3.2. Dr.Web Enterprise Agent

Principle of Operation

Workstations are protected from virus threats by the Dr.Web anti-virus packages designed for correspondent OS.

The packages operate by Enterprise Agents, which is installed and constantly resided in the memory of protected workstations. They maintain connection to Enterprise Server, thus enabling administrators to centralized configure anti-virus packages on workstations from the Dr.Web Control Center, schedule anti-virus checks, see the statistics of anti-virus components operation and other information, start and stop remotely anti-virus scanning, etc.

Enterprise Servers opportunely download updates and distribute them to the Agents connected to them. Thus due to Enterprise Agents anti-virus protection is implemented, maintained and adjusted automatically, without user intervention and irregardless of user’s computer skills.

In case an anti-virus station is outside the anti-virus network, Enterprise Agent uses the local copy of the settings and the anti-virus protection on that computer retains its functionality (up to the expiry of the user’s license), but virus databases and program files are not updated.

Updating of mobile Agents is described in p. Updating Mobile Agents.

Basic Functions

The Dr.Web Enterprise Agent is designed to perform the following:

installs, updates and sets up the anti-virus package, starts scannings, and performs other tasks given by the Enterprise Server;

allows to call for execution the Dr.Web anti-virus package files through a special interface;

sends the results of tasks execution to the Enterprise Server;

sends notifications of predefined events in the operation of the anti-virus package to the Enterprise Server.

Every Enterprise Agent is connected to Enterprise Server and is included in one or several groups registered on this Server (for more, see p. System and User Groups). The Agent and Enterprise Server communicate through the protocol used in the local network (TCP/IP, IPX or NetBIOS).

 

Hereinafter a computer on which Enterprise Agent is installed as per its functions in the anti-virus network will be called a workstation, while in the local network it can be functioning both as a server or a workstation.

 

Management Interface under Windows OS

When run in the Windows OS environment, Enterprise Agent displays an icon in the Taskbar.

The icon visual representation depending on components state, is listed in the following Table.

The icon visual representation

Icon

Description

State

The black picture on the green background.

The Agent is operating normally and is connected to the Server.

A crossed Server icon on the basic background.

The Server is unavailable.

An exclamation mark in a yellow triangle over the icon.

The Agent requests to restart the computer, or components SelfPROtect or Spider Guard are disabled.

The background of the icon changes color from green to red.

An error occurred during updating of the package components.

The background of the icon is constantly red.

The Agent is stopped or not running.

The background of the icon is yellow.

The Agent is working in the mobile mode (for more, see p. Updating Mobile Agents).

Some administrative functions over the anti-virus workstation are accessible through the context menu of this icon, which is shown in Figure below.

The context menu of Enterprise Agent

The range of settings accessible through the context menu of the Agent icon depends on the configuration of the workstation specified by the administrator.

 

You can find info about the set of Agents parameters and description of corresponding administrative functions in the Enterprise Agent help.

 

About the settings of Enterprise Agent read p. Editing the Parameters of the Dr.Web Enterprise Agent.

 

Start and Stop the Dr.Web Enterprise Agent under Windows OS

 

The Exit command in the Agent context menu only stops the Agent GUI (see the Management Interface under Windows OS section) and removes the icon from the notification area of the Taskbar. The Agent will remain running.

 

To terminate the program itself, execute the following command:

net stop drwagntd

It is not recommended to stop the Agent because in this case the anti-virus package software will not be updated and the Server will not receive any information on the  status of the workstation, although the permanent protection will not be disabled.

The Agent will be launched automatically at computer restart. To launch the program back without restarting your computer, execute the following command:

net start drwagntd