[{"data":1,"prerenderedAt":1360},["ShallowReactive",2],{"blog-\u002Fblog\u002Feset-remote-administrator-prise-main-web-console":3,"blog-\u002Fblog\u002Feset-remote-administrator-prise-main-web-console-surround":1300,"blog-\u002Fblog\u002Feset-remote-administrator-prise-main-web-console-certifications":1359},{"id":4,"title":5,"body":6,"categories":1287,"cover":1289,"cover_contain":749,"credly_badge_id":1290,"date":1291,"description":1292,"extension":1293,"meta":1294,"navigation":749,"path":1295,"related_certifications":1290,"seo":1296,"slug":1297,"stem":1298,"__hash__":1299},"blog\u002Fblog\u002Feset-remote-administrator-prise-main-web-console.md","ESET Remote Administrator : prise en main de la web console",{"type":7,"value":8,"toc":1272},"minimark",[9,14,18,22,25,30,52,56,59,66,69,115,120,123,139,145,149,159,270,273,285,288,293,300,305,308,311,316,319,324,335,340,343,347,358,417,420,434,444,449,456,461,467,472,491,496,502,505,511,543,546,549,557,562,584,587,612,615,631,634,905,908,958,961,1035,1038,1053,1060,1076,1079,1083,1098,1102,1115,1120,1126,1131,1134,1139,1148,1153,1168,1173,1176,1181,1196,1201,1204,1209,1215,1228,1231,1247,1250,1255,1261,1265,1268],[10,11,13],"h2",{"id":12},"cas-dusage-concret","Cas d'usage concret",[15,16,17],"p",{},"Vous venez d'installer ESET ERA et devez piloter vos terminaux au quotidien : voici la prise en main de la web console.",[10,19,21],{"id":20},"era-web-console","ERA Web console",[15,23,24],{},"La console web permet l’administration de ESET Remote Administrator. La découverte de la console web nous guide vers le déploiement de notre premier programme d’installation lors de l’assistant de démarrage. Par la suite nous apprendrons son fonctionnement pour administrer, organiser et déployer les solutions ESET au sein d’un réseau composé d’hôtes Linux ou Windows.",[26,27,29],"h3",{"id":28},"le-sommaire","Le sommaire :",[31,32,33,37,40,43,46,49],"ol",{},[34,35,36],"li",{},"L’assistant de démarrage ESET Remote Administrator",[34,38,39],{},"L’indispensable rubrique : Admin",[34,41,42],{},"Gestion des groupes statiques et dynamiques",[34,44,45],{},"Déploiement d’un agent sur un serveur Linux",[34,47,48],{},"Installation à distance d’un programme Antivirus Endpoint",[34,50,51],{},"Conclusion sur le produit ERA web console",[10,53,55],{"id":54},"lassistant-de-démarrage-era","L’assistant de démarrage ERA",[15,57,58],{},"La prise en main du produit Web Console démarre par une introduction en 6 étapes détaillées ci-dessous en image :",[15,60,61],{},[62,63],"img",{"alt":64,"src":65},"","\u002Fimages\u002Fblog\u002Feset-remote-administrator-prise-main-web-console\u002F8407aeacf6.png",[15,67,68],{},"L’assistant nous permet de comprendre comment s’articule les principales fonctionnalités ERA WEB :",[70,71,72,79,85,91,97,103,109],"ul",{},[34,73,74,78],{},[75,76,77],"strong",{},"Ordinateurs"," : les ordinateurs remontent grâce à l’agent ERA pour être administrés.",[34,80,81,84],{},[75,82,83],{},"Groupes Statiques"," : un groupe statique permet d’inscrire un ordinateur manuellement à l’intérieur.",[34,86,87,90],{},[75,88,89],{},"Groupes Dynamiques"," : un groupe dynamique permet d’inscrire un ordinateur suivant des critères bien précis.",[34,92,93,96],{},[75,94,95],{},"Tâche client"," : permet d’envoyer des instructions aux ordinateurs et planifier des tâches avec un déclencheur.",[34,98,99,102],{},[75,100,101],{},"Agent ERA"," : l’agent effectue toutes les communications entre les produits ESET compatibles et le serveur ERA.",[34,104,105,108],{},[75,106,107],{},"ESET Endpoint"," : le produit de sécurité ESET qui est utilisé avec l’agent pour être controlé et configuré à distance.",[34,110,111,114],{},[75,112,113],{},"Déploiement"," : permet la création d’un programme d’installation pour le déploiement d’Endpoint vers Windows.",[15,116,117],{},[62,118],{"alt":64,"src":119},"\u002Fimages\u002Fblog\u002Feset-remote-administrator-prise-main-web-console\u002Fe0b3aafa04.png",[15,121,122],{},"Une fois les étapes d’assistance terminées, nous voici sur l’interface Web avec ses différentes rubriques :",[70,124,125,128,130,133,136],{},[34,126,127],{},"Tableau de bord",[34,129,77],{},[34,131,132],{},"Menaces",[34,134,135],{},"Rapports",[34,137,138],{},"Admin",[15,140,141,142,144],{},"Nous allons nous rendre dans ",[75,143,138],{}," afin de démarrer la prise en main