Agent Management settings - Insight product use cases and agent update controls

The Agent Management experience in the Insight Platform also features select product-specific options and Insight Agent update controls. This article covers these topics and explains how to configure them.

Asset correlation

If you subscribe to InsightVM and use your agents to assess your assets for vulnerabilities in addition to on-premises scanning, Agent Management includes an asset correlation feature that promotes data correlation accuracy for asset records in your Security Console. See the Correlate Assets with Insight Agent UUIDs page in the InsightVM documentation for instructions on this feature.

Agent update throttle controls

Agent Management allows you to modify the allowable rate of concurrent updates for Insight Agents deployed across your organization. If you feel that your agents aren't updating fast enough, or are updating too quickly and using too much bandwidth in the process, you can throttle the rate of updates to meet the needs of your organization.

Throttle levels

There are three throttle options:

  • High - This is the default setting. A High setting updates agents as fast as possible and uses the most bandwidth.
  • Medium - A Medium setting dials back concurrent updates and uses less bandwidth as a result.
  • Low - A Low setting dials back concurrent updates even further. As a consequence, this throttle option takes the longest to update all the agents in your organization, but uses the least amount of bandwidth.

Throttle settings are global

Throttling cannot be applied to a filtered set of agents. If you modify update throttling, this setting will apply to all agents in your organization.

Modify agent update throttling

Follow these steps to modify update throttling:

  1. In the Agent Management screen, select Throttle Agent Updates from the Settings dropdown menu.

Modify agent update throttling

  1. In the option panel, select Low, Medium, or High.
  2. Click Save when finished.

New throttle settings take effect with the next release

After you modify update throttling, your new throttle level won’t take effect until the next Insight Agent update is released.

Automatic Insight Agent update controls

Minimum Insight Agent version requirements

The ability to manage updates in this way is only available if all the Insight Agents deployed in your organization are on version 2.7.0 or later. If you have agents in your organization that are currently on a version earlier than 2.7.0, this capability will not be available.

The Insight Agent receives regular software updates for operational stability and efficiency. By default, all agents in your environment update automatically when a software update is available. From the Data Collection Management page, you can configure how your Insight Agents respond when an update is available. This setting applies to all agents in your organization.

You can enable or disable automatic updates. For organizations that enable automatic updates, you can choose to update agents to the latest available version or a specific version.

To enable automatic updates:

  1. If you have multiple organizations in your environment, select the organization you want to update on the Data Collection Management page.
  2. From the Agents tab, go to the Settings menu and select Update Agents.
  3. Choose the Enable updates option.
  4. Choose the version that you want your deployed Insight Agents to update to automatically, which can be the latest version or a specific version. The last three released versions will be listed.
  5. Save your changes.

A banner will indicate if the setting change was successful.

Create an Insight Agent Test Set

For organizations that enable automatic updates, you can choose to update only a subset of your Insight Agents to a newer version that you specify. This Test Set functionality allows you to test newer versions of the Insight Agent in your environment before performing a wide-scale organizational update.

To create a Test Set for agents within your organization:

  1. On the Data Collection Management page, select the organization you want to create the Test Set for if you have multiple organizations in your environment.
  2. Perform a query within the Agent tab to retrieve the subset of agents that you want to include in your Test Set.
  3. From the Agents tab, go to the Settings menu and select Update Agents.
  4. Click the Test Set tab.
  5. Choose the specific agent version you want your Test Set of agents to update to. The last three released versions will be listed.
  6. Save your changes to automatically update your chosen subset of agents.

To promote your Test Set version to your organization setting:

  1. From the Agents tab, go to the Settings menu and select Update Agents.
  2. Choose the Test Set tab.
  3. Select Yes, update all agents to automatically update all your organization's agents to the newer agent version.
    • If you want, you are free to create a new Test Set to test a newer version of the agent at this time as well.

To clear your Test Set:

  1. From the Agents tab, go to the Settings menu and select Update Agents.
  2. Choose the Test Set tab.
  3. Select No, clear this test.

Clearing a Test Set does not revert to the previous agent version

Insight Agents will not revert to their previous agent version if you clear a Test Set. Clearing a Test Set enables you to create a new subset of agents to test a newer version of the Insight Agent on.