Deploying Sensor & Communicator
Last updated
Last updated
Deploying the broker and communicator enables agentless mode and network device analysis. The sensor is a VMWARE image that communicates with the server. The Sensor performs weak SNMP password discovery and Linux artifact collection. The communicator is a Windows Service. The communicator performs Windows device classification and agentless artifact collection. Communicator also classifies Windows-based endpoints. Any activity related to a Windows-based end-point is sent to the communicator by the broker.
The Sensor component should be installed on-premise. The Sensor is provided as a WmWare ESX virtual appliance compatible with ESX 6.7 or newer version. If you need a virtual appliance with older versions or for other virtualization platforms, please send an e-mail to support@cybercyte.com.
To download the Sensor component, login to the portal and go to Settings & Reporting -> Deployment Settings. Scroll down the page and find the download link for the sensor, click on the "Download" button under the "Sensor".
Once you download the broker file, you can deploy it to your VMware ESX server environment. For detailed information on how to deploy the .ovf file, please read the article https://docs.vmware.com/en/VMware-vSphere/6.7/com.vmware.vsphere.html.hostclient.doc/GUID-8ABDB2E1-DDBF-40E3-8ED6-DC857783E3E3.html
The next step is installing Windows Communicator. Click on the "Download" button of the Windows Communicator. The executable file should start to download. Follow the steps down below. If the machine does not have dotnet 6.0 or higher, click the "Continue" button and then click the "Install" button.
The default and recommended listening port is "8443". Select the transfer protocol type. The "Self Signed Certificate" option is recommended. Fill in the blanks below with credentials, then click the "Install" button.
When the installation is completed, please check the service is running on your machine. Go to services and search for "BrokerDataCollector" and make sure it is in a running state. Otherwise, please send a support e-mail to support@cybercyte.com.
Go to the machine's web browser, type "https://<Machines_IP_Address>:8443/api/test" and hit enter. The result should look like the one below, and it means the communicator is successfully installed on the machine.
