Software Secure Workload
Activity Configure

Remove a Deep Visibility or Enforcement AIX Agent

Procedure

Run command: ‘installp -u tet-sensor‘.

Once the Software Agent is uninstalled and no longer available on the UI, this status is communicated to the cluster, and the agent will be marked as uninstalled on the Software Agent page.

There are two methods to delete or remove the agent from the UI:

  • Delete the agent that is no longer needed directly from the Software Agent page. Additionally, you can delete the Tetration agent installation directory /opt/cisco/tetration by running the following command:

    rm -rf /opt/cisco/tetration
    
  • Enable automated cleanup by configuring the cleanup period on the Agent Configuration Profiles page..


 
  • By default, the cleanup period is turned off.

  • The Deep Visibility Agent is controlled by System Resource Controller as tet-sensor. It is possible to start, stop, restart, and remove it. The service is made persistent with inittab as tet-sen-engine.

  • The Enforcement Agent is controlled by System Resource Controller as tet-enforcer. It is possible to start, stop, restart, and remove it. The service is made persistent with inittab as tet-enf-engine.

  • During the agent operations, it is possible that some kernel modules will be loaded automatically by the kernel. For example, if enforcement is enabled in AIX, ipfilter modules are loaded. Agents do not have a list of modules loaded by kernel. Therefore, during agent uninstallation, it cannot possibly unloaded the kernel modules.

  • If enforcement agent applied a policy to the system firewall, uninstalling agent clears the applied policy and opens the system firewall.