Home
Arc
Learn how Arc provides endpoint security in high availability environments.
Preparation
Information on how to import Arc packages, and install a license.
Dependencies
To enable all the functions of Arc, you need to have certain items installed on the host machine.
Install EaseFilter manually
If your Arc installation was updated from an older version, EaseFilter may not have been installed automatically. You can install it manually using the Arc setup wizard.

Arc
Learn how Arc provides endpoint security in high availability environments.
- Introduction
  An overview of Arc.
- Requirements
  The machine and network requirements necessary to use Arc.
- Preparation
  Information on how to import Arc packages, and install a license.
  - Arc licenses
    Before you can deploy and use Arc, you will need to buy a license. How Arc licenses are installed will depend on the existing installation that you have. Arc and Arc Embedded require separate licenses.
  - Install a license in Guardian or CMC
    Before you can use Arc you must install the applicable license.
  - Import Arc through the update service in Guardian or CMC
    Before you can deploy Arc, you must import it first. There a two methods you can use to do this, one method is through the Nozomi Networks Update Service. The alternative method is through a manual contents upload.
  - Import Arc through a manual contents upload in Guardian or CMC
    Before you can deploy Arc, you must import it first. There a two methods you can use to do this, one method is through a manual contents upload. The alternative method is through the Nozomi Networks Update Service.
  - Dependencies
    To enable all the functions of Arc, you need to have certain items installed on the host machine.
    - Enable security log events
      Before you can use Sigma rules related to security log events, you will need to enable them.
    - Enable printservice log events
      Before you can use Sigma rules related to printservice log events, you will need to enable them.
    - Install EaseFilter manually
      If your Arc installation was updated from an older version, EaseFilter may not have been installed automatically. You can install it manually using the Arc setup wizard.
  - Local services
    It is important to understand the different local services that are necessary for the different operating systems.
  - User permissions
    Arc collects a diverse set of information from the hosting machine, and can take control of the network interfaces. To grant full functionality, Administration/root permissions are needed.
  - Connectivity
    Arc connects to Guardian and Vantage through designated protocols and ports.
  - Enable Audit Policy on Microsoft Windows
    If you want Arc to detect user logon activities, you must enable Audit logon events of Microsoft Windows.
- Configuration
  Details on how to configure Arc.
- Deployment
  Information on how to deploy Arc. This includes details for manual and automatic deployments, and deployment through a mobile device management (MDM) system.
- Execution
  Information on the different modes that you can use with Arc.
- Troubleshooting
  Troubleshooting procedures to help you solve problems that might occur when you use Arc.

Install EaseFilter manually

If your Arc installation was updated from an older version, EaseFilter may not have been installed automatically. You can install it manually using the Arc setup wizard.

About this task

EaseFilter is recommended for enhanced threat prevention performance. It is optional: threat prevention can still function if Sysmon is installed instead.

Note:

This procedure applies to Windows installations only.

Procedure

Open the Arc setup wizard using one of these methods:
- Open the Windows Start menu, search for Modify Arc installation and launch the result.
- Open Control Panel > Programs and Features, select Nozomi Arc from the list of installed programs, and select Change.
The Arc setup wizard opens.
Select Next.
Select EaseFilter and complete the installation.

Results

EaseFilter is installed. Restart Arc to make the dependency active.