The document provides an in-depth overview of the Endpoint Central agent, covering its communication with the server, tasks managed, and data consumption across Windows, Mac, and Linux systems. It details the agent's role in tasks like inventory scans, patch scans, and deployment, along with the communication process using HTTPS and specific ports. The document also covers the agent's footprint in terms of bandwidth, CPU, and memory consumption.
The Endpoint Central agent is a lightweight software that is installed in computers which are managed using Endpoint Central. It is an essential component responsible for the product functioning. The agent helps complete various tasks initiated by the Endpoint Central server. For example, if you want to uninstall a software application from a computer on your network, you can configure the necessary settings on the Endpoint Central server. The agent applies these settings and ensures that the task is completed effectively
The agent also updates the Endpoint Central server with the status of deployed configurations. It periodically checks the server for instructions related to tasks and performs them accordingly. The agent contacts the server when the following actions occur:
During user logon, the agent contacts the server to collect user-specific configuration details. This information is also retrieved during the 90-minute refresh cycle.
At computer startup, the agent contacts the server to collect computer-specific configuration details. These details are also retrieved during the 90-minute refresh cycle.
Some of the key functionalities of the Endpoint Central Agent are:
All the below-mentioned data are predicted from a single agent machine. Up to 1 GB (approximately) of disk space will be consumed by the agent installed drive.
Uploaded files in the configuration/software packages, will be downloaded in the agent installed directory only. Hence, space consumption will be varied based on the uploaded files. Those downloaded files will be removed when the deployed configuration is executed successfully.
| Agent Process | Running Application Name | Bandwidth Consumption (Approximately) | CPU Consumption (Approximately) | Memory (RAM) Consumption (Approximately) |
|---|---|---|---|---|
| At Agent Ideal state | dcagentservice.exe dcondemand.exe dcagenttrayicon.exe (Running separate application for each logged on user) (For windows and Mac) [Above 3 are ever running processes] | dcagenttrayicon : Recommended Atleast 100 KBPS | dcagenttrayicon : maximum 0.1% | dcagenttrayicon : Upto 8MB |
| Refresh policy (90 mins once - without any deployment) | dcconfig.exe | Recommended Atleast 100 KBPS | < 1% | Approx - 10MB |
| Applying configuration (90 mins once) | dcconfig.exe | Recommended Atleast 1024KBPS | 10 to 20 % (based on configuration deployed) | Approx - 50MB (changes based on configuration) |
| Inventory scan (At Scheduled time in server) | dcinventory.exe | Recommended Atleast 1024KBPS | 5 to 10% | Approx - 30MB |
| Patch scan (When applying patch task) | dcpatchscan.exe | Recommended Atleast 1024KBPS | CPU usage - Single Core - 28%, Dual Core - 22%, 4 core and above - Max 18% | Approx - 80MB |
| Updating Power refresh (3 hours once) | dcconfig.exe | Recommended Atleast 100 KBPS | < 10% | Approx - 5MB |
| Logon policy (whenever a user logon) | dcconfig.exe | Recommended Atleast 1024KBPS | 10 to 20 % (based on configuration deployed) | Approx - 50MB (changes based on configuration) |
