• TCP: 8241
• TCP: 8236
• TCP: 8237 & 8235
• TCP: 8240

As per the policy, the computer Judith will not be able to modify/delete any files/folder on network resources. User will also get a warning message while trying to do so.

We can also achieve this for specific server, or specific folder/file on specific server as below:

 

 

With this policy, user will not be able to modify/delete any text file in folder ‘test’ on file server 192.168.1.1. He will also get the warning message on his screen while trying to do so.

 

2.      Modules required

1. Select the computer and right click the particular option on the console.

         2.   Select the particular computer. Go to control tab at the top and then select the particular option:

 

 

DELETE will uninstall the agent from the machine as well as release the license from that machine.

Example:

Consider the example that customer has purchased a license for 50 agents for all the modules. Customer is having 55 machines in his company. Admin has installed agents on all the 55 machines.

As license is for 50 agents only, only 50 machines will be shown in Agent panel. The server which communicates with the agent first will be listed in those 50 machines. All the modules will also be effective on these 50 machines.

1.  Logon to Web Admin Console and go to Tools à Computers.
2.  Select those five computers from which you want to release the license. 
3.  Click on DELETE and then click on OK.

This will release license and uninstall agent from those five machines.

As soon as agent gets uninstalled and licenses released from those machines, they will be removed from agent panel. Now, those five licenses will be automatically applied on the remaining five machines on which agents are installed. Administrator needs to re-logon with console to get it affected in the Agent Panel.

This is helpful to administrator to apply different policies to notebook users when they are outside the network/ on business trip/home use.

1. Stop Endpoint Data Protection Service
2. osql -S TRAININGLAB"MSDE_OCULAR -E -Q "RESTORE DATABASE OCULAR3 FROM DISK = 'c:"backup"ocular.bak'"
   
   

1. Stop Endpoint Data Protection Service
2. osql -S TRAININGLAB"MSDE_OCULAR -E -Q "BACKUP DATABASE OCULAR3 TO DISK = 'c:"backup"ocular.bak'"

Use the following procedure for installing Cyberoam Endpoint Data Protection Agent.

Navigate to “Agent Installation Generator” under Start --> All Programs --> Cyberoam Endpoint Data Protection Suite.

 

 

• Server IP is the IP where the database component of Cyberoam Endpoint Data Protection is installed.
   
• Setup the File Path to store the file named ‘ASetup.exe’ to a specific folder (if possible on share folder).
    
• Enable ‘Silent Installation’ to prevent users from notifying about the Agent installation. If this option is disabled, the exe would interact with the user in order to install the Agent.     
   
  Note: The name of the agent generated using the direct installation generator has to be ‘ASetup.exe’ only. Secondly, the administrator rights are required in order to install the agent on the user’s machine. 

   
  

Step 2: Copy the Agent.

 

• Copy the agent ASetup.exe (as created in Step 1) under NETLOGON folder.

Note:  Netlogon folder can be found at \\adsservername\\netlogon. Replace <adsservername> with Active Directory’s Server name or IP.

 

Step 3: Configure Logon Script.

 

Please, follow Step 3.1 if you do not have a logon script.

 

Step 3.1 Create a batch file (logonscript.bat) in the Netlogon folder on the server and paste the below lines in the batch file.

 

START \\adsservername\netlogon\agent.exe

 

Note: Replace the <adsservername> with the Active Directory’s Computer Name or IP.

 

 

If you already have a logon script please, follow Step 3.2.

 

Step 3.2 Update the existing logon script with the below line.

 

START \\adsservername\netlogon\agent.exe

Note: Replace the <adsservername> with the Active Directory’s Computer Name or IP.

 

 

Step 4

Attach logonscript.bat to Profile if the script is not already attached.

On the next login attempt by the user, the agent will be installed on the end user’s machine and would be visible in the Endpoint Data Protection Console after a few minutes.

 

                                                                                                                                                                                                                                    
                                                                                                                                                            Document Version : 1.0-05/04/2010

•  Create a new user called “Helpdesk” and assign him the rights to access Logs, Monitoring and Patch Management for Computer group Cyberoam only.
•  Logon to the Cyberoam Web Admin Console with Admin account to create a new user account. Then go to Tools --> Accounts , as shown in the below screenshot:

•   As of now, you will see only one account called Admin and it is Super Administrator. So to create a new account, click on the Icon as shown in below picture:

• Next step is to select the Group for which we want to allow Helpdesk user to see the Logs, Monitoring and Patch Management. Here we have selected Computer Group “Cyberoam”.

 

 

• To change the password of Helpdesk, Login to Helpdesk and go to Tools à Change Password.

 

 

                                                                                                                                                                                                                         

                                                                                                                                       Document Version : 1.0 - 26/03/2010 

 

Endpoint Data Protection Agent scans the applications running on the user’s machine, and sends it to the Server. The Endpoint Data Protection Server would then group it all in ‘Unclassified’ Class. From there we can move applications to custom class. Unclassified is a default class.

Click on unclassified class, and select the applications ‘Yahoo’ to be blocked for User1, and move them to separate class i.e. Yahoo.

1. In the Agent Panel, click on the User/Group for which we want to block Yahoo messenger.

If we select whole network here then this policy will be applicable to all the users.

   2.   Navigate to Basic policy in Main menu and click on ‘Application’, and then click on ADD icon to create a new policy as shown above.

   3.   Configure the Application Control Policy with the following values

 

 

   4.   Save this policy.

 

 

Solution

Define policy to prevent users to change their IP/MAC while they are in office.

 

Define policy to allow users to change their IP/MAC while they are out of office.

1.                 Logon to Cyberoam Endpoint Data Protection server through Web Admin console.

2.                  Go to Agent Panel, and click on the user for which you want to apply the policy.

3.                  In Main Menu, go to Basic PolicyàBasic. Create a new policy as below.

For the same user, we want to allow that user to change his IP/MAC property when user is not in office i.e. during OFFLINE mode.

For that we need to create one more policy as below.

Policies are executed from top to bottom.

Case 1:

In Office

In this case, user is in office hence, policy at the top will not be applicable, as user is online and not offline. Hence, policy at the bottom will be applicable, and according to that user will not be able to change IP/MAC setting.

Case 2

Out of office

1.       Logon to Cyberoam Endpoint Data Protection server through Web Admin Console.

2.       Navigate to Basic policy in Main menu and click on ‘Application’, and then click on ADD icon to create a new policy.

 E.g:- Administrator has configured a policy that computer will be locked when user tries to access Skype.

 

4.       Save this policy.

 

The user will also get the message from the server that his/her computer is locked due to the policy applied.

 

 

 

                                                                                                                                                                                                      Document Version: 1.0-17/03/2010

1.       Logon to Web admin console and go to Advanced Policy àRemovable Storage

2.       Enter name of the policy.

Encrypted File

 

 

 

Note * - The above file can be decrypted only by computers who have the 'Decrypt when Reading' rights.

 

 

 

Document Version: 1.0-17/03/2010

 

1.       Logon to Web admin console and go to Advanced Policy à IM File

2.       Enter name of the policy.