Vulscan Discovery Agent Deployment
Purpose
This solution is designed to configure the automatic deployment of the Vulscan Discovery Agent application on Windows and Macintosh machines that are missing the agent, using the NinjaOne platform.
Reference: VulScan_Discovery_Agents_Install_Guide.pdf
Associated Content
Custom Field
| Content | Definition Scope | Required | Type | Available Options | Applicable OS | Function |
|---|---|---|---|---|---|---|
| cPVAL Vulscan Discovery Agent Deployment | Organization | True | Drop-down | All, Windows, Windows Workstations, Windows Servers, Macintosh, Disabled | Windows, Macintosh | Enables Vulscan Discovery Agent's auto-deployment for the selected platform. |
| cPVAL Vulscan Discovery Agent - Exclude | Location, Device | False | Drop-down | Yes, No | Windows, Macintosh | Excludes the device or location from Vulscan Discovery Agent deployment automation when set to 'Yes'. |
| cPVAL Vulscan Install Key | Organization | True | Text | Windows, Macintosh | Allows agents to be associated with the organization during the agent installation. |
Automation
| Content | Function |
|---|---|
| Deploy Vulscan Discovery Agent - Windows | Installs Discovery Agent on Windows machines, retrieving required install key from cPVAL Vulscan Install Key custom fields if not provided at runtime. |
| Deploy Vulscan Discovery Agent - Macintosh | Installs the DiscoveryAgent on Macintosh machines, retrieving required install key from cPVAL Vulscan Install Key custom field. |
Compound Conditions
| Content | Function |
|---|---|
| Deploy Vulscan Discovery Agent - Windows Workstations | Triggers the Deploy Vulscan Discovery Agent - Windows automation on Windows workstations where deployment is enabled and Discovery Agent is not installed. |
| Deploy Vulscan Discovery Agent - Windows Servers | Triggers the Deploy Vulscan Discovery Agent - Windows automation on Windows servers where deployment is enabled and Discovery Agent is not installed. |
| Deploy Vulscan Discovery Agent - Macintosh | Triggers the Deploy Vulscan Discovery Agent - Macintosh automation on Macintosh machines where deployment is enabled and DiscoveryAgent is not installed. |
Implementation
Step 1
Create the following custom fields:
- cPVAL Vulscan Discovery Agent Deployment
- cPVAL Vulscan Discovery Agent - Exclude
- cPVAL Vulscan Install Key
Step 2
Create the following automations:
Step 3
Create the Deploy Vulscan Discovery Agent - Windows Workstations compound condition for default Windows Workstation [Default] agent policy.
Step 4
Create the Deploy Vulscan Discovery Agent - Windows Servers compound condition for default Windows Server [Default] agent policy.
Step 5
Create the Deploy Vulscan Discovery Agent - Macintosh compound condition for both default agent policies: Mac Server [Default] and Mac [Default]. The example in the document illustrates the deployment process for the Mac [Default] agent policy. It is also recommended to apply this compound condition to the Mac Server [Default] agent policy, following the same process.
FAQ
1. Can the automations be executed manually without relying on the auto-deployment custom fields (cPVAL Vulscan Discovery Agent Deployment, cPVAL Vulscan Discovery Agent - Exclude)?
Yes, the automations can be executed manually, independent of the auto-deployment custom fields. Even if deployment is not enabled or the machine is excluded, the scripts can still be run manually to perform the required actions.
2. Are the [cPVAL Vulscan Install Key] and other custom fields mandatory for deployment?
Yes, the [cPVAL Vulscan Install Key] custom field is mandatory for the deployment to function correctly. It ensures that the agent installation is associated with the correct organization.
3. What should I do if the auto-deployment is not working for certain machines?
If auto-deployment is not working, check if the machines are excluded using the cPVAL Vulscan Discovery Agent - Exclude custom field or if they are using a different agent policy. Ensure the compound conditions are applied to the correct agent policies for deployment to work.
4. Can the deployment process be customized for specific platforms?
Yes, the deployment process can be customized by selecting the appropriate options in the cPVAL Vulscan Discovery Agent Deployment custom field. This allows you to enable deployment for specific platforms such as Windows workstations, Windows servers, or Macintosh machines.
5. What happens if the Vulscan service is unreachable during deployment?
If the Vulscan service is unreachable, the deployment process will fail. Ensure that the network connection to the Vulscan service is stable and that the required key is correctly configured.