de la web console.",[10,146,148],{"id":147},"la-rubrique-dadministration","La rubrique d’administration",[15,150,151,152,154,155,158],{},"Nous allons parcourir les configurations qui s’offrent à nous en sélectionnant dans la rubrique ",[75,153,138],{},", puis ",[75,156,157],{},"Aperçu de l’état"," avec ses choix  :",[70,160,161,181,199,217,229,240,252,264],{},[34,162,163,166,167,174,175,180],{},[75,164,165],{},"Aide et Assistance"," : regorge de ",[168,169,173],"a",{"href":170,"rel":171},"https:\u002F\u002Fwww.youtube.com\u002Fuser\u002FESETKnowledgebase",[172],"nofollow","vidéos éducatives"," avec une ",[168,176,179],{"href":177,"rel":178},"http:\u002F\u002Fkb.eset.com\u002Fesetkb\u002Findex?page=home",[172],"base de connaissances d’ESET"," de très bonne qualité.",[34,182,183,186,187,192,193,198],{},[75,184,185],{},"Utilisateurs :"," permet la création de différents ",[168,188,191],{"href":189,"rel":190},"http:\u002F\u002Fhelp.eset.com\u002Fera_admin\u002F62\u002Ffr-CA\u002Fadmin_ar_create_native_user.htm",[172],"utilisateurs"," pour configurer leurs ",[168,194,197],{"href":195,"rel":196},"http:\u002F\u002Fhelp.eset.com\u002Fera_admin\u002F62\u002Ffr-CA\u002Fadmin_ar_assign_user_a_permission_set.htm",[172],"permissions"," dans ERA.",[34,200,201,204,205,210,211,216],{},[75,202,203],{},"Certificats :"," création d’",[168,206,209],{"href":207,"rel":208},"http:\u002F\u002Fhelp.eset.com\u002Fera_admin\u002F62\u002Ffr-CA\u002Fcreate_a_new_cert_authority.htm",[172],"autorités de certification"," et des ",[168,212,215],{"href":213,"rel":214},"http:\u002F\u002Fhelp.eset.com\u002Fera_admin\u002F62\u002Ffr-CA\u002Fadmin_cert_peers.htm",[172],"certificats homologués"," pour les composants ERA.",[34,218,219,222,223,228],{},[75,220,221],{},"Licences"," : ESET Remote Administrator versions 6 utilise le ",[168,224,227],{"href":225,"rel":226},"https:\u002F\u002Fela.eset.com\u002F",[172],"système ELA"," pour gérer les licences.",[34,230,231,233,234,239],{},[75,232,77],{}," : p",[168,235,238],{"href":236,"rel":237},"http:\u002F\u002Fhelp.eset.com\u002Fera_admin\u002F62\u002Ffr-CA\u002Fadd_computers.htm",[172],"ermet l’ajout des appareils"," aux groupes dans ESET Remote Administrator.",[34,241,242,245,246,251],{},[75,243,244],{},"Agents"," : permet le ",[168,247,250],{"href":248,"rel":249},"http:\u002F\u002Fhelp.eset.com\u002Fera_admin\u002F62\u002Ffr-CA\u002Ffs_deployment.htm",[172],"déploiement d’un agent ERA"," vers les ordinateurs clients du réseau.",[34,253,254,257,258,263],{},[75,255,256],{},"Produits"," : permet l’",[168,259,262],{"href":260,"rel":261},"http:\u002F\u002Fhelp.eset.com\u002Fera_admin\u002F62\u002Ffr-CA\u002Ffs_product_installation.htm",[172],"installation d’un logiciel"," directement à partir du référentiel ESET ou spécifier un chemin d’accès vers un dossier partagé contenant les progiciels d’installation.",[34,265,266,269],{},[75,267,268],{},"Paramètres SMTP"," :  permettent à ESET ERA d’envoyer des messages courriels (notifications, des rapports…).",[15,271,272],{},"Pour commencer, voici les étapes que je vous invite à découvrir et à suivre :",[15,274,275,276,279,280],{},"Découvrir le produit avec ",[75,277,278],{},"la base de connaissance ESET Remote Administrator"," sur le ",[168,281,284],{"href":282,"rel":283},"http:\u002F\u002Fhelp.eset.com\u002Fera_admin\u002F64\u002Ffr-FR\u002Findex.html",[172],"lien suivant.",[15,286,287],{},"Créer un utilisateur natif est recommandé :",[15,289,290],{},[62,291],{"alt":64,"src":292},"\u002Fimages\u002Fblog\u002Feset-remote-administrator-prise-main-web-console\u002F7c63ffaadb.png",[15,294,295,296,299],{},"Nous allons ajouter un utilisateur natif autre que ",[75,297,298],{},"Administrator",", voici par exemple ma synthèse  :",[15,301,302],{},[62,303],{"alt":64,"src":304},"\u002Fimages\u002Fblog\u002Feset-remote-administrator-prise-main-web-console\u002Fb54a1b2e2e.png",[15,306,307],{},"Les certificats sont présents depuis la génération de l’installation de ERA.",[15,309,310],{},"La licence a été dans mon cas,ajoutée lors de l’installation, mais il est possible d’en ajouter d’autres :",[15,312,313],{},[62,314],{"alt":64,"src":315},"\u002Fimages\u002Fblog\u002Feset-remote-administrator-prise-main-web-console\u002F5f8c77968f.png",[15,317,318],{},"Nous allons arbitrairement passer directement aux paramétrages SMTP afin de nous faire