Lumu Agent for Windows

Lumu Agent for Windows

A Lumu Agent is an endpoint software program provided by Lumu that is installed on a user's machine. This enables the monitoring of remote devices no matter where they are. The Lumu Agent runs silently while intentionally and continuously collecting network metadata to be analyzed by Lumu for measuring compromise in real time.

If you are interested in getting started with agents, access our Lumu Agent documentation.

The installation of the Lumu Agent for Windows is simple and straightforward. They could be deployed easily to your entire user population through an IT assets management system, thus facilitating their installation and administration.

Requirements

  1. A device running a Windows 10 operating system.
  2. Administrator permissions on the local machine.
An internet connection is required for the Lumu Agent activation.
The Lumu Agent is a lightweight solution, below are some referential information regarding the agent average consumption:
RAM consumption (average): 20 MB
CPU consumption (average): < 2%
Online installer size: 1.05 MB
Agent installed size: 6.7 MB

Online Installation

The Online Installer downloads the latest available files and settings required for set-up during installation. It is recommended when you plan to install your agents one by one.

1. When downloading the agent file for online installation on Windows, go to the Lumu Portal, navigate to the Agents menu, click on the “Windows Client” button (1) and then select the online installer (2).

Lumu Agent for Windows online installerFigure 1 - Lumu Agent for Windows online installer.
2. Once downloaded, run the installation file, wait for the updated files to be downloaded, and when requested, accept the license agreement and enter the activation code from the installation group you created previously.
Windows agent set upFigure 2 - Windows agent set up.
3. After installation, when you see the completion screen, click “Finish”.
Completing the Lumu Agent for Windows set upFigure 2 - Windows agent set up.

Offline Installation

In the Lumu Portal, you can find the .msi and .exe offline installer files recommended for an offline installation via command prompt.

For bulk deployments such as when using Group Policy in a Windows Server. Download the installation file according to your IT assets management system’s needs and check out our documentation on Deploy Lumu Agent using Group Policy (GPO).

The offline installer brings all files required for installation; no additional files are downloaded. The offline installer includes two components that allow you to install the Lumu agent or the agent updater independently.

The agent component is the Lumu sensor that collects the network-data, which is presented to your company at the Lumu Portal. The updater is the component in charge of periodically checking the server for the latest version of the agent, downloading and installing it.

Lumu Agent for Windows offline installerFigure 4 - Lumu Agent for Windows offline installer.
If you want to have a silent deployment of the Lumu Agent (.exe), you should run the installer with the activation code of the installation group and accept the license agreement. The installation command should look like this:
lum_agent_offline.exe /SP- /VERYSILENT /activationcode="[ActivationCode]" /acceptlicense="true"

The MSI installer only runs using a Windows command line. The installation parameters to deploy the MSI installer should look like this:

"C:\Windows\System32\msiexec.exe" /i lum_agent_offline.msi /quiet WRAPPED_ARGUMENTS="/activationcode=""[ActivationCode]"" /acceptlicense=""true"""

You can choose to install just a specific component and manage updates manually. To do that, you should indicate it through a command-line parameter COMPONENTS; this can be set as "agent" to install only the Lumu agent or "updater" to install the Lumu agent plus the updater. By default, the installer installs both components on your system.

The installation command with the component parameter should look like this:

lum_agent_offline.exe /SP- /VERYSILENT /activationcode="[ActivationCode]" /acceptlicense="true" /COMPONENTS=agent

The installation command with the component parameter should look like this:

"C:\Windows\System32\msiexec.exe" /i lum_agent_offline.msi /quiet WRAPPED_ARGUMENTS="/activationcode=""[ActivationCode]"" /acceptlicense=""true"" /COMPONENTS=agent"

You have the option to run the command with “/COMPONENTS=updater” any time to install the updater using the same offline installer.

Command Quick Reference for Agent Support

The Lumu Agent includes an application for support purposes. You can use this application to troubleshoot and get agent information from devices.

