Home
Guardian
User Guide
Information and resources about the main features of Guardian, and the tasks that you can do from the user interface (UI).
Arc
Deployment
The Deployment page shows a table of all the devices available for Arc deployment.
Advanced
The Advanced page lets you interact with nodes that have no operating system (OS) detected, or do not show on the same page in the table.

Guardian
- Introduction
  An overview of Guardian.
- Installation Guide
  Information and resources on how to install Guardian, and the different options and settings that are available.
- Administrator Guide
  Information and resources about the Administration section of Guardian, and the tasks that you can do in this part of the software.
- User Guide
  Information and resources about the main features of Guardian, and the tasks that you can do from the user interface (UI).
  - Sensors
  - Alerts
  - Assets
  - Queries
  - Smart Polling
  - Arc
    - Arc overview
      Arc™ is a host-based sensor that detects and defends against malicious or compromised endpoints, and insider attacks. You can use Arc sensors to aggregate data for analysis and reports, either on-premises, or in the Vantage cloud.
    - Architecture
      It is important to understand the different architecture possibilities that are available with Arc.
    - Arc in Guardian
      The Arc button in the Guardian Web UI lets you access the different pages for Arc.
    - Deployment
      The Deployment page shows a table of all the devices available for Arc deployment.
      - Advanced
        The Advanced page lets you interact with nodes that have no operating system (OS) detected, or do not show on the same page in the table.
      - Execution details
        The Execution details button gives you access to the Activity Log.
    - Node points
      The Node points page shows data points that are collected over time, and represent the state of the target machine.
  - Network
  - Process
  - Reports
  - Assertions
  - Time machine
  - Vulnerabilities
  - Administration
  - Personal settings
- Maintenance Guide
  Information about the maintenance tasks of Guardian, to help you administer and maintain the solution in a production environment.
- Print format documentation
  A list of all the print-format documentation that is available for Guardian.

Advanced

The Advanced page lets you interact with nodes that have no operating system (OS) detected, or do not show on the same page in the table.

The default table view only shows nodes that have had their operating system (OS) detected. Also, if you select multiple nodes, actions will only be applied to a single page of nodes. To overcome these limitations, you can use the Advanced button to go to the Advanced page. This will let you interact with a:

Set of nodes that cannot be shown on a single page
Set of nodes that have no OS detected

Advanced page — Figure 1. Advanced page

Strategy

Automatic: This selection will use the OS that has been detected on the node to automatically choose a deployment strategy. You can select multiple nodes that have a different OS. This strategy will ignore a host if it has no OS.

WinRM: This selection will force the Windows Remote Management (WinRM) strategy, regardless of the OS, and deploy the correct Arc package for Windows.

SSH (Windows): This selection will force the secure shell (SSH) strategy, regardless of the OS, and deploy the correct Arc package for Windows.

SSH (Linux): This selection will force the SSH strategy, regardless of the OS, and deploy the correct Arc package for Linux.

SSH (macOS): This selection will force the SSH strategy, regardless of the OS, and deploy the correct Arc package for macOS.

Query

This field lets you create and execute queries on the nodes. This lets you filter and selectively install packages.

Timeout (seconds)

The Timeout dropdown lets you set the amount of time that Arc will try to communicate with a host machine before it skips it and goes to the next one.