Computer and agent statuses

The agent has not connected to the manager for the number of heartbeats specified on Computer or Policy editorYou can change these settings for a policy or for a specific computer. To change the settings for a policy, go to the Polices page and double-click the policy that you want to edit (or select the policy and click Details). To change the settings for a computer, go to the Computers page and double-click the computer that you want to edit (or select the computer and click Details). > Settings > General.

This can occur when connectivity is interrupted by a network firewall or proxy, AWS security group, agent software update, or when a computer is powered down for repair.

Verify that firewall settings allow the required port numbers, and that the computer is powered on. If you use Deep Security as a Servicee, also see Use agent-initiated communication with cloud accounts.

Communication failure at the IP, TCP, or HTTP layer.

For example, if the Deep Security Manager IP address is unreachable because the connection is being blocked by a firewall, router, or AWS security group, then it would cause a connection to fail. To resolve the error, verify that the activation port number is allowed and that a route exists.

Software changes detected on the file system exceeded the maximum amount. Application control will continue to enforce existing rules, but will not record any more changes, and it will stop displaying any of that computer's software changes.

See Reset application control after too much software change.

Opens a window with a list that allows you to assign a policy to the computer. The name of the policy assigned to the computer will appear in the Policy column on the Computers page.

When you use Deep Security Manager to change the configuration of an agent or appliance on a computer (apply a new intrusion prevention rule, change logging settings, etc.), the Deep Security Manager has to send the new information to the agent or appliance. This is a Send Policy instruction. Policy updates usually happen immediately but you can force an update by clicking Send Policy.

Use this command to clear all warnings and errors for the computer. This command is useful in these situations:

• If the agent for the computer has been reset locally
• If the computer has been removed from the network before you had a chance to deactivate or delete it from the list of computers

To upgrade an agent, you first need to import a newer version of the agent software package into the Deep Security Manager (see About upgrades).

Deep Security Manager can scan computers and then make recommendations for Security Rules. The results of a recommendation scan appear in the computer's Details window in the Rules pages. See Manage and run recommendation scans.

Clears rule recommendations resulting from a recommendation scan on this computer. Clearing also removes the computer from those listed in an alert produced as a result of a recommendation scan.

Performs a full malware scan on the selected computers. The actions taken by a full scan depend on the Malware Manual Scan Configuration in effect on this computer. See Configure malware scans.

Scans critical system areas for currently active threats. Quick Scan looks for currently-active malware but does not perform deep file scans to look for dormant or stored infected files. On larger drives, Quick Scan is significantly faster than a Full Scan.

Integrity Monitoring tracks changes to a computer's system and files. It does by creating a baseline and then performing periodic scans to compare the current state of the computer to the baseline. For more information see Set up integrity monitoring.

Asset values allow you to sort computers and events by importance. The various security rules have a severity value. When rules are triggered on a computer, the severity values of the rules are multiplied by the asset value of the computer. This value is used to rank events in order of importance. See Rank events to quantify their importance.