The table below lists the available support commands for the Lumu Agent. You should run the commands in the Lumu installation path (e.g. C:/Program Files (x86)/Lumu/Agent) using Command Prompt or Windows PowerShell with admin privileges.

lumu-agent-support [argument]

Argument

Description

-h or --help

Print all the available commands with their description.

--show_status

Print agent’s last status information, including its status, version, and settings.

--activation_code [arg]

Reset the activation code to the provided argument [arg]. This command is intended for correcting an activation code that is invalid or to reactivate an agent that was deleted by mistake. This will not change the activation code for an already successfully activated agent. To do so, you’ll need to delete it first from the portal and wait for the agent to disable itself or uninstall it. Command example:

lumu-agent-support --activation_code 5FDHjJWI

--proxy_list [arg]

Set the proxy configuration to the provided argument [arg]. The argument should be a colon-separated list of elements in the following format:

http://[<username>:<password>@]<ip address>:<port>

Command example:

lumu-agent-support --proxy_list http://user1:123@10.5.8.5:8080/

--check

Perform checks and print if the agent is running.

-v or --version

Show the support application version.

Repair, Update, or Reinstall Agent

The Lumu Agent installer version 2.0.0.0+ brings the ability to repair, update, or reinstall the Windows agent.

To manually repair a Lumu Agent, simply run the installer that is the same agent version of the installed agent on the machine. The installer will prompt the following screen:

Lumu Agent repair windowFigure 5 - Lumu Agent repair window.

The repair feature returns the agent to its default installation state. This feature should be used in cases such as when any file or registry was erased as the repair will retrieve the missing files. The repair process keeps the current agent configuration and activation code.

To update a Lumu Agent, run an installer from a more recent version of the installed agent on the machine. A screen with the new update option will display. This new feature allows you to upgrade your agent manually to a newer version.

The update also will repair any missing files or registries on the user machine.

Lumu Agent update windowFigure 6 - Lumu Agent update window.
In both the repair and update process, you also have the option to reinstall a Lumu Agent.
The reinstall process will cause the current agent configuration and information to be deleted. 

To reinstall an agent, you will need to enter the same or a different activation code.
Lumu Agent reinstall windowFigure 7 - Lumu Agent reinstall window.
When reinstalling a Windows Lumu Agent you may encounter two registered agents (duplicated) with different last sync times in the Lumu Portal. Consult our FAQ for more details and help.

Uninstall Agent

In case you want to uninstall the Lumu Agent from a Windows device, go to the Control Panel > Programs and Features, choose Lumu from the list, and select "Uninstall".

You can choose to uninstall the agent using Command Prompt or Windows PowerShell with admin privileges. To do so, go to the Lumu installation path (e.g. C:/Program Files (x86)/Lumu/Agent ) and run the uninstaller file unins000.exe.

        • Related Articles

        • Deploy Lumu Agent using Group Policy (GPO)

          The installation of the Lumu Agent for Windows is simple and straightforward. This article describes how to deploy the Windows Agent quickly to your entire user population through Group Policy Objects (GPO) in a Windows Server. If you are interested ...
        • Lumu Agent

          As we show in our Deployment and Integration guide, organizations can enjoy full compromise visibility with Lumu, independent of whether users connect via VPN or straight to cloud-based applications. The Lumu Agent is an endpoint software program ...
        • Windows Server

          In this guide, we will walk you through the DNS configuration process for a Windows Server. Setting up Lumu for Continuous Compromise Assessment on a server is the deployment recommended for enterprises with a DNS infrastructure where all the traffic ...
        • Windows 10

          Setting up Lumu on a Windows client device is the configuration recommended for testing purposes as we recommend you configure your server or your router to take the most advantage of the Lumu Continuous Compromise Assessment on your entire network. ...
        • Deploy on Hyper-V

          The best way to implement Lumu in your network is to delegate DNS resolution tasks to the Lumu Virtual Appliance (VA). A Lumu Virtual Appliance (VA) is a virtualized machine that provides all the elements required to collect network metadata to ...