parvenir les alertes importantes par mail :",[15,320,321],{},[62,322],{"alt":64,"src":323},"\u002Fimages\u002Fblog\u002Feset-remote-administrator-prise-main-web-console\u002F1d88576a55.png",[15,325,326,327,330,331,334],{},"Dans ",[75,328,329],{},"paramètres du serveur"," et ",[75,332,333],{},"paramètres avancés"," le choix du serveur SMTP est disponible, voici un exemple :",[15,336,337],{},[62,338],{"alt":64,"src":339},"\u002Fimages\u002Fblog\u002Feset-remote-administrator-prise-main-web-console\u002Fe09eb69216.png",[15,341,342],{},"Une fois la bonne configuration complétée, le test d’envoi de courrier fonctionne.",[10,344,346],{"id":345},"gestion-des-groupes-statiques-et-dynamiques","Gestion des groupes statiques et dynamiques.",[15,348,349,350,353,354,357],{},"Désormais, nous allons nous intéresser à la ",[75,351,352],{},"rubrique Ordinateurs"," qui contient par défaut des groupes statiques et dynamiques avec un parent nommé ",[75,355,356],{},"Tout"," qui contient les deux types de groupes réparties en sous groupes :",[70,359,360,366,372,377,382,387,392,397,402],{},[34,361,362,365],{},[75,363,364],{},"Perdu et trouvé"," – (Groupe statique et par défaut lors la première remonté des agents ERA)",[34,367,368,371],{},[75,369,370],{},"Ordinateurs Windows"," – (Groupe dynamique)",[34,373,374,371],{},[75,375,376],{},"Ordinateurs Linux",[34,378,379,371],{},[75,380,381],{},"Ordinateurs Mac",[34,383,384,371],{},[75,385,386],{},"Ordinateurs avec une base des signatures obsolétes",[34,388,389,371],{},[75,390,391],{},"Ordinateurs avec un système d’exploitation obsolétes",[34,393,394,371],{},[75,395,396],{},"Ordinateurs problématiques",[34,398,399],{},[75,400,401],{},"Produit de sécurité non activé",[34,403,404,407,408,411,330,414,371],{},[75,405,406],{},"Périphériques mobiles"," qui contiennent deux sous groupes :",[409,410],"br",{},[75,412,413],{},"Appareils Android",[75,415,416],{},"Appareils iOS",[15,418,419],{},"Il faut retenir la règle suivante :",[70,421,422,428],{},[34,423,424,427],{},[75,425,426],{},"Un groupe statique"," est composé uniquement d’un nom et d’une description fixe.",[34,429,430,433],{},[75,431,432],{},"Un groupe dynamique"," est composé d’un modèle permettant de classifier l’objet suivant un état en temps réel.",[15,435,436,437,439,440,443],{},"La gestion des groupes est disponible rubrique ",[75,438,138],{}," puis ",[75,441,442],{},"Groupes"," :",[15,445,446],{},[62,447],{"alt":64,"src":448},"\u002Fimages\u002Fblog\u002Feset-remote-administrator-prise-main-web-console\u002Fe8bbae6539.png",[15,450,451,452,455],{},"Cliquons sur ",[75,453,454],{},"Nouveau groupe dynamique"," et découvrons la création d’un nouveau groupe dynamique qui contiendra par exemple les serveurs web sous Linux :",[15,457,458],{},[62,459],{"alt":64,"src":460},"\u002Fimages\u002Fblog\u002Feset-remote-administrator-prise-main-web-console\u002Fa6244006e3.png",[15,462,463,464,443],{},"Nous avons ensuite le choix du modèle qui rendra dynamique notre groupe. Sélectionnons ",[75,465,466],{},"Nouveau",[15,468,469],{},[62,470],{"alt":64,"src":471},"\u002Fimages\u002Fblog\u002Feset-remote-administrator-prise-main-web-console\u002F5ac967af1f.png",[15,473,474,475,330,478,481,482,484,485,487,488,490],{},"La configuration d’un modèle apparaît avec deux onglets : ",[75,476,477],{},"Général",[75,479,480],{},"Expression",".",[409,483],{},"\nLe nom et la description du modèle seront dans ",[75,486,477],{}," et les conditions à réaliser seront dans ",[75,489,480],{}," comme :",[15,492,493],{},[62,494],{"alt":64,"src":495},"\u002Fimages\u002Fblog\u002Feset-remote-administrator-prise-main-web-console\u002F9e08a45c1b.png",[15,497,498,499,501],{},"L’idée est de regrouper les Serveurs Web Linux présents dans un sous réseau spécifique avec une passerelle précise.",[409,500],{},"\nDès lors, chaque serveur qui correspondra aux conditions ci-dessus sera automatiquement déplacé dans le groupe : Serveurs WEB Linux.",[10,503,45],{"id":504},"déploiement-dun-agent-sur-un-serveur-linux",[15,506,507,508,510],{},"Un serveur Linux (sans interface) sera la cible idéale de mon déploiement vers la solution ESET Endpoint Security.",[409,509],{},"\nAvant de démarrer le déploiement d’un agent il est nécessaire de comprendre les différents déploiements disponibles :",[70,512,513,531,537],{},[34,514,515,518,519,524,525,530],{},[75,516,517],{},"Le