FAQ(ECL2.0)
Host-based Security - FAQ
- All(28)
- Operation(8)
- Specification(19)
- Construction(7)
- What are the message for "Smart Protection Server disconnected for Smart Scan"?ECL2.0, Host-based Security
The "Smart Protection Server disconnected for Smart Scan" message appears when you are unable to connect to the Smart Protection Server (SPS).
The conditions that prevent you from connecting are OS- and environment-dependent issue as follows.
- The timing of the SPS database update
- Unable to connect to SPS due to network problems.
- The name resolution for connecting to SPS fails.
- Internal processing problems on a computer with a Deep Security Agent (DSA) installedSmart Protection Server is designed to connect to Trend Micro via the Internet.
Please make sure that you have appropriate access restrictions.If you see "Smart Protection Server Connected for Smart Scan" after "Smart Protection Server disconnected for Smart Scan" in the HBS WebUI, it is temporary and there is no operational problem.
- When I install Managed Host-based Security Package, what types of processes and functions run on the host?ECL2.0, Host-based Security
The types and functions of processes running on the host are as follows (for Linux environment):
1. ds_agent
This is Main process of Agent.
2. ds_am
This process runs when the anti-malware function is activated.
3. ds_filter
This process runs when the firewall or intrusion prevention function is activated.
- Can I change Username on Host-based Security Operation Screen?ECL2.0, Host-based Security
Please do not change Username or Password on Host-based Security Operation Screen. You will no longer access to Operation Screen because Single Sign On from Smart Data Platform Portal to Operation Screen will be unavailable. If you changed Username or Password, please ask us via Ticket System.
- Can I set multiple destinations for alert notification emails on Host-based Security menu?ECL2.0, Host-based Security
Yes. By setting "Individual Notifications" in addition to "Basic Alert Destination", you can set multiple notification destinations as desired.
Tutorials - Host-based Security - Setting up the Alert Destination
- Please tell me the global IP address of Trend Micro Server (Smart Protection Server).ECL2.0, Host-based Security
Due to the specifications provided by Trend Micro, it is not disclosed.
Reference:
Service Description - Managed Anti-Virus - Terms And ConditionsService Description - Managed Virtual Patch - Terms And Conditions
Service Description - Managed Host-based Security Package - Terms And Conditions
- Is it possible to manage Host-based Security menus used in several regions / tenants in one security control panel screen?ECL2.0, Host-based Security
- On the Managed Anti-Virus administration screen, "Test SMTP Settings" is successful, but the actual alert mail fails.ECL2.0, Host-based Security
"Testing SMTP settings" is not for verifying whether alert mail is sent, but for verifying the connectivity to the mail server.
There is a possibility that the setting of the destination address is incomplete as a reason for failing to send the actual alert mail, please check it again.Tutorial - Host-based Security - Setting up Alert Email Sending
Tutorial - Host-based Security - Setting up the Alert Destination
- Is it possible to change the execution privilege such as ReadOnly restriction to a specific user with Security menu (Managed Firewall etc)?ECL2.0, Host-based Security, Network-based Security
As for security menu (ManagedUTM, Managed Firewall) and backup menu, it is not covered by API permission management function, so it is not possible to perform Read Only and access restrictions on specific users.
Service Descriptions - API authority management - Terms and Conditions of Use
- How to check upgrade status of Agent in Host-based Security menu?ECL2.0, Host-based Security
You can check it from the management console.
For the current version, you can double-click the target host and check it in "Version" described in [Overview]> [Processing]> [Software].
The latest version is displayed in [Administration]> [Update]> [Software]> [Local], so you can check with it.
You can also confirm by setting alert from [Alert].
It is also possible to notify e-mails of alerts.Tutorials - Host-based Security - Verification after Upgrading the Agent
- What server is sending the alert mail in the Managed Host-based Security menu?ECL2.0, Host-based Security
The alert mail is sent from the managed server.
Reference:
Service Descriptions - Managed Anti-Virus - Communication RequirementsService Descriptions - Managed Virtual Patch - Communication Requirements
Service Descriptions - Managed Host-based Security Package - Communication Requirements
FAQ - Can I get Alert Notifications on Host-based security menu?