAME="<PROXY_USERNAME>" PROXY_PASSWORD="<PROXY_PASSWORD>" /l*v "C:\ProgramData\PMService\install_log.txt"Uninstall-Install:
msiexec /i "<path_to_msi_package>" /qn /norestart RUN_UNINSTALL_SCRIPT=true UNINSTALL_OPTION=uninstallall URL="<URL>" PROXY_URL="<PROXY_URL>" PROXY_USERNAME="<PROXY_USERNAME>" PROXY_PASSWORD="<PROXY_PASSWORD>" /l*v "C:\ProgramData\PMService\uninstall_install_log.txt"Uninstall-Install if current installation is corrupted:
msiexec /i "<path_to_msi_package>" /qn /norestart REINSTALL_ON_PROBLEM=true URL="<URL>" PROXY_URL="<PROXY_URL>" PROXY_USERNAME="<PROXY_USERNAME>" PROXY_PASSWORD="<PROXY_PASSWORD>" /l*v "C:\ProgramData\PMService\reinstall_on_problem_log.txt"
All parameters:
/qn: Quite installation process/norestart: No restart after installation process<path_to_msi_package>: MSI packge path on downloaded computerREINSTALL_ON_PROBLEM: Flag to check if current installed services are corrupted or not. Options:true,falseRUN_UNINSTALL_SCRIPT: Flag to run uninstall script before installation. Options:true,falseUNINSTALL_OPTION: Uninstall option to uninstall ICSFAgent and PMService. Options:uninstall,uninstallagent,uninstallalluninstall: To uninstall only PM serviceuninstallagent: To uninstall only ICSFAgent serviceuninstallall: To uninstall PM and ICSAgent services
<URL>: PM config url. It is already in place.<PROXY_IP_ADDRESS>: It will be coming as filled if it exists in organization<PROXY_PORT>: It will be coming as filled if it exists in organization<PROXY_USERNAME>: It will be coming as filled if it exists in organization<PROXY_PASSWORD>: This will not be set automatically. User should enter password by hand./l*v "C:\ProgramData\PMService\InstallationLogs\install_log.txt"-> This is for logging installation process
MSI Uninstall Parameters:
Uninstaller path:
"C:\ProgramData\PMService\PMUninstaller.msi"Command:
msiexec /x "C:\ProgramData\PMService\PMUninstaller.msi" /qn /norestart UNINSTALL_OPTION=uninstallall /l*v "C:\ProgramData\PMService\uninstall_log.txt"All parameters:
/qn: Quite installation process/norestart: No restart after installation process/l*v "C:\ProgramData\PMService\InstallationLogs\uninstall_log.txt"-> This is for logging installation processUNINSTALL_OPTION ->
uninstall,uninstallall,uninstallallwithsysmon,uninstallagent,uninstallsysmonuninstall: To uninstall only PM serviceuninstallall: To uninstall PM and ICSAgent servicesuninstallallwithsysmon: To uninstall PM, ICSAgent and sysmon servicesuninstallagent: To uninstall only ICSFAgent serviceuninstallsysmon: To uninstall only sysmon service
Custom PMService Parameters:
Install:
"<path_to_custom_exe>" --silent --install --versioncheck=falseUninstall-Install:
"<path_to_custom_exe>" --silent --uninstall --install --versioncheck=falseUninstall-Install on problem only (Will not install if already not installed. Only will check if installed version is corrupted.):
"<path_to_custom_exe>" --silent --reinstallOnProblemUninstall-Install on problem, install if not installed:
"<path_to_custom_exe>" --silent --reinstallOnProblem --install --versioncheck=trueUninstall:
"C:\ProgramData\PMService\PMUninstaller.exe" --uninstall --silentAll parameters:
--reinstallOnProblem: Flag to check if current installed services are corrupted or not. Default is false if not specified.--versioncheck: Flag to decide if version will be installed regardless of the installed version. Default is true if not specified.--versioncheck=true-> With this value, PMInstaller will check if version is already installed. If not, it will install; if installed, installation will skipped.--versioncheck=false-> With this value, PMInstaller will remove installed version and install new version, no matter what the version is.
Uninstall options:
--uninstall: To uninstall only PM service--uninstallall: To uninstall PM and ICSAgent services--uninstallallwithsysmon: To uninstall PM, ICSAgent and sysmon services--uninstallagent: To uninstall only ICSFAgent service--uninstallsysmon: To uninstall only sysmon service
ICSFAgent Parameters:
Uninstall:
"C:\ProgramData\ICSFAgent\ICSFAgentUninstaller.exe" --uninstall --silent(PS:--silentparameter will be active starting from version 4017.0.43. For older versions,--qcan be used instead.)
Last updated
Was this helpful?