Application Resilience policies for Dell Advanced Threat Prevention

Application Resilience policies for Dell ATP are supported on devices running:

• a supported version of the Windows operating system

• PowerShell version 5.1 or higher

  Due to PowerShell restrictions imposed by Microsoft, Application Resilience isn't supported for this application on devices running Windows 11 SE.

• the following version of Dell Endpoint Security Suite Enterprise:

  • 2.0.1.5

This platform requires the installation of a number of components, including the Dell ATP Agent, on the organization's devices.

In addition to checking the version, the following table describes the health checks performed:

Report higher versions as Compliant is not available.

You can configure an Application Resilience policy for Dell ATP to enable the Application Resilience (RAR) component A lightweight software component of the Secure Endpoint Agent that detects the status of third party applications installed on a device. The component may also attempt to repair the third party application if it is non-compliant. The RAR component is deployed on a device only when the device is associated with a customized policy group and that policy group's Application Resilience policy is activated. to attempt to reinstall the following Dell Endpoint Security Suite Enterprise components if they're not functioning or missing:

• Dell ATP Agent
• Dell ATP Plugin
• Dell Encryption Management Agent

The Report and repair option isn't supported. Depending on the Absolute product licenses associated with your account, the Report, repair, and reinstall option may not be available.

The RAR component of the Secure Endpoint Agent can respond to the following issues if the Report, repair, and reinstall option is selected:

If you want the Secure Endpoint Agent to reinstall the Dell ATP Agent if it is non-functional or missing, you need to make the following Dell installers available for download:

• Dell ATP Agent installer
• Dell ATP Plugin installer
• Dell Encryption Management Agent installer

These installers, which are included in the Dell Endpoint Security Suite Enterprise master installer, need to be extracted to a web server before you begin configuring the policy. You also need to generate a SHA-256 hash for each installer file.

To prepare the installers:

1. Copy the Dell Endpoint Security Suite Enterprise master installer (DDSSuite.exe) from the installation media to your computer.

2. Extract the installers from the master installer by doing the following:

   1. Open a Command prompt and navigate to the location of the DDSSuite.exe file.

   2. Enter the following where <destination folder> is the location where you want to store the extracted installer, and press Enter:

      Copy

      DDSSuite.exe /z"\"EXTRACT_INSTALLERS=<destination folder>""

      For example, if <destination folder> is C:\DellEncryption_installer\, enter:

      Copy

      DDSSuite.exe /z"\"EXTRACT_INSTALLERS=C:\DellEncryption_installer\""

   3. If User Account Control (UAC) is enabled, click Yes to open the InstallShield Wizard and begin extracting the master installer.
   4. When the installer is extracted, click Finish to close the InstallShield Wizard.
   5. Navigate to the destination folder. You'll see that each installer is extracted to its own folder.

   Ensure that you extract all of the required installers from a single DDSSuite.exe file. Do not use installers obtained from multiple sources.

3. Copy the contents of the following folders to the web server where you want to host the installers:
   • Advanced Threat Prevention, which contains the Dell ATP Agent installer and the Dell ATP Plugin installer
   • Encryption Management Agent, which contains 32- and 64-bit versions of the Dell Encryption Management Agent installer

   Both HTTP and HTTPS protocols are supported. If necessary, you can restrict access to the installers by enabling HTTP basic authentication on the web server.

4. Use a hash generator tool of your choice to generate a SHA-256 hash for each installer file. For example, you can use the CertUtil.exe command-line utility, which is included with most Windows operating systems.

Pre-caching installers

The RAR component looks for the following files names when checking pre-cached installers:

Component	File name
Installers	ATP_AgentSetup.exe ATP_CSF_Plugins.msi EMAgent_setup.exe

Before you activate an Application Resilience policy you need to configure the policy. If you selected Report, repair, and reinstall, use the installers and SHA-256 Hash keys from Preparing the Dell installers in Configuring Application Resilience policies and configure these additional settings.

To configure the Dell ATP specific settings:

1. Under Dell Management Server:

   1. Enter the fully qualified hostname of the Dell Management Server (for example, myserver.example.com). This server is also referred to as the Core server.
   2. If you're not using port 8888 to connect to the server, edit the default port number that shows in the field.

2. Under Dell Management Security Server:

   1. Enter the fully qualified hostname of the Dell Management Security server (for example, myserver.example.com).
   2. If you're not using port 8443 to connect to the server, edit the default port number that shows in the field.