New capability - Track your hard-to-reach assets using IT Agent, the future of LsAgent

[Gilian]

Hi everyone!

Lansweeper is delighted to announce the availability of its new IT Agent in your Lansweeper Site. Track your hard-to-reach assets using the IT Agent which tracks the details of a single computer running Windows, Linux, or Apple MacOS and sends these directly to your Lansweeper Site.

How to access IT Agent in your Lansweeper Site

1. Open a browser and navigate to https://app.lansweeper.com.
2. Choose the Lansweeper Site to which you want to link the IT Agent Discovery. 
3. Go to Scanning > Discovery systems > Download installers/packages > IT Agent Discovery

A brief explanation

• Learn how to install/deploy IT Agent here.

• After a successful installation, the IT Agent(s) will be shown in your Lansweeper Site in Scanning > Discovery systems.

• To see the asset data, you can open Inventory > All assets (and you can use the search/advanced filter on the top right to filter on the specific assets/installation where IT Agent is running)

Product comparison

Lansweeper IT Agent vs LsAgent vs Network Discovery

Topic	Lansweeper IT Agent (Portable)	Lansweeper LsAgent	Lansweeper Network Discovery
Summary	Newest generation local tracking of any IT device running Windows, Linux or macOS device (including guest virtual machines and connected monitors)	Older generation local tracking of any IT device running Windows, Linux or macOS device (including guest virtual machines and connected monitors)	Discover all IT assets in your network. OT discovery will be added to the same installer/package later on
Asset reach	By default, local tracking only, no other network devices are discovered. This can be changed, but we recommend using Network Discovery for discovering network devices instead	Local tracking only, no other network devices are discovered. To discover network devices in combination with LsAgent, we recommend using Lansweeper On-Premise	Tracks both the machine running Network Discovery and discovers IT (and later OT) assets remotely
Asset data	Expanded default IT discovery data set (extra data like user info on macOS)	Default IT discovery data set	Expanded default IT (and later OT) discovery data set (extra data like user info on macOS)
Credentials	No credentials required for local tracking (runs as local system or similar elevated user by default). Credentials are optional for remote discovery but we advise to use Network Discovery for discovering network devices instead.	No credentials required for local tracking (runs as local system or similar elevated user by default).	Requires credentials to get all asset details remotely. Can recognize assets without credential though
Network access	Syncs with Lansweeper Site directly To sync with your Lansweeper Site, HTTP2 proxy is supported Check Install IT Agent Discovery - Lansweeper Community for connection requirements Send results to Network Discovery hub or to a file on a network drive for later import into Lansweeper Site. See Set up and run Lansweeper IT Agent Discovery Portable	Does not sync with Lansweeper Site directly HTTP2 proxy is not supported Requires a scan server to connect to (from a Lansweeper On-Premise installation). Can also connect first to Lansweeper LsAgent Relay server, see this link. Can save results to a file for import into Lansweeper On-Premise via scan server	Requires specific ports to be open on the assets to discover. See Ports scanned or used by Lansweeper To sync with your Lansweeper Site, HTTP2 proxy is supported
Auto update	Auto update on Windows, Linux and macOS	Auto update on Windows. Linux and macOS require manual updates	Auto update on Windows, Linux and macOS
Vulnerability risks	Built on .NET 8.0 with a reduced vulnerability risk in comparison to .NET FW 4.8	Built on .NET FW 4.8 (Windows) and .NET 6.0 (Linux, macOS)	Built on .NET 8.0 with a reduced vulnerability risk in comparison to .NET FW 4.8

Kind regards,

Gilian De Raes
Product Manager | Lansweeper

[Gilian]

@eputz currently it's still 24 hours. But our development team is working on an improved solution where you can set the expiration manually and create a new linking code, revoking a previous one to guarantee security.

[eputz]

Thanks @Gilian , that sounds like it would work nicely. Any chance you can post in these comments when available so I get a notification 👍

[Gilian]

Hi @SimonJuulLarsen ,

Thanks for mentioning. We're going to exclude the IT Agents from those system notifications so we only focus on scan servers there.

[Gilian]

Hi @SimonJuulLarsen , we are indeed adding the option to set an expiration timing of your personal choice for the linking code to your Lansweeper Site. Our development team is currently reviewing their solution so it keeps ensuring a secure way to have new data entering your Lansweeper Site. We expect to have this solution implemented soon. Until then, a linking code expires every 24h.

The installer does return specific exit codes and error messages which I now added above, in the FAQ section of the original post.

[Gilian]

@avillarreal 

This is a bug in the IT Agent which we've already fixed but is still being tested as we speak. Expect to have release with a fix available in your LS Site (Scanning > Discovery sources > Download) soon.

Meanwhile you could try this:

* Remove any cloudtoken.txt file from your IT Agent installation directory

* Restart the IT Agent installer (with a new linking code from your LS Site > Scanning > Discovery Sources > Link Discovery source)

[eputz]

@Gilian Hi Gillian, we've got the IT agent deployed to approx. 2300 windows devices now and what we've noticed is that about 300 of those devices are being incorrectly classified as 'Mobile' device when they're Workstations running Windows 10 Education. How can we get them correctly classified as 'Windows' devices?

[Gilian]

@eputz , +2K devices using IT Agent? That's great news! We did notice a solid increase in the number of IT Agents lately and now we know why ;-). 

Seems like a bug as the asset type shouldn't be changed if IT Agent detected a "Windows" device. I already contacted our development teams so we can have this resolved. Thanks to auto update they would be automatically set to Windows.

