Evaluation Quick Start Guide
Version 10.1
Ivanti Insight Evaluation Quick Start Guide
Table of Contents
Evaluation Quick Start Guide
Table of Contents
Introduction
Purpose of this guide
Technical Overview
Software and Accounts
Downloads
License
Pre-Requisites
Hardware and Hypervisor
Supported Operating Systems and Technologies
DNS Settings
Ports
Checklist of Required Information
Install and Configure the Appliance
Update the Appliance
Apply a License Key
Configure Networking Settings
API Keys
Configure Endpoints
Configure Endpoints with Ivanti Environment Manager
Configure Endpoints without Ivanti Environment Manager
Further information
Technical Support
1
2
3
3
3
4
4
4
5
5
5
5
6
6
7
8
9
10
11
12
12
17
19
19
Copyright © 2017, Ivanti. All Rights Reserved. Terms of Use.
Page 2 of 19
Ivanti Insight Evaluation Quick Start Guide
Introduction
Purpose of this guide
This guide is designed to assist administrators configure a small evaluation installation of Ivanti
Insight. It is assumed that the administrator configuring the environment has access to the hypervisor
and the network information required for configuration.
Insight was designed to run on endpoints that do not have any Ivanti components installed although
the configuration can be simplified when leveraging Ivanti Management Center and Ivanti
Environment Manager.
This guide is not recommended for use in a production environment as the setup of SSL
certificates is not included.
Technical Overview
Insight is distributed as a virtual appliance supporting the VMware ESXi, and Microsoft Hyper-V
platforms. The following diagram shows an overview of the Insight architecture:
Copyright © 2017, Ivanti. All Rights Reserved. Terms of Use.
Page 3 of 19
Ivanti Insight Evaluation Quick Start Guide
Software and Accounts
Downloads
Download the Insight appliance, the most recent patches, and the corresponding agents for your
endpoints. All appropriate appliance patches must be installed before you apply your license. An Ivanti
account is required to download our software. If you do not have an Ivanti account, request one from
your Ivanti sales representitive.
Download - Insight software.
License
Email your Ivanti sales representitive to obtain an Insight evaluation license key.
Copyright © 2017, Ivanti. All Rights Reserved. Terms of Use.
Page 4 of 19
Ivanti Insight Evaluation Quick Start Guide
Pre-Requisites
Hardware and Hypervisor
Ivanti provides separate media for the following hypervisors:
l
VMware ESXi versions 5.5 to 6.0
l
Hyper-V 2012 R2 and later
Each virtual appliance requires a minimum of 4GB RAM and 4vCPUs.
For environments with over 4,000 users, it is recommended that your appliance has a minimum of 8
cores and 16GB of ram.
Supported Operating Systems and Technologies
The supported operating systems and technologies are detailed in the Maintained Platform Matrix
available on appsense.com.
DNS Settings
Insight requires internal DNS settings and a public DNS record. The appliance DNS settings must
specify the DNS servers in the Active Directory and the domain names it should search.
To access the Insight service on the Internet, you must set up a public DNS record using the Insight
server name. You can then use this public DNS name to generate the Certificate Signing Request (CSR)
and apply for a publicly trusted SSL certificate.
Copyright © 2017, Ivanti. All Rights Reserved. Terms of Use.
Page 5 of 19
Ivanti Insight Evaluation Quick Start Guide
Ports
Configure the following IP ports:
Port
Description
TCP
443
The web administration interface is available over SSL on http port 443.
Clients can also use this port but it is recommended that they connect to port 10443 so
client traffic is segregated from the web administration interface.
TCP
For optimum performance clients should connect to port 10443.
10443
TCP
80
Reserved for future use.
UDP
53
Domain Name System (DNS) on UDP 53.
Checklist of Required Information
To complete the installation and configuration of the Insight appliance you require the following
information.
Hypervisor
Details
Hypervisor
VMware ESXi or Hyper-V
Insight Network
Details
Insight Appliance Name <appliance name>
Appliance IP address
<IP address>
Subnet mask
<IP mask>
Gateway
<gateway IP>
DNS
Details
DNS servers
<IP addresses>
DNS search domains
<domain names>
Copyright © 2017, Ivanti. All Rights Reserved. Terms of Use.
Page 6 of 19
Ivanti Insight Evaluation Quick Start Guide
Install and Configure the Appliance
1. Install and deploy the virtual appliance on your hypervisor (ESXi or Hyper-V Only).
2. Access the console and enter the default password: AppSense
The password is case sensitive.
3. Create and verify a new password.
4. Once the new password is created, press ESC.
5. Configure the network settings by configuring the fields below:
6. Press F10 to accept the settings.
7. Reboot the appliance.
After the reboot, access the web UI: https://[IP or FQDN of the appliance name]. You will see a certificate
error. Ignore this as a cert is not being set up for this evaluation.
