AgentX server communicates with the agents installed in the endpoints, manages configurations remotely, and monitors their statuses. It is the communication gateway between AgentX Manager installed in Logpoint and AgentX Client installed in the endpoint.
Release Date: March 25, 2025
Release Version: 1.6.0
Supported On: Logpoint v7.5.0 and later
Download: AgentX_Server_1.6.0.pak
SHA256: c1cda4ed874de2e3f3184798140fad294a00f279aa1f8786b5dafd6bea8e9e6b
Documentation: AgentX guide
Key Information
- Upgrade AgentX Server to v1.5.0 before upgrading to v1.6.0 to prevent errors during upgrade.
- After upgrading AgentX Manager to v1.6.0, upgrade AgentX Server to v1.6.0 to ensure that agents do not disconnect from distributed mode.
- After upgrading to v1.6.0, refresh the browser to see the UI changes.
- AgentX no longer provides active support and maintenance for AgentX Server versions older than v1.4.2.
Bug Fix:
|
Description |
Issue ID |
Reference ID |
|---|---|---|
|
Upgrading AgentX Server to v1.5.0 caused agents to disconnect from distributed mode, stopping log collection. |
EDR-2874 | #89042, #88228 |
Previous Releases
AgentX Server v1.5.0
Release Date:January 28, 2025
Release Version: 1.5.0
Supported On: Logpoint v7.5.0 and later
Download: AgentX_Server_1.5.0.pak
SHA256: 19b3882b9c430edf52bf0dd4da1ebf6bbc5ce55113fd39887459300ef5605479
Documentation: AgentX guide
Key Information
Find the known issues for AgentX here.
Vulnerability Fixes
The following vulnerabilities are fixed:
|
Description |
Issue ID |
Reference ID |
|---|---|---|
|
CVE-2023-42463 |
- | - |
|
CVE-2023-50260 |
- | - |
|
CVE-2022-40497 |
- | - |
| A vulnerability caused by limited access controls allowed li-admin users to access sensitive information about Logpoint deployment. | EDR-2835 | #85678 |
AgentX Server v1.4.2
Release Date: October 21, 2024
Release Version: 1.4.2
Supported On: Logpoint v7.4.0 - v7.4.2
Download: AgentX_Server_1.4.2.pak
SHA256: 16a4ca441d1fff6d95aa12fe78448506a2afcac8dd262c7de7ba26221e755182
Documentation: AgentX guide
Key Information
- AgentX Cluster can only be configured on a Distributed Logpoint set up using an IP address.
- When using AgentX, keep the IP address as the Logpoint server alias in System Settings. Don’t modify it. If you do, an "AgentX server is down" error is triggered when adding a device in AgentX.
-
If there are multiple network interfaces, AgentX configuration is applied only to the primary interface. To implement the configuration on the secondary interface, your network administrator must configure it within your routing protocol.
- Downgrading AgentX Server from v1.4.2 to v1.2.0 after installing AgentX Manager v1.4.5 may cause log loss and is not recommended. If a downgrade is necessary, contact support.
- If you are using AgentX in distributed mode, then upgrading it from previous versions to v1.4.5 will break the connection between all nodes in the distributed architecture, stopping log transmission across the entire setup. The workaround can be found here.
- AgentX Manager v1.2.1 is not compatible with AgentX Server v1.4.2. Go to version compatibility matrix for more information.
- When upgrading the AgentX Server, please note that the new version may take some time to reflect due to its file size exceeding 500MB
- The installation of Windows Installer v1.4.2 might take more than one minute.
- Find the known issues for AgentX here.
Enhancements
The following enhancements were added:
|
Description |
Issue ID |
Reference ID |
|---|---|---|
| AgentX Server logging architecture is now moved from file to memory-based to enhance log processing and storage. | EDR-1449 | - |
Bug Fixes
The following issues were solved:
|
Description |
Issue ID |
Reference ID |
|---|---|---|
| CPU usage was high when analyzing and decoding logs from the event ID 0840. | EDR-1365 | 76237 |
| Users could not install AgentX Server in Logpoint where Universal Normalizer v5.2.0 and later was installed. | EDR-1500, EDR-1491 | 78531, 78894, 79075, 78390, 79163 |
| Log collection stopped because the rootCA.pem and sslagent.crt certificates expired after one month and one year instead of ten years. | EDR-1579 | 84133 |
| Users could not install AgentX Server in Logpoint where Universal Normalizer v5.2.0 and later was installed. | EDR-1500, EDR-1491 | 78531, 78894, 79075, 78390, 79163 |
| The event channel logs collected from Windows PowerShell were missing the user field, leading to difficulty in identifying specific user actions. | EDR-1626 |
Support
If you have any queries or require assistance, create a support ticket here.
Comments
Article is closed for comments.