Home
Arc
Introduction
An overview of Arc.
Deployment
The Deployment page shows a table of all the devices available for Arc deployment.

Arc
- Introduction
  An overview of Arc.
  - Arc overview
    Arc™ is a host-based sensor that detects and defends against malicious or compromised endpoints, and insider attacks. You can use Arc sensors to aggregate data for analysis and reports, either on-premises, or in the Vantage cloud.
  - Arc Embedded
    This version of Arc can be embedded directly on programmable logic controllers (PLCs).
  - Architecture
    It is important to understand the different architecture possibilities that are available with Arc.
  - Arc in Guardian
    The Arc button in the Guardian Web UI lets you access the different pages for Arc.
  - Arc in CMC
    The Arc button in the Central Management Console (CMC) Web UI lets you access the different pages for Arc.
  - Deployment
    The Deployment page shows a table of all the devices available for Arc deployment.
    - Advanced
      The Advanced page lets you interact with nodes that have no operating system (OS) detected, or do not show on the same page in the table.
    - Execution details
      The Execution details button gives you access to the Activity Log.
  - Deployment settings
    The Deployment settings page lets you configure the settings for your Arc deployment.
  - Node points
    The Node points page shows data points that are collected over time, and represent the state of the target machine.
  - Dependencies
    The Dependencies page shows the status of the dependencies. When a dependency is missing, you can use the upload icon in the Actions column to upload it.
  - Arc in Vantage
    The Sensors page shows all the Arc sensors in the network. It also lets you connect an Arc sensor.
  - Viewing data from Arc
    The data Arc acquires can be viewed in different places, and in different formats.
  - Commands syntax
    The example commands given in this documentation are for Microsoft Windows. Some of these commands are the same in other operating systems (OS), but when a procedure is specific to a different OS, the correct syntax for that OS is used.
  - Security measures
    A description of the security measures that Arc uses.
  - Detection information
    The information that Arc detects, listed for each operating system (OS). The table shows two types of Category: network and asset. When the Category is listed as network, it means that the detection is based on information that has been extracted from the network. When the Category is listed as asset, it means that the detection is based on information that has been extracted from the asset.
- Requirements
  The machine and network requirements necessary to use Arc.
- Preparation
  Information on how to import Arc packages, and install a license.
- Configuration
  Details on how to configure Arc.
- Deployment
  Information on how to deploy Arc. This includes details for manual and automatic deployments, and deployment through a mobile device management (MDM) system.
- Execution
  Information on the different modes that you can use with Arc.
- Troubleshooting
  Troubleshooting procedures to help you solve problems that might occur when you use Arc.
- Print format documentation
  A list of all the print-format documentation that is available for Arc.

Deployment

The Deployment page shows a table of all the devices available for Arc deployment.

The table only shows machines which have an operating system (OS) that matches one that Arc supports.

As Guardian detects the installed OS, the correct Arc package will be automatically deployed.

Deployment page — Figure 1. Deployment page

Advanced

The Advanced button lets you access the Advanced page. For more details, see Advanced.

Execution details

The Execution details lets you access the Activity Log. For more details, see Execution details.

Live toggle

The Live toggle lets you change live view on, or off. When live mode is on, the page will refresh periodically.

Refresh

The icon lets you immediately refresh the current view.

Actions

The ACTIONS column has a checkbox for each row in the table. This lets you select multiple nodes before you then apply an action to them.

The ACTIONS menu icon

gives you access to these options:

Select all in current page
Select none in current page
Invert selection in current page
Deploy Service mode: this installs Arc in Service mode for the selected devices
Remove Service mode: this removes the Arc previously installed in Service mode for the selected devices
Execute One-shot: this executes a One-shot run for the selected devices, which are left clean after an execution. Arc self destroys after its execution

Operating System

The OPERATING SYSTEM column shows the OS for each of the Arc sensors in the table. The field at the top of the column lets you use the OS to filter the table.

IP

The IP column shows the internet protocol (IP) for each of the Arc sensors in the table. The field at the top of the column lets you use the IP to filter the table.

Vendor

The VENDOR column shows the vendor name for each of the Arc sensors in the table. The field at the top of the column lets you use the vendor name to filter the table.

Product name

The PRODUCT NAME column shows the product name for each of the Arc sensors in the table. The field at the top of the column lets you use the product name to filter the table.

Type

The TYPE column shows the device type for each of the Arc sensors in the table. The field at the top of the column lets you use the device type to filter the table.