Copyright © 2017, Ivanti. All Rights Reserved. Terms of Use.
Page 7 of 19
Ivanti Insight Evaluation Quick Start Guide
Update the Appliance
1. Access the patches you downloaded from Ivanti Support.
2. Unzip the BIN file.
3. In the Insight web UI, click Settings > Update.
4. Click BROWSE and navigate to the BIN file.
A Summary screen displays the current component versions and those of the uploaded update.
5. Click APPLY UPDATE NOW.
The appliance restarts and the login screen displays.
6. Sign in to finish applying the update.
During an update, the Insight Appliance may be unavailable.
Copyright © 2017, Ivanti. All Rights Reserved. Terms of Use.
Page 8 of 19
Ivanti Insight Evaluation Quick Start Guide
Apply a License Key
1. Save your evaluation license key from your email to your workstation in a text file.
2. In the Insight web UI, click Settings > License.
3. Click BROWSE and navigate to your license file.
4. Click UPLOAD.
5. Click APPLY LICENSE.
The license is applied and details of the new license are displayed.
Copyright © 2017, Ivanti. All Rights Reserved. Terms of Use.
Page 9 of 19
Ivanti Insight Evaluation Quick Start Guide
Configure Networking Settings
This section is only required if you need to specify DNS servers within Active Directory and the
domain names to search.
1. In the Insight web UI, click Settings > Networking.
2. Complete the following settings:
o
Fully Qualified Domain Name (FQDN)
o
DNS Server IP address.
o
DNS Search Domains.
o
NTP Servers.
3. To add and remove settings, click the + and – buttons.
4. When all required details have been added, click APPLY SETTINGS.
Copyright © 2017, Ivanti. All Rights Reserved. Terms of Use.
Page 10 of 19
Ivanti Insight Evaluation Quick Start Guide
API Keys
The API key is required when installing the Insight agent.
The guidance for this simple evaluation installation does not include configuring SSL
Certificates. Further details can be found in the online help:
www.appsense.com/help/IN/v10.0/Content/Insight/SSL_Certificates.htm
1. In the Insight web UI, click Settings > SSL Certificates.
2. Click Settings > API Keys.
The API key is the unique identifier that allows the agent to report to your appliance.
3. Ensure Enabled is selected for your key.
If a new key is required, click the regenerate button.
4. Copy this key to a text file.
Copyright © 2017, Ivanti. All Rights Reserved. Terms of Use.
Page 11 of 19
Ivanti Insight Evaluation Quick Start Guide
Configure Endpoints
Configure Endpoints with Ivanti Environment Manager
This section requires both Ivanti Management Center and Ivanti Environment Manager.
1. In the Management Center console go to the package library and upload the required Insight
agents.
The agent can now be deployed to the endpoints in the deployment group you are using to
evaluate Insight.
Copyright © 2017, Ivanti. All Rights Reserved. Terms of Use.
Page 12 of 19
Ivanti Insight Evaluation Quick Start Guide
2. In the Environment Manager console, create registry actions under the Computer Startup
trigger using the XML template provided:
1. Download the XML template from:
https://appsense-s3-oregon.s3.amazonaws.com/public/AppSense_Insight_EM_
Template.zip
2. Copy the following XML file to the machine which has the Environment Manager console
installed.
3. In the Environment Manager console select the Computer Startup trigger.
4. Right-click and select Ivanti Policy Templates > Import Template.
Copyright © 2017, Ivanti. All Rights Reserved. Terms of Use.
Page 13 of 19
Ivanti Insight Evaluation Quick Start Guide
5. Select the Insight XML template you downloaded in step 2 and click Open.
The table below shows details of the registry keys in the XML file.
Value
Type
Description
Server
REG_SZ
The name of the server to which the Insight data should
be uploaded. The name should have the following
format: nextgen.appsensemobile.com
ApiKey
REG_SZ
The API generated on the Insight console that allows
the service to connect to the REST API.
Logging
REG_
If set to 1, all logging is enabled. The log file
DWORD InsightDebug.log is located in
“%PROGRAMDATA%\AppSense\Insight”. The last log
file is kept with extension .old
UploadFrequency REG_
The length of time, in milliseconds, between data
DWORD uploads from clients to the server. If this value is not
present the default period is two minutes (120,000ms).
The setting should not exceed 20 minutes. In the
template, a value of 15 seconds is applied but this can
be updated as required.
WriteToFile
REG_
If set to non-zero then the InsightService and
DWORD InsightApplication will write any data they collect to the
“InsightLocal.log” file in the
“%PROGRAMDATA%\AppSense\Insight” folder instead
of sending it to the server.
