System information
Comodo Endpoint Security Manager - SME - Administrator Guide
Adding an endpoint to ESM requires an agent to be installed in it. The agent can be installed in two ways:
• Install agent while importing computers
• Download and Install agent 'manually' on endpoint computers
Once the agent is installed, the endpoints can communicate with and be managed by ESM.
2.3.1. Adding Endpoint Computers to ESM
Each managed endpoint requires a small software agent to be installed to facilitate communication between it and the ESM
console. Depending on the method by which the agent is installed, the endpoints can be imported into ESM in two ways:
• Installing the agent directly from the ESM Admin Console and importing computers from Active Directory, Workgroup
or by specifying the IP addresses or host names. This method is suitable for computers in the local network. Refer to
Importing Computers by Automatic Installation of Agent.
• Downloading the agent as an executable and installing manually, transferring it onto media such as DVD, CD, USB
memory or uploading it to a network share then installing onto the endpoint computers. This method is more suitable
for computers connected through external networks like Internet. Refer to Adding Computers by Manual Installation
of Agent.
Once the agent is installed, the endpoint computer is automatically discovered and added into ESM to the 'Unassigned' group
where it will be applied with the configured policy (see 'The Policies Area' for more details) and is then ready to be managed.
Alternatively, Comodo Internet Security (CIS) can be installed in endpoint computers separately and from the CIS interface the
endpoints can be connected to ESM. For more details refer the sections, How to Install CIS and How to Connect CIS to ESM
at the Local Endpoint.
The 'Computers' area also allows the administrators to arrange the added computers into 'Groups' as per the structure of the
organization for easy administration. Once created administrators can run tasks on entire groups of computers (such as applying
security policy for CIS, running AV scans, deploying agents, updating AV databases and more). Refer to Creating Endpoint
Groups for more details.
2.3.1.1. Importing Computers by Automatic Installation of Agent
The 'Deploy' wizard will install the ESM agent software on network endpoints that can be reached from the ESM service
computer. Computers can be imported from Active Directory, from a Workgroup or by specifying individual IP addresses or host
names. The wizard also allows to update installed Comodo software in managed computers. See 'Updating Comodo Software
on Managed Computers' for more details.
To import endpoints
• Click the 'deploy' tile from the 'computers' area to start the wizard:
Endpoint Security Manager - SME Administrator Guide | © 2013 Comodo Security Solutions Inc. | All rights reserved 52