📜 ⬆️ ⬇️

ActiveDirectory Integration into Aether Management Console



The automatic integration of ActiveDirectory with the new IB Security Management Console Aether allows you to quickly implement protection and easily manage it.

Many organizations and enterprises have an Active Directory server installed. The new Aether Management Console for managing corporate information security cloud solutions Panda Endpoint Protection , Endpoint Protection Plus , Adaptive Defense and Adaptive Defense 360 can automatically receive a customized Active Directory structure and replicate it to the group list in the organization tree of computers. In this case, you will be able to see the Active Directory folders in the Aether management console, which will allow you to find, protect and manage computers on them much easier and faster.

In order to automatically reproduce the entire Active Directory structure in the Aether Management Console, the local Panda agent automatically transfers to the web console the Active Directory group to which the computer on which the agent is installed belongs. Therefore, as local agents are installed on enterprise computers, the organizational tree of computers in the web console of Panda begins to be filled with an Active Directory structure with computers attached to its folders.
')


Active Directory folders cannot be changed in the Aether Management Console, since they will change only when changes are made in Active Directory itself, which will be updated in the Aether console within 15 minutes.

So, to display the Active Directory structure in the Aether console, it is necessary that the local Panda enterprise solution agents are installed on the computers.

Installing security with Active Directory


To quickly and easily install a Panda enterprise solution on an enterprise network on Windows computers, you can use various remote and centralized installation methods, both integrated into the Aether management console, and third-party systems for remote and centralized software deployment, including Active Directory.

Below, I will describe the steps to implement, for example, Panda Adaptive Defense 360 ( Pand a corporate solution , managed via the Aether Management Console) on Windows computers in an Active Directory network using a Group Policy Object (GPO).

Download and share the installer Panda Adaptive Defense 360.

For quick installation, you can take the standard installer with standard settings, since all required protection settings can be applied later. To download the Panda Adaptive Defense installer, see my previous article “Aether Management Console: How to Deploy Corporate Protection” in the “Panda Quick Start” chapter.

Once you have downloaded the installer, place it in a shared folder that will be accessible to all computers where you want to install the local Panda agent.

In the Active Directory create a new OU (Organizational Unit)

Open the Active Directory Users and Computers applet, in which create a new unit called Adaptive Defense .



Open Group Policy Management and in Domains, right-click on the newly created OU Adaptive Defense to select Block inheritance from the menu to block inheritance.



Now create a new GPO in Adaptive Defense .



Add a new installation package to the created GPO

Go to edit the newly created GPO.



Add a new installation package that contains the installer of Panda Adaptive Defense 360 . To do this, you will be prompted to add the installer to the GPO.



Change deployment settings

Go to Properties -> Deployment -> Advanced and check the checkbox to ignore the language when deploying the installation package



After that, in the Adaptive Defense unit that you created in Active Directory Users and Computers , add all the network computers on which the Panda Adaptive Defense 360 installer should be installed.

As a result, as the local Panda agents are installed in the Computers section of the Aether Management Web Console, the organization tree will be filled with the Active Directory folder structure with the computers attached to them.

Active Directory Folder Actions

Integrating Active Directory folders into the Aether Management Console will allow you to quickly find the required computer in the appropriate AD folder, as well as perform various tasks with respect to these folders and the computers associated with them.

For example, with respect to a folder, you can do the following:




And with respect to the computers in the folder, you can do the following:




Conclusion


Now you know how you can easily and easily install Panda corporate security using Active Directory, as well as integrate its folder structure into the organizational tree of computers in the Aether management console.

This approach is very useful for networks of medium and large size, because allows you to automate, and therefore improve the efficiency and speed of implementation of corporate protection and management.

Source: https://habr.com/ru/post/352736/


All Articles