Deployment Settings

The Download Components section provides download links and configuration files for different types of installations. Mainly, there are two types of component deployments available for end-users. Agents and Outlook Add-ins. Agents are used for system-level operations like compliance checks DNS traffic filtering, and client traffic blocking. On the other hand, Outlook Add-in deployment is used for reporting suspicious e-mails from users to prevent phishing attacks.

Also Portal has support on Linux and macOS. The Installation is explained under the "Getting Started" guide. The deployment steps are similar but there are some minor differences which are explained in the guideline.

Installation Management

  • Microsoft Windows Agent: Users can download the agent package manager installer for the Windows-based system by clicking the download button. Once installation and configuration are completed, the threat protection module is started automatically.

circle-info

You can install an agent with .exe format without requiring user interaction. To install the .exe agent silently, use the silent flag on the command line like below:

C:\"Path to Installer executable" --silent

The agent with .msi format should be installed with command that provided under the "Command to Install MSI Package" section.

  • Linux Agent: Users can get the installation command by clicking the "Download Service Installer" button. Copy and paste the installation command on the Linux terminal, and the machine information will appear on the portal.

circle-info

The example of the installation command is like this:

  • macOS Agent: Users can download the installer package of the macOS agent. Click on the .pkg package and install it with the config file provided on the installation page.

Manuel Deployments

This section allows users to deploy agents manually. The users can define the specific device, the agent, and version. In the portal, users can scan the IP range with the Sensor component and assign credentials to the machines.

Advanced Agent Deployment on Windows

  • MSI Install/Uninstall Parameters:

    • Examples:

      • Only installation:msiexec /i "<path_to_msi_package>" /qn /norestart URL="<URL>" PROXY_URL="<PROXY_URL>" PROXY_USERNAME="<PROXY_USERNAME>" PROXY_PASSWORD="<PROXY_PASSWORD>" /l*v "C:\ProgramData\PMService\install_log.txt"

      • Uninstall-Install:msiexec /i "<path_to_msi_package>" /qn /norestart RUN_UNINSTALL_SCRIPT=true UNINSTALL_OPTION=uninstallall URL="<URL>" PROXY_URL="<PROXY_URL>" PROXY_USERNAME="<PROXY_USERNAME>" PROXY_PASSWORD="<PROXY_PASSWORD>" /l*v "C:\ProgramData\PMService\uninstall_install_log.txt"

      • Uninstall-Install if current installation is corrupted:msiexec /i "<path_to_msi_package>" /qn /norestart REINSTALL_ON_PROBLEM=true URL="<URL>" PROXY_URL="<PROXY_URL>" PROXY_USERNAME="<PROXY_USERNAME>" PROXY_PASSWORD="<PROXY_PASSWORD>" /l*v "C:\ProgramData\PMService\reinstall_on_problem_log.txt"

    • All parameters:

      • /qn: Quite installation process

      • /norestart: No restart after installation process

      • <path_to_msi_package>: MSI packge path on downloaded computer

      • REINSTALL_ON_PROBLEM: Flag to check if current installed services are corrupted or not. Options: true, false

      • RUN_UNINSTALL_SCRIPT: Flag to run uninstall script before installation. Options: true, false

      • UNINSTALL_OPTION: Uninstall option to uninstall ICSFAgent and PMService. Options: uninstall, uninstallagent, uninstallall

        • uninstall: To uninstall only PM service

        • uninstallagent: To uninstall only ICSFAgent service

        • uninstallall: To uninstall PM and ICSAgent services

      • <URL>: PM config url. It is already in place.

      • <PROXY_IP_ADDRESS>: It will be coming as filled if it exists in organization

      • <PROXY_PORT>: It will be coming as filled if it exists in organization

      • <PROXY_USERNAME>: It will be coming as filled if it exists in organization

      • <PROXY_PASSWORD>: This will not be set automatically. User should enter password by hand.

      • /l*v "C:\ProgramData\PMService\InstallationLogs\install_log.txt" -> This is for logging installation process


  • MSI Uninstall Parameters:

    • Uninstaller path: "C:\ProgramData\PMService\PMUninstaller.msi"

    • Command: msiexec /x "C:\ProgramData\PMService\PMUninstaller.msi" /qn /norestart UNINSTALL_OPTION=uninstallall /l*v "C:\ProgramData\PMService\uninstall_log.txt"

    • All parameters:

      • /qn: Quite installation process

      • /norestart: No restart after installation process

      • /l*v "C:\ProgramData\PMService\InstallationLogs\uninstall_log.txt" -> This is for logging installation process

      • UNINSTALL_OPTION -> uninstall, uninstallall, uninstallallwithsysmon, uninstallagent, uninstallsysmon

        • uninstall: To uninstall only PM service

        • uninstallall: To uninstall PM and ICSAgent services

        • uninstallallwithsysmon: To uninstall PM, ICSAgent and sysmon services

        • uninstallagent: To uninstall only ICSFAgent service

        • uninstallsysmon: To uninstall only sysmon service


  • Custom PMService Parameters:

    • Install: "<path_to_custom_exe>" --silent --install --versioncheck=false

    • Uninstall-Install: "<path_to_custom_exe>" --silent --uninstall --install --versioncheck=false

    • Uninstall-Install on problem only (Will not install if already not installed. Only will check if installed version is corrupted.): "<path_to_custom_exe>" --silent --reinstallOnProblem

    • Uninstall-Install on problem, install if not installed: "<path_to_custom_exe>" --silent --reinstallOnProblem --install --versioncheck=true

    • Uninstall: "C:\ProgramData\PMService\PMUninstaller.exe" --uninstall --silent

    • All parameters:

      • --reinstallOnProblem: Flag to check if current installed services are corrupted or not. Default is false if not specified.

      • --versioncheck: Flag to decide if version will be installed regardless of the installed version. Default is true if not specified.

        • --versioncheck=true -> With this value, PMInstaller will check if version is already installed. If not, it will install; if installed, installation will skipped.

        • --versioncheck=false -> With this value, PMInstaller will remove installed version and install new version, no matter what the version is.

    • Uninstall options:

      • --uninstall: To uninstall only PM service

      • --uninstallall: To uninstall PM and ICSAgent services

      • --uninstallallwithsysmon: To uninstall PM, ICSAgent and sysmon services

      • --uninstallagent: To uninstall only ICSFAgent service

      • --uninstallsysmon: To uninstall only sysmon service


  • ICSFAgent Parameters:

    • Uninstall: "C:\ProgramData\ICSFAgent\ICSFAgentUninstaller.exe" --uninstall --silent (PS: --silent parameter will be active starting from version 4017.0.43. For older versions, --q can be used instead.)

Last updated

Was this helpful?