déploiement local"," a besoin de l’",[168,520,523],{"href":521,"rel":522},"https:\u002F\u002Fdownload.eset.com\u002Fcom\u002Feset\u002Fapps\u002Fbusiness\u002Fera\u002Fagent\u002Flatest\u002Fagent-linux-x86_64.sh",[172],"agent x64"," et d’exporter les ",[168,526,529],{"href":527,"rel":528},"http:\u002F\u002Fhelp.eset.com\u002Fera_admin\u002F62\u002Ffr-FR\u002F?admin_cert_peers.htm",[172],"certificats"," pour se faire sous Linux.",[34,532,533,536],{},[75,534,535],{},"Le déploiement à distance"," peut être fait via une tâche de serveur dans ERA ou bien via GPO ou SCCM.",[34,538,539,542],{},[75,540,541],{},"Le déploiement via l’installation Agent Live"," sert à distribuer le programme d’installation Agent Live sur la machine.",[26,544,517],{"id":545},"le-déploiement-local",[15,547,548],{},"Pour déployer l’agent localement et faire remonter directement notre serveur Linux dans ERA il faut au préalable :",[70,550,551],{},[34,552,553,554,556],{},"Récupérer le certificat d’agent (.pfx) et le certificat d’autorité (.der). L’export se réalise dans la rubrique Certificats.",[409,555],{},"\nDeux sous onglets apparaîssent voici l’exemple avec le certificat d’agent :",[15,558,559],{},[62,560],{"alt":64,"src":561},"\u002Fimages\u002Fblog\u002Feset-remote-administrator-prise-main-web-console\u002F59a1527014.png",[70,563,564,570,577],{},[34,565,566,567,481],{},"Pour le certificat d’autorité, il est exportable depuis ",[75,568,569],{},"Autorité de certification",[34,571,572,573,576],{},"Une fois les certificats exportés, il faut les importer sur le serveur Linux (ex ",[574,575],"haproxy",{},").",[34,578,579,583],{},[168,580,582],{"href":521,"rel":581},[172],"Télécharger l’agent ERA"," depuis le site ESET (sous la forme d’un script pour Linux).",[15,585,586],{},"Avant de commencer le déploiement de l’agent sur le serveur Linux, il faut le rendre exécutable :",[588,589,593],"pre",{"className":590,"code":591,"language":592,"meta":64,"style":64},"language-bash shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","chmod +x EraAgentInstaller.sh\n","bash",[594,595,596],"code",{"__ignoreMap":64},[597,598,601,605,609],"span",{"class":599,"line":600},"line",1,[597,602,604],{"class":603},"sBMFI","chmod",[597,606,608],{"class":607},"sfazB"," +x",[597,610,611],{"class":607}," EraAgentInstaller.sh\n",[15,613,614],{},"De plus, il est nécessaire de posséder le paquet libc6 pour la future installation du programme ESET :",[588,616,618],{"className":590,"code":617,"language":592,"meta":64,"style":64},"apt-get install libc6-i386\n",[594,619,620],{"__ignoreMap":64},[597,621,622,625,628],{"class":599,"line":600},[597,623,624],{"class":603},"apt-get",[597,626,627],{"class":607}," install",[597,629,630],{"class":607}," libc6-i386\n",[15,632,633],{},"Sinon vous risquez de rencontrer l’erreur suivante (sous Debian 8) :",[588,635,637],{"className":590,"code":636,"language":592,"meta":64,"style":64},"systemctl status esets.service\nesets.service - ESET Scanner Daemon\n   Loaded: loaded (\u002Flib\u002Fsystemd\u002Fsystem\u002Fesets.service; enabled)\n   Active: failed (Result: exit-code) since ven. 2017-04-28 16:01:04 CEST; 1min 4s ago\n  Process: 468 ExecStart=\u002Fopt\u002Feset\u002Fesets\u002Fsbin\u002Fesets_daemon (code=exited, status=69)\n\navril 28 16:01:03 haproxy systemd[1]: Starting ESET Scanner Daemon...\navril 28 16:01:04 haproxy esets_daemon[468]: error[01d40000]: Cannot initialize scanner: License not found\navril 28 16:01:04 haproxy systemd[1]: esets.service: control process exited, code=exited status=69\navril 28 16:01:04 haproxy systemd[1]: Failed to start ESET Scanner Daemon.\navril 28 16:01:04 haproxy systemd[1]: Unit esets.service entered failed state.