The template also includes the CertificateFlags registry key that is used to disable
certificate checking by applying the setting in
HKLM\Software\Policies\AppSense\Insight.
Copyright © 2017, Ivanti. All Rights Reserved. Terms of Use.
Page 14 of 19
Ivanti Insight Evaluation Quick Start Guide
6. Modify the following environment specific registry keys to reflect your environment:
o
Server: IP or FQDN of the Appliance name beginning with https://
o
APIKey: Copied from the text file you saved in API Keys.
3. Enable auditing in the Environment Manager console:
1. Click Manage > Auditing.
2. Enable the following events to provide more detailed information in the logon time
reports:
n
9405 - User logon (legacy) action success
n
9406 - User logon (legacy) action fail
n
9436 - User logon (pre-session) action success
n
9437 - User logon (pre-session) action fail
n
9438 - User logon (pre-desktop) action success
n
9439 - User logon (pre-desktop) action fail
n
9440 - User logon (desktop created) action success
n
9441 - User logon (desktop created) action fail
4. Save and deploy the Environment Manager configuration to endpoints using the Management
Center.
Copyright © 2017, Ivanti. All Rights Reserved. Terms of Use.
Page 15 of 19
Ivanti Insight Evaluation Quick Start Guide
5. Reboot your endpoints to implement the Computer Startup actions.
Events will begin to upload to the Insight Reporting Interface.
Copyright © 2017, Ivanti. All Rights Reserved. Terms of Use.
Page 16 of 19
Ivanti Insight Evaluation Quick Start Guide
Configure Endpoints without Ivanti Environment
Manager
If you are evaluating Insight on devices without Ivanti DesktopNow components, the following
configuration methods can be used to install the agent and configure registry settings:
l
Manual installation
l
Group Policy installation
l
Installation by a third party tool to deploy the Insight Agent and registry settings to endpoints.
Command Line Client Installation
The following command line arguments can also be used when installing the agent MSI:
l
l
INSIGHT_SERVER – The hostname to which the Insight components should connect. For
example, dev.appsensemobile.com.
INSIGHT_KEY – The API key that was generated through the Insight web UI.
Example 1
Install the latest Insight client from a folder called Insight in c:\
msiexec.exe /i "C:\Insight\InsightAgent64_1.4.8.0.msi" INSIGHT_SERVER="https://(YOURIP OR FQDN)"
INSIGHT_KEY="(Your API Key)" /qn
The Insight keys are set in the registry at:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\AppSense\Insight
Example 2
Update the latest Insight client from the latest MSP in a folder called Insight in c:\ quietly
msiexec.exe /i "C:\Insight\InsightAgent64_1.4.8.0.msi"
PATCH="C:\Insight\InsightAgent64_1.4.24.0.msp" /qn
The MSP is downloaded and must be renamed by removing the ZIP at the end of the filename.
Configure the Client with Group Policy
1. Download the ADMX settings from:
https://appsense-s3-oregon.s3.amazonaws.com/public/AppSense_Insight_ADMX.zip
2. Import the templates into Active Directory Group Policy.
Copyright © 2017, Ivanti. All Rights Reserved. Terms of Use.
Page 17 of 19
Ivanti Insight Evaluation Quick Start Guide
3. Modify the following Insight settings for your installation:
o
Server API Key - Copied from the text file you saved in API Keys.
o
Server FQDN- IP or FQDN of the Appliance name beginning with https://
o
Upload Frequency - The frequency, in milliseconds, that the client sends data to the
server. If this value is not present the default period is two minutes (120,000ms).
o
SSL Cert. Flags - Set to Ignore all Certificate Errors for testing.
4. Leave the remaining settings at the default values.
Example
Configure the Client with Registry Files
Download the registry settings file from:
https://appsense-s3-oregon.s3.amazonaws.com/public/AppSense_Insight_Registry.zip
Modify the following fields for your specific installation:
o
Server - IP or FQDN of the Appliance name beginning with https://
o
APIKey - Copied from the text file you saved in API Keys.
Leave the remaining settings at the default values.
Copyright © 2017, Ivanti. All Rights Reserved. Terms of Use.
Page 18 of 19
Ivanti Insight Evaluation Quick Start Guide
Further information
Further information about installing, configuring and using Ivanti Insight is available from the online
help: www.appsense.com/help/in/v10.0.
The Install and Configure guide can also be downloaded from the help portal:
www.appsense.com/help/IN/v10.0/General/Install_and_Configure.htm
Technical Support
If you encounter any issues or want to provide feedback about Ivanti Insight please visit the following
link for the Insight Forum on the Ivanti Exchange:
http://forum.appsense-exchange.com/forums/forumdisplay.php?101-Insight
Copyright © 2017, Ivanti. All Rights Reserved. Terms of Use.
Page 19 of 19