Written by Dr Al Hartmann and presented by Ziften CEO Chuck Leaver
It would be terrific if your IT client endpoints could inform you that they are sick instead of receiving undesirable calls from dissatisfied IT users wouldn’t it? However the reality is that IT clients can not tell you when there is something wrong. Many IT individuals might disagree with the requirement for situational awareness, however you actually need this with your endpoints. The Ziften solution makes this OK by:
With Ziften there is a minimalist driverless agent. This differs from conventional systems management or security agents and the Ziften package is very light-weight (around 1-2MB MSI package). But don’t let the small size fool you, it will provide performance management headroom and effectiveness to achieve more on IT endpoints, which will keep the users delighted and working. The Ziften agent can be compared to light beer, “Terrific taste, less filling.”
Likewise the Ziften agent monitors and reports on other agents that are implemented if there is extreme disturbance with foreground tasks.
With the Ziften agent you will receive other benefits that an agentless approach can not compare to. It can:
Provide real time response to dynamic events on the endpoint. If an agent is not present then routine polling is required, which means that endpoint events are reported in a cadence after they have happened and not in real time.
The Ziften agent can adaptively throttle interfering processes. As an example, if a backup program is causing extreme interference with user productivity, the backup program can be slowed up in favor of user performance.
It will alert on the failures of crucial services such as antivirus, backup, firewall and systems management. It holds true that an agentless technique could likewise do this, but it wouldn’t alert in real time so it is not as effective.
The Ziften Agent will alert on serious security events that are identified at the client endpoint in real time.
It will acknowledge activity and user existence. With the Ziften agent, user presence can be identified by watching keyboard and last mouse usage. It will likewise utilize the window proxy to identify which window is foreground and which are in background. With this information, the Ziften agent can determine application licenses really being utilized across the organization.
If no agent is present then it is not possible to monitor and control when the endpoint is off the network. The Ziften agent can monitor off network endpoints and report cached observations when the endpoint reconnects. This removes off network blind spots in monitoring coverage. Also, the Ziften agent is able to implement policy even while disconnected.
Reduction of network traffic load between client endpoints and the management server is possible with the Ziften agent. It accomplishes this by abstracting, filtering, and summing up and encoding time series observations.
So with the Ziften agent your endpoint clients can “tell you where it hurts”.