\n",[594,638,639,650,668,691,720,744,751,779,815,849,878],{"__ignoreMap":64},[597,640,641,644,647],{"class":599,"line":600},[597,642,643],{"class":603},"systemctl",[597,645,646],{"class":607}," status",[597,648,649],{"class":607}," esets.service\n",[597,651,653,656,659,662,665],{"class":599,"line":652},2,[597,654,655],{"class":603},"esets.service",[597,657,658],{"class":607}," -",[597,660,661],{"class":607}," ESET",[597,663,664],{"class":607}," Scanner",[597,666,667],{"class":607}," Daemon\n",[597,669,671,674,677,681,685,688],{"class":599,"line":670},3,[597,672,673],{"class":603},"   Loaded:",[597,675,676],{"class":607}," loaded",[597,678,680],{"class":679},"sTEyZ"," (\u002Flib\u002Fsystemd\u002Fsystem\u002Fesets.service",[597,682,684],{"class":683},"sMK4o",";",[597,686,687],{"class":603}," enabled",[597,689,690],{"class":679},")\n",[597,692,694,697,700,703,706,709,711,714,717],{"class":599,"line":693},4,[597,695,696],{"class":603},"   Active:",[597,698,699],{"class":607}," failed",[597,701,702],{"class":679}," (Result: ",[597,704,705],{"class":607},"exit-code",[597,707,708],{"class":679},") since ven. 2017-04-28 16:01:04 CEST",[597,710,684],{"class":683},[597,712,713],{"class":603}," 1min",[597,715,716],{"class":607}," 4s",[597,718,719],{"class":607}," ago\n",[597,721,723,726,730,733,736,739,742],{"class":599,"line":722},5,[597,724,725],{"class":603},"  Process:",[597,727,729],{"class":728},"sbssI"," 468",[597,731,732],{"class":607}," ExecStart=\u002Fopt\u002Feset\u002Fesets\u002Fsbin\u002Fesets_daemon",[597,734,735],{"class":679}," (code=exited, ",[597,737,738],{"class":607},"status=",[597,740,741],{"class":728},"69",[597,743,690],{"class":679},[597,745,747],{"class":599,"line":746},6,[597,748,750],{"emptyLinePlaceholder":749},true,"\n",[597,752,754,757,760,763,766,769,772,774,776],{"class":599,"line":753},7,[597,755,756],{"class":603},"avril",[597,758,759],{"class":728}," 28",[597,761,762],{"class":607}," 16:01:03",[597,764,765],{"class":607}," haproxy",[597,767,768],{"class":607}," systemd[1]:",[597,770,771],{"class":607}," Starting",[597,773,661],{"class":607},[597,775,664],{"class":607},[597,777,778],{"class":607}," Daemon...\n",[597,780,782,784,786,789,791,794,797,800,803,806,809,812],{"class":599,"line":781},8,[597,783,756],{"class":603},[597,785,759],{"class":728},[597,787,788],{"class":607}," 16:01:04",[597,790,765],{"class":607},[597,792,793],{"class":607}," esets_daemon[468]:",[597,795,796],{"class":607}," error[01d40000]:",[597,798,799],{"class":607}," Cannot",[597,801,802],{"class":607}," initialize",[597,804,805],{"class":607}," scanner:",[597,807,808],{"class":607}," License",[597,810,811],{"class":607}," not",[597,813,814],{"class":607}," found\n",[597,816,818,820,822,824,826,828,831,834,837,840,843,846],{"class":599,"line":817},9,[597,819,756],{"class":603},[597,821,759],{"class":728},[597,823,788],{"class":607},[597,825,765],{"class":607},[597,827,768],{"class":607},[597,829,830],{"class":607}," esets.service:",[597,832,833],{"class":607}," control",[597,835,836],{"class":607}," process",[597,838,839],{"class":607}," exited,",[597,841,842],{"class":607}," code=exited",[597,844,845],{"class":607}," status=",[597,847,848],{"class":728},"69\n",[597,850,852,854,856,858,860,862,865,868,871,873,875],{"class":599,"line":851},10,[597,853,756],{"class":603},[597,855,759],{"class":728},[597,857,788],{"class":607},[597,859,765],{"class":607},[597,861,768],{"class":607},[597,863,864],{"class":607}," Failed",[597,866,867],{"class":607}," to",[597,869,870],{"class":607}," start",[597,872,661],{"class":607},[597,874,664],{"class":607},[597,876,877],{"class":607}," Daemon.\n",[597,879,881,883,885,887,889,891,894,897,900,902],{"class":599,"line":880},11,[597,882,756],{"class":603},[597,884,759],{"class":728},[597,886,788],{"class":607},[597,888,765],{"class":607},[597,890,768],{"class":607},[597,892,893],{"class":607}," Unit",[597,895,896],{"class":607}," esets.service",[597,898,899],{"class":607}," entered",[597,901,699],{"class":607},[597,903,904],{"class":607}," state.\n",[15,906,907],{},"Exécuter alors la commande suivante avec les paramètres : sans activation de licence, avec les certificats, le serveur ERA et son port de communication",[588,909,911],{"className":590,"code":910,"language":592,"meta":64,"style":64},".\u002FEraAgentInstaller.sh --skip-license --cert-path=\u002Fhome\u002Fjeremie\u002Fera_agent\u002Fkey_agent_ca.pfx \n--cert-auth-path=\u002Fhome\u002Fjeremie\u002Fera_agent\u002Fkey_public_ca_kassianoff.fr.der \n--hostname=172.16.230.2 --port=2222\n",[594,912,913,927,940],{"__ignoreMap":64},[597,914,915,918,921,924],{"class":599,"line":600},[597,916,917],{"class":603},".