Written by Dr Al Hartmann and presented by Ziften CEO Charles Leaver
It would be terrific if your IT client endpoints could tell you that they are sick instead of receiving undesirable calls from dissatisfied IT users wouldn’t it? However the truth is that IT clients can not tell you when there is something amiss. Lots of IT individuals may disagree with the need for situational awareness, however you truly need this with your endpoints. The Ziften service makes this OKAY by:
With Ziften there is a minimalist driverless agent. This differs from standard systems management or security agents and the Ziften package is really lightweight (around 1-2MB MSI package). However don’t let the small size fool you, it will supply performance management headroom and effectiveness to achieve more on IT endpoints, which will keep the users happy and working. The Ziften agent can be compared with light beer, “Excellent taste, less filling.”
Also the Ziften agent monitors and reports on other agents that are deployed if there is excessive disturbance with foreground tasks.
With the Ziften agent you will receive other benefits that an agentless technique can not compare to. It can:
Supply real time response to dynamic events on the endpoint. If an agent is not present then regular polling is needed, which suggests that endpoint events are reported in a cadence after they have happened and not in real time.
The Ziften agent can adaptively throttle interfering processes. As an example, if a backup program is causing excessive interference with user performance, the backup program can be slowed down in favor of user productivity.
It will alert on the failures of important services such as antivirus, backup, firewall software and systems management. It holds true that an agentless approach might likewise do this, however it would not alert in real time so it is not as efficient.
The Ziften Agent will alert on severe security incidents that are identified at the client endpoint in real time.
It will acknowledge activity and user existence. With the Ziften agent, user existence can be found by viewing keyboard and last mouse use. It will also utilize the window proxy to figure out which window is foreground and which are in background. With this info, the Ziften agent can figure out application licenses really being used throughout the company.
If no agent is present then it is not possible to monitor and control when the endpoint is off the network. The Ziften agent can monitor off network endpoints and report cached observations when the endpoint reconnects. This gets rid of off network blind spots in monitoring coverage. Likewise, the Ziften agent has the ability to enforce policy even while detached.
Minimization of network traffic load between client endpoints and the management server is possible with the Ziften agent. It achieves this by abstracting, filtering, and summing up and encoding time series observations.
So with the Ziften agent your endpoint clients can “inform you where it hurts”.