| Agent Upgrade (Applying PPM and if the agent version changes) | dcconfig.exe AgentUpgrader.exe | Recommended Atleast 1024KBPS | 0 - 2% | 6 MB |
| Module Name | Agent Process | Running Application Name | Bandwidth Consumption (Approximately) | CPU Consumption (Approximately) | Memory Consumption (Approximately) |
|---|---|---|---|---|---|
| Application Control | Application Processing server | Verifytrustedfiles.exe | Will download the configuration in the dcconfig exe | 0.25 - 0.3% | 30 MB |
| Application Scanner | Dcprocmon.exe | 100 KB - 200 KB | 0.3% | 6 MB - 24 MB | |
| Process Notifier | AppCtrlToast.exe | NA | 0 - 1% | 20 MB | |
| ACP Driver control | DriverCtrl.exe | NA | 0 - 0.18% | 1 - 2 MB | |
| ACP Privilager | Privilager.exe | NA | 0 - 1.4% | 1 - 1.5 MB | |
| Component Upgrade | dcconfig.exe | 3.5 MB | 0 - 1% | 1 MB | |
| Browser Security | Browser Agent Module | bmagent.exe | 20kb | 9-15% | 20 MB |
| Browser native Host Application | brnativehost.exe | NA | 0-0.5% | 8 MB | |
| Component Upgrade | dcconfig.exe | 2.1MB | 0 - 0.5% | 1 MB | |
| BitLocker Management | BitLocker Policy Deployment | dcconfig.exe | 3 KB | 0 - 1% | 5 MB |
| BitLocker Policy Process | BitlockerMgmt.exe | NA | 0 - 1% | 10 MB | |
| Component Upgrade | dcconfig.exe | 1.65 MB | 0 - 1% | 1 MB | |
| Device Control Management | Device Control Service | uesAgentService.exe | NA | 0 - 0.5% | 1 MB |
| Device Control Policy Processing | dcconfig.exe | 5 KB | 0 - 1% | 6 MB | |
| Device Audit | uesDevCtrlSummary.exe | NA | 0 - 3% | 6 MB | |
| File Audit Data Populator | uesFaDataPopulator.exe | NA | 0 - 10% | 9 MB | |
| File Shadow | uesFileShadow.exe | NA | 5 - 10% | 12 MB | |
| Component Upgrade | dcconfig.exe | 7.5 MB | 0 - 1% | 1 MB | |
| File Audit | uesFauser.exe | NA | 0 - 1% | 2 MB | |
| Vulnerability Management | Vulnerability (Patch)/Misconfiguration Deployment | dcconfig.exe | 12 KB | 5 - 7% | 26 MB |
| Patch/Vulnerability Scan | dcpatchscan.exe | 6 MB (will be downloaded from the server only if the file is changed and new version is downloaded in the DBSync) | 12 - 15% | 70 - 75 MB | |
| Data Loss Prevention | Processing DLP Policy | Medlp.exe | NA | <0.5% | 20-22 MB |
| Classifying Process | UemsProcessMonitor.exe | NA | 0.11 - 0.13% | 23-25 MB | |
| Network Packet Monitor | Netfilter.exe | NA | <0.1% | 6-8 MB | |
| Clipboard Monitor | HostExe | NA | <0.1% | 3-4 MB | |
| Monitoring Browser File upload | DLPNativeHost.exe | NA | <0.1% | 10-11 MB | |
| Component Upgrade | meaaphelper.exe | 14-17 MB | 0 - 1% | 1 MB | |
| Malware Protection | EDR Core Ever running service | MEARWService.exe | NA | 0 - 1% | 20 - 150 MB |
| Behaviour Engine ever running process | MEEDRInferenceEngine.exe | NA | 0 - 1% | 5 - 12 MB | |
| DeepAv Engine ever running process | MEEDRMCEngine.exe | NA | 0 - 1% | 0 - 60 MB | |
| Service Installer | MEARWSetup.exe | NA | 0 - 1% | 0 - 10 MB | |
| Endpoint central server Communicator | EDRDCManager.exe | 0 - 1 MB | 0 - 2% | 0 - 12 MB | |
| Volume shadow copy creator | VssHelper.exe | NA | 0 - 1% | 0 - 10 MB | |
| Component Install/Upgrade | MEAAP.exe, EDRDCManager.exe | 20 MB | 0 - 1% | 0 - 10 MB | |
| User Agent Notifier | EDRUI.exe | NA | 0 - 1% | 0 - 1 MB |
| Agent Process | Running Application Name | Bandwidth Consumption (Approximately) | CPU Consumption (Approximately) | Memory Consumption (Approximately) |
|---|---|---|---|---|
| DEX core ever running service | ECEAService.exe | NA | 0.2 - 0.7% | 0 - 20 MB |
| Captures events like app crash and app hang (ever running). | ECEAEventTracer.exe | NA | 0.1 - 0.7% | 0 - 10 MB |