\u002FEraAgentInstaller.sh",[597,919,920],{"class":607}," --skip-license",[597,922,923],{"class":607}," --cert-path=\u002Fhome\u002Fjeremie\u002Fera_agent\u002Fkey_agent_ca.pfx",[597,925,926],{"class":679}," \n",[597,928,929,932,935,938],{"class":599,"line":652},[597,930,931],{"class":679},"--cert-auth-path",[597,933,934],{"class":683},"=",[597,936,937],{"class":607},"\u002Fhome\u002Fjeremie\u002Fera_agent\u002Fkey_public_ca_kassianoff.fr.der",[597,939,926],{"class":679},[597,941,942,945,947,950,953,955],{"class":599,"line":670},[597,943,944],{"class":679},"--hostname",[597,946,934],{"class":683},[597,948,949],{"class":607},"172.16.230.2",[597,951,952],{"class":679}," --port",[597,954,934],{"class":683},[597,956,957],{"class":607},"2222\n",[15,959,960],{},"En cas de d’erreur OpenSSL lors du déploiement de l’agent tel que :",[588,962,964],{"className":590,"code":963,"language":592,"meta":64,"style":64},"The archive will be extracted to: \u002Fopt\u002Feset\u002FRemoteAdministrator\u002FAgent\nExtracting, please wait...\nChecking OpenSSL ... failure\n: Error occurred while checking OpenSSL\n",[594,965,966,989,1000,1014],{"__ignoreMap":64},[597,967,968,971,974,977,980,983,986],{"class":599,"line":600},[597,969,970],{"class":603},"The",[597,972,973],{"class":607}," archive",[597,975,976],{"class":607}," will",[597,978,979],{"class":607}," be",[597,981,982],{"class":607}," extracted",[597,984,985],{"class":607}," to:",[597,987,988],{"class":607}," \u002Fopt\u002Feset\u002FRemoteAdministrator\u002FAgent\n",[597,990,991,994,997],{"class":599,"line":652},[597,992,993],{"class":603},"Extracting,",[597,995,996],{"class":607}," please",[597,998,999],{"class":607}," wait...\n",[597,1001,1002,1005,1008,1011],{"class":599,"line":670},[597,1003,1004],{"class":603},"Checking",[597,1006,1007],{"class":607}," OpenSSL",[597,1009,1010],{"class":607}," ...",[597,1012,1013],{"class":607}," failure\n",[597,1015,1016,1020,1023,1026,1029,1032],{"class":599,"line":693},[597,1017,1019],{"class":1018},"s2Zo4",":",[597,1021,1022],{"class":607}," Error",[597,1024,1025],{"class":607}," occurred",[597,1027,1028],{"class":607}," while",[597,1030,1031],{"class":607}," checking",[597,1033,1034],{"class":607}," OpenSSL\n",[15,1036,1037],{},"Il faut supprimer le paquet suivant :",[588,1039,1041],{"className":590,"code":1040,"language":592,"meta":64,"style":64},"apt-get remove libssl-dev:amd64\n",[594,1042,1043],{"__ignoreMap":64},[597,1044,1045,1047,1050],{"class":599,"line":600},[597,1046,624],{"class":603},[597,1048,1049],{"class":607}," remove",[597,1051,1052],{"class":607}," libssl-dev:amd64\n",[15,1054,1055,1056,1059],{},"Une fois l’Agent installé le service ",[75,1057,1058],{},"eraagent"," peut être exécuté comme ceci :",[588,1061,1063],{"className":590,"code":1062,"language":592,"meta":64,"style":64},"service erraagent start\n",[594,1064,1065],{"__ignoreMap":64},[597,1066,1067,1070,1073],{"class":599,"line":600},[597,1068,1069],{"class":603},"service",[597,1071,1072],{"class":607}," erraagent",[597,1074,1075],{"class":607}," start\n",[15,1077,1078],{},"Nous allons désormais retrouver sur l’interface web ERA dans la rubrique Ordinateurs notre serveur Linux.",[26,1080,1082],{"id":1081},"déploiement-dun-agent-sur-un-serveur-windows","Déploiement d’un agent sur un serveur Windows",[15,1084,1085,1086,1093,1094],{},"Sur Windows la manipulation est documentée dès l’installation du produit avec l’assistant de démarrage ESET Remote Administrator (le paquet généré à la fin du processus comprend l’agent et la suite de sécurité). Le déploiement à distance via un GPO est détaillé sur ",[168,1087,1090],{"href":1088,"rel":1089},"https:\u002F\u002Fhelp.eset.com\u002Fera_admin\u002F64\u002Ffr-FR\u002Findex.html?fs_agent_deploy_gpo_sccm.htm",[172],[75,1091,1092],{},"ce lien."," ",[1095,1096,1097],"em",{},"Je ne détaillerai pas la procédure qui fera l’objet d’un autre article.",[10,1099,1101],{"id":1100},"installation-à-distance-de-lantivirus-endpoint","Installation à distance de l’Antivirus Endpoint.",[15,1103,1104,1105,439,1107,481,1109,1111,1112,1114],{},"Pour procéder à l’installation à distance d’un package : il faut nous rendre dans la rubrique ",[75,1106,138],{},[75,1108,95],{},[409,1110],{},"\nNous choissisons en bas ",[75,1113,466],{}," et nous remplissons les cases :",[15,1116,1117],{},[62,1118],{"alt":64,"src":1119},"\u002Fimages\u002Fblog\u002Feset-remote-administrator-prise-main-web-console\u002F9e812ce6bb.png",[15,1121,1122,1123,443],{},"Les cibles peuvent être ajoutées après la création de cette tâche uniquement donc nous allons directement dans ",[75,1124,1125],{},"Paramètres",[15,1127,1128],{},[62,1129],{"alt":64,"src":1130},"\u002Fimages\u002Fblog\u002Feset-remote-administrator-prise-main-web-console\u002F517e08acf0.png",[15,1132,1133],{},"Une fois les termes du contrat et la licence ESET validée il faut sélectionner le package à déployer :",[15,1135,1136],{},[62,1137],{"alt":64,"src":1138},"\u002Fimages\u002Fblog\u002Feset-remote-administrator-prise-main-web-console\u002F31fb5b00e7.png",[15,1140,1141,1142,1144,1145,1147],{},"La liste est conséquente car elle regroupe l’ensemble des logiciels ESET dans plusieurs langues compatibles avec ERA.",[409,1143],{},"\nPour le choix, je n’ai pas d’interface graphique (GTK) donc Eset Server Security for mail\u002Fgateway est séléctionné.",[409,1146],{},"\nTerminons ensuite la création de la tâche mais une demande de création de déclencheur apparaît :",[15,1149,1150],{},[62,1151],{"alt":64,"src":1152},"\u002Fimages\u002Fblog\u002Feset-remote-administrator-prise-main-web-console\u002Fa2006a9ca2.png",[15,1154,1155,1156,1159,1160,1163,1164,1167],{},"La procédure de ",[75,1157,1158],{},"création du déclencheur"," est similaire à la création d’une tâche sauf qu’il faut, en plus de la description du déclencheur, sélectionner ",[75,1161,1162],{},"la cible"," (dans notre cas notre ",[75,1165,1166],{},"serveur haproxy",") :",[15,1169,1170],{},[62,1171],{"alt":64,"src":1172},"\u002Fimages\u002Fblog\u002Feset-remote-administrator-prise-main-web-console\u002F3b0b2957dc.png",[15,1174,1175],{},"Pour terminer, il est nécessaire de réaliser le déclenchement le plus tôt possible afin de continuer le déploiement :",[15,1177,1178],{},[62,1179],{"alt":64,"src":1180},"\u002Fimages\u002Fblog\u002Feset-remote-administrator-prise-main-web-console\u002F8fdedf92f2.png",[15,1182,1183,1184,1187,1188,1190,1191,439,1193,443],{},"Une fois validé par ",[75,1185,1186],{},"Terminer"," le déclencheur est créé et la tâche également. Pour vérifier l’état de déploiement de la solution ESET, rendons-nous dans la rubrique ",[75,1189,77],{}," puis sur Haproxy (coché) et en bas dans ",[75,1192,77],{},[75,1194,1195],{},"Détails",[15,1197,1198],{},[62,1199],{"alt":64,"src":1200},"\u002Fimages\u002Fblog\u002Feset-remote-administrator-prise-main-web-console\u002Fcc33504901.png",[15,1202,1203],{},"Le résultat devrait être celui-ci :",[15,1205,1206],{},[62,1207],{"alt":64,"src":1208},"\u002Fimages\u002Fblog\u002Feset-remote-administrator-prise-main-web-console\u002Fc5ceb2abcb.png",[15,1210,1211,1212,1214],{},"Rendons-nous alors sur notre machine Haproxy en SSH afin de vérifier que le programme est bien installé.",[409,1213],{},"\nLe chemin d’installation du produit est :",[588,1216,1218],{"className":590,"code":1217,"language":592,"meta":64,"style":64},"cd \u002Fopt\u002Feset\u002Fesets\u002Fsbin\u002F\n",[594,1219,1220],{"__ignoreMap":64},[597,1221,1222,1225],{"class":599,"line":600},[597,1223,1224],{"class":1018},"cd",[597,1226,1227],{"class":607}," \u002Fopt\u002Feset\u002Fesets\u002Fsbin\u002F\n",[15,1229,1230],{},"Si lors du déploiement vous n’avez pas inclus la licence, il est possible de le faire comme ceci :",[588,1232,1234],{"className":590,"code":1233,"language":592,"meta":64,"style":64},"\u002Fesets_lic --import file.lic\n",[594,1235,1236],{"__ignoreMap":64},[597,1237,1238,1241,1244],{"class":599,"line":600},[597,1239,1240],{"class":603},"\u002Fesets_lic",[597,1242,1243],{"class":607}," --import",[597,1245,1246],{"class":607}," file.lic\n",[15,1248,1249],{},"Le déploiement est terminé, spontanément vous pouvez lancer une analyse sans nettoyage :",[15,1251,1252],{},[62,1253],{"alt":64,"src":1254},"\u002Fimages\u002Fblog\u002Feset-remote-administrator-prise-main-web-console\u002F1d12bde27a.png",[15,1256,1257,1258,1260],{},"A partir de ce moment l’ordinateur basculera dans un groupe dynamique si un groupe existe comme vu précédemment.",[409,1259],{},"\nLe serveur devient entièrement administrable par ERA afin de renforcer sa sécurité : des stratégies et rapports de menaces peuvent être mis en place.",[10,1262,1264],{"id":1263},"conclusion-sur-la-prise-en-main-du-produit-era-console","Conclusion sur la prise en main du produit ERA console",[15,1266,1267],{},"La première approche avec le produit ERA web console démontre une certaine efficacité et rapidité dans le déploiement d’une solution de sécurité en entreprise et ce, quelque soit l’OS  (Linux\u002FMac ou Windows). Dans un prochain