Get Deep Security Agent software

To install Deep Security Agent, you must both:

  • download the agent installer
  • load packages for the agent's protection modules into Deep Security Manager
Installing an agent, activating it, and applying protection with a security policy is multi-step process that can be scripted from the command line on the computer you want to protect. For more information, see Use a deployment script.

Deep Security is modular. Initially, Deep Security Agent only has core functionality. When you enable a protection module, then the agent downloads that plug-in and installs it. So before you activate any agents, first download the agent software packages onto Deep Security Manager ("import" them) so that they will be available to the agents.

If you try to install an agent when the corresponding software package has not been imported to Deep Security Manager, it can lead to serious issues.

Once you import the agent installer package, you can download it to other computers. Depending on your preferred method, you can then load it into a third party deployment system which will install it on your computers.

Download agent software packages into Deep Security Manager

  1. In Deep Security Manager, go to Administration > Updates > Software > Download Center.

    The Trend Micro Download Center displays the latest versions of agent software.

  2. To download your agent software package to the manager's local storage, select the installer from the list, and then click Import .

    Deep Security Manager connects to the Internet to download the software from Trend Micro. When the manager has finished, a green check mark will appear in the Imported column for that agent. Software packages will appear on Administration > Updates > Software > Local.

    Alternatively, if your Deep Security Manager is "air-gapped" (not connected to the Internet) and cannot connect directly to the Download Center web site, you can load them indirectly. Download the ZIP packages to your management computer first, and then log into the Deep Security Manager and upload them.

Export the agent installer

If you use a third party deployment system (such as Ansible, Chef, Puppet, PowerShell, or others), or if you manually install software, you can download the agent installer from Deep Security Manager.

  1. In Deep Security Manager, go to Administration > Updates > Software > Local.
  2. Select your agent from the list.

  3. Click Export > Export Installer.

    If you have older versions, the latest version of the software will have a green check mark in the Is Latest column.

  4. Save the agent installer to a local folder.
To install Deep Security Agent, only use the exported agent installer (the .msi or the .rpm file) — not the full agent ZIP package. If you run the agent installer from the same folder that holds the other zipped agent components, all protection modules will be installed, even if you haven't enabled them on the computer. This consumes extra disk space. (For comparison, if you use the .msi or .rpm file, the agent will download and install protection modules only if your configuration requires them.)