For any other asset type, you could resolve this manually using inventory > assets > selecting multiple assets > clicking the bulk edit button on the top > setting the new asset type and clicking the lock icon (to never overwrite this value), but you can't do this for the Windows asset type.

[avillarreal]

Hello @Gilian ,

I'm noticing that every time that my computer reboots the Lansweeper Sensor fails as it doesn't connect with the HUB... The option that I saw is to delay the startup of the Sensor process on the services and that seems to work.. 

{"Timestamp":"2024-02-13T01:12:18.8670829-06:00","Level":"Error","TraceId":null,"SpanId":null,"MessageTemplate":{"Text":"Failed to make get call to notification api","Tokens":[{}]},"Properties":{"SourceContext":{"ScalarValueObj":{"ScalarValue":"Lansweeper.Discovery.Hub.Application.Notifications.ApiClient.NotificationApiClient","ScalarValueType":"System.String"}},"MachineName":{"ScalarValueObj":{"ScalarValue":"MXRA-PF3DWCG6","ScalarValueType":"System.String"}},"MemoryUsage":{"ScalarValueObj":{"ScalarValue":56642568,"ScalarValueType":"System.Int64"}}},"Exception":{"Type":"HttpRequestException","Message":"No such host is known. (discovery-gateway.lansweeper.com:443)","StackTrace":" at System.Net.Http.HttpConnectionPool.ConnectToTcpHostAsync(String , Int32 , HttpRequestMessage , Boolean , CancellationToken )\r\n at System.Net.Http.HttpConnectionPool.ConnectAsync(HttpRequestMessage , Boolean , CancellationToken )\r\n at System.Net.Http.HttpConnectionPool.CreateHttp11ConnectionAsync(HttpRequestMessage , Boolean , CancellationToken )\r\n at System.Net.Http.HttpConnectionPool.AddHttp11ConnectionAsync(HttpRequestMessage )\r\n at System.Threading.Tasks.TaskCompletionSourceWithCancellation\u00601.WaitWithCancellationAsync(CancellationToken )\r\n at System.Net.Http.HttpConnectionPool.GetHttp11ConnectionAsync(HttpRequestMessage , Boolean , CancellationToken )\r\n at System.Net.Http.HttpConnectionPool.SendWithVersionDetectionAndRetryAsync(HttpRequestMessage , Boolean , Boolean , CancellationToken )\r\n at System.Net.Http.RedirectHandler.SendAsync(HttpRequestMessage , Boolean , CancellationToken )\r\n at Microsoft.Extensions.Http.Logging.LoggingHttpMessageHandler.\u003CSendCoreAsync\u003Eg__Core|5_0(HttpRequestMessage , Boolean , CancellationToken )\r\n at Microsoft.Extensions.Http.Logging.LoggingScopeHttpMessageHandler.\u003CSendCoreAsync\u003Eg__Core|5_0(HttpRequestMessage , Boolean , CancellationToken )\r\n at System.Net.Http.HttpClient.\u003CSendAsync\u003Eg__Core|83_0(HttpRequestMessage , HttpCompletionOption , CancellationTokenSource , Boolean , CancellationTokenSource , CancellationToken )\r\n at Lansweeper.Discovery.Hub.Application.Notifications.ApiClient.NotificationApiClient.\u0005.MoveNext()","InnerException":{"Type":"SocketException","Message":"No such host is known.","StackTrace":" at System.Net.Sockets.Socket.AwaitableSocketAsyncEventArgs.System.Threading.Tasks.Sources.IValueTaskSource.GetResult(Int16 )\r\n at System.Net.Sockets.Socket.\u003CConnectAsync\u003Eg__WaitForConnectWithCancellation|277_0(AwaitableSocketAsyncEventArgs , ValueTask , CancellationToken )\r\n at System.Net.Http.HttpConnectionPool.ConnectToTcpHostAsync(String , Int32 , HttpRequestMessage , Boolean , CancellationToken )","InnerException":null,"Data":{},"HResult":-2147467259,"Source":"System.Net.Sockets","HelpLink":null},"Data":{},"HResult":-2147467259,"Source":"System.Net.Http","HelpLink":null}}

The other thing that I'm notice is that the computer even after everything seems okay it still said that is not connected to the lansweeper cloud...

Is there a way to check if the computer is sending the updates? because on the console said that it was received the last config almost a week ago...

Thanks!

[Gilian]

@eputz 

Our development team has corrected the incorrect asset type "mobile" for Windows 10 Education devices. During a next scan, your assets should receive the Windows asset type once again.

[avillarreal]

By the way... In the case of Windows Business it's considering as a Server, not as Workstations:

Thanks!

[avillarreal]

Hello @Gilian, 

We are getting the computers marked as the antivirus is disabled, but it appears that there are 6 installations of the antivirus and one enabled...

We use Cisco AMP but there are several "plugins" on the same installation that may be incorrectly marked as antivirus (Umbrella, Anyconnect VPN, Visibility, etc).

And the Windows defender is not in use as is replaced by the AMP...

Thanks!

[Gilian]

Hi @avillarreal ,

Can you send screenshots of the asset detail page with the tabs: "software", "antivirus" and the summary page to preview@lansweeper.com? We'd like to know which of these modules is the core one that is enabled? Secure endpoint? If we know this, we know on which core plugin to focus to indicate whether or not the antivirus is enabled.

[Gilian]

@avillarreal thanks for sharing. I'll report this to our development team to correct the type in case of Windows Business.

Edit: where are you seeing "Server" in your Lansweeper site?

[avillarreal]

Hello @Gilian ,

On the assets screen:

It shown as 466 servers. 

Thanks!

[Gilian]

@avillarreal I'll report this as a bug as it affects all LS Sites. Thanks for mentioning