article je m’attarderai sur le déploiement de stratégie ou encore la gestion des menaces au sein du réseau que peut gérer ESET.",[1269,1270,1271],"style",{},"html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}",{"title":64,"searchDepth":652,"depth":652,"links":1273},[1274,1275,1278,1279,1280,1281,1285,1286],{"id":12,"depth":652,"text":13},{"id":20,"depth":652,"text":21,"children":1276},[1277],{"id":28,"depth":670,"text":29},{"id":54,"depth":652,"text":55},{"id":147,"depth":652,"text":148},{"id":345,"depth":652,"text":346},{"id":504,"depth":652,"text":45,"children":1282},[1283,1284],{"id":545,"depth":670,"text":517},{"id":1081,"depth":670,"text":1082},{"id":1100,"depth":652,"text":1101},{"id":1263,"depth":652,"text":1264},[1288],"Sécurité","\u002Fimages\u002Fblog\u002Feset-remote-administrator-prise-main-web-console\u002F15dab17188.jpg",null,"2017-05-30","ERA web console est l’outil d'administration de Eset permettant de manager les terminaux du réseau informatique.","md",{},"\u002Fblog\u002Feset-remote-administrator-prise-main-web-console",{"title":5,"description":1292},"eset-remote-administrator-prise-main-web-console","blog\u002Feset-remote-administrator-prise-main-web-console","-1DCEuAzncUnLJs9YVhBpXOH6PFf40WPUBOXUr9Bl7s",[1301,1309,1316,1324,1331,1337,1345,1352],{"title":1302,"path":1303,"stem":1304,"date":1305,"cover":1306,"categories":1307,"children":-1},"Intégration de Windows Server 2016 core sous KVM\u002FQEMU","\u002Fblog\u002Fintegration-windows-server-2016-core-sous-kvm-qemu","blog\u002Fintegration-windows-server-2016-core-sous-kvm-qemu","2017-10-17","\u002Fimages\u002Fblog\u002Fintegration-windows-server-2016-core-sous-kvm-qemu\u002F9b895102f9.jpg",[1308],"Linux",{"title":1310,"path":1311,"stem":1312,"date":1313,"cover":1314,"categories":1315,"children":-1},"Installation et configuration de Zextras Suite","\u002Fblog\u002Finstallation-configuration-zextras-suite","blog\u002Finstallation-configuration-zextras-suite","2017-10-07","\u002Fimages\u002Fblog\u002Finstallation-configuration-zextras-suite\u002F3cc0db9e57.png",[1308],{"title":1317,"path":1318,"stem":1319,"date":1320,"cover":1321,"categories":1322,"children":-1},"Une nuit à l’éco-site Oasis Bellecombe","\u002Fblog\u002Fune-nuit-eco-site-oasis-bellecombe","blog\u002Fune-nuit-eco-site-oasis-bellecombe","2017-09-09","\u002Fimages\u002Fblog\u002Fune-nuit-eco-site-oasis-bellecombe\u002Ff6ac468e74.jpg",[1323],"Évènement",{"title":1325,"path":1326,"stem":1327,"date":1328,"cover":1329,"categories":1330,"children":-1},"Les sauvegardes de mes machines KVM\u002FQEMU avec Veeam for Linux","\u002Fblog\u002Fles-sauvegardes-mes-machines-kvm-qemu-avec-veeam-for-linux","blog\u002Fles-sauvegardes-mes-machines-kvm-qemu-avec-veeam-for-linux","2017-07-09","\u002Fimages\u002Fblog\u002Fles-sauvegardes-mes-machines-kvm-qemu-avec-veeam-for-linux\u002Fdb83b58b53.png",[1308],{"title":1332,"path":1333,"stem":1334,"date":1335,"cover":1336,"categories":1290,"children":-1},"Mise à jour du routeur SRX 100 sous Junos","\u002Fblog\u002Fmise-jour-routeur-srx-100-sous-junos","blog\u002Fmise-jour-routeur-srx-100-sous-junos","2017-05-17","\u002Fimages\u002Fblog\u002Fmise-jour-routeur-srx-100-sous-junos\u002F1b4814003c.jpg",{"title":1338,"path":1339,"stem":1340,"date":1341,"cover":1342,"categories":1343,"children":-1},"ESET Remote Administrator : installation sous Windows","\u002Fblog\u002Feset-remote-administrator-installation-sous-windows","blog\u002Feset-remote-administrator-installation-sous-windows","2017-04-30","\u002Fimages\u002Fblog\u002Feset-remote-administrator-installation-sous-windows\u002F15dab17188.jpg",[1344],"Microsoft",{"title":1346,"path":1347,"stem":1348,"date":1349,"cover":1350,"categories":1351,"children":-1},"Hack In Paris et Nuit du Hack du 19 au 25 Juin 2017","\u002Fblog\u002Fhack-paris-nuit-hack-juin-2017","blog\u002Fhack-paris-nuit-hack-juin-2017","2017-04-25","\u002Fimages\u002Fblog\u002Fhack-paris-nuit-hack-juin-2017\u002F4cd713ef6f.png",[1323],{"title":1353,"path":1354,"stem":1355,"date":1356,"cover":1357,"categories":1358,"children":-1},"Installation et configuration de Owncloud","\u002Fblog\u002Finstallation-configuration-owncloud","blog\u002Finstallation-configuration-owncloud","2017-03-09","\u002Fimages\u002Fblog\u002Finstallation-configuration-owncloud\u002F5625a922b3.jpg",[1308],[],1786644874201]