Operating Principles

The Dr.Web ES Agent component connects to a centralized protection server (for example, to Dr.Web Enterprise Server), which allows a network administrator to implement a common security policy within the entire network, in particular, to configure the same scanning settings and reaction on threat detection for all workstations and servers of the network. In addition, the centralized protection server also acts as an internal update server on the protected network and stores up-to-date virus databases (in this case, updating is performed via Dr.Web ES Agent, Dr.Web Updater is not used).

When Dr.Web ES Agent connects to the centralized protection server, the agent receives up-to-date settings of the program components and the license key file from the server, which are then passed to the Dr.Web ConfigD configuration management daemon for applying them to the managed components. In addition, the component can also receive tasks from the centralized protection server for scanning file system objects on the station (including on schedule).

Dr.Web ES Agent collects statistics on detected threats and applied actions and sends it to the server to which the agent is connected.

To connect Dr.Web ES Agent to the centralized protection server, the password and identifier of the host (“station” in terms of the centralized protection server) are required as well as a public encryption key file, which is used by the server for authentication. Instead of the station identifier, while connecting, you can specify the identifier of the main and tariff groups in which the station is to be included. For the required identifiers and public key file, contact the administrator of your anti-virus network.

In addition, you can connect a protected host (“station”) to the centralized protection server as a “newbie”, if this is allowed by the centralized protection server. In this case, after the administrator confirms the request to connect the station, the centralized protection server automatically generates new identifier and password for the host and sends them to the agent for future connections.