| Monitors system CPU and memory consumption (ever running). | ECEAPerfMon.exe | NA | 0.1 - 0.7% | 0 - 20 MB |
| Processes data of all exes (ever running). | ECEADataManager.exe | NA | 0.2 - 0.7% | 0 - 12 MB |
| Scans hardware and event viewer details. | ECEAScanner.exe | NA | <0.2% | 0 - 1 MB |
| Data communication handler | ECEAWebRequestHandler.exe | 0 - 3 MB | <0.2% | 0 - 1 MB |
| Fetch device metrics | ECEATelemetry.exe | NA | <0.5% | 0-25 MB |
| User experience score calculator | ECEAScore.exe | NA | <0.5% | 0-5 MB |
| Replicates DEX meta files on Agent | ECEAReplication.exe | 0-3 MB | <0.2% | 0-1 MB |
| Replicates DEX meta files on Distributed Server | ECDSEAWorker.exe | 0-3 MB | <0.2% | 0-1 MB |
| Workflow Execution | ECWorkflow.exe | NA | <0.5% | 0-5 MB |
| Sensor Execution (Standalone and Workflow ) | ECEASensor.exe | NA | <0.5% | 0-4 MB |
| Engage UI Window | ECEAEngage.exe | NA | <0.2% | 9 MB |
| # | Compression | Color Quality | Change Frequency | ActiveX Viewer | HTML5 Viewer (Gateway Communication) | HTML5 Viewer (Direct Communication) |
|---|---|---|---|---|---|---|
| 1 | Fast Compression | High | High | 3.4 Mbps | 700 Kbps | 310 Kbps |
| 2 | Fast Compression | High | Low | 6 Kbps | 6 Kbps | 3.3 Kbps |
| 3 | Fast Compression | Medium | High | 700 Kbps | 540 Kbps | 260 Kbps |
| 4 | Fast Compression | Medium | Low | 5.6 Kbps | 5.8 Kbps | 3 Kbps |
| 5 | Best Compression | High | High | 760 Kbps | 560 Kbps | 275 Kbps |
| 6 | Best Compression | High | Low | 5.4 Kbps | 3.6 Kbps | 1.8 Kbps |
| 7 | Best Compression | Medium | High | 460 Kbps | 440 Kbps | 240 Kbps |
| 8 | Best Compression | Medium | Low | 4.4 Kbps | 3 Kbps | 1.5 Kbps |
| Agent OS | CPU details | CPU consumption | Memory consumption | ||
|---|---|---|---|---|---|
| Normal usage | Heavy usage | Normal usage | Heavy usage | ||
| Windows Server 2016 | 4 core/8 thread, 3.40 GHz | 3% | 13% | 33 KB | 40 KB |
| Windows 8 | 4 core/4 thread, 2.90 GHz | 4% | 18% | 35 KB | 36 KB |
| Windows 10 | 2 core/4 thread, 2.60 GHz | 5% | 19% | 38 KB | 43 KB |
All the below-mentioned data are predicted from a single agent machine. Up to 100 MB (approximately) of disk space will be consumed by the agent installed drive.
Uploaded files in the configuration/software packages, will be downloaded in the agent installed directory only. Hence, space consumption will be varied based on the uploaded files. Those downloaded files will be removed when the deployed configuration is executed successfully.
| Agent Process | Running Application Name | Bandwidth Consumption (Approximately) | CPU consumption (Approximately) | Memory (RAM) Consumption (Approximately) |
|---|---|---|---|---|
| At Agent Ideal state | dcagentservice, dcnotifyservice, dcondemand, dcagenttrayicon (Running separate application for each logged on user) (For Windows and Mac) [Above 4 are ever running processes] | 2 KB | 0 - 2% | 5 - 15 MB |
| Refresh policy (90 mins once - without any deployment) | dcconfig | 10 KB | 0 - 4% | 25 MB |
| Applying configuration (90 mins once) | dcconfig | 15 KB (Will be varied based on configuration. i.e., if there is any files uploaded in the deployed configuration, uploaded file size will be added in the bandwidth consumption) | 0 - 12% | 20 - 50 MB (Will be based on the number of configurations applied at the current refresh policy) |
| Inventory scan (At Scheduled time in server) | dcinventory | 10 KB | 0 - 6% | 10 - 35 MB |
| Patch scan (When applying patch task) | dcpatchscan | 2 MB (This is for initial patch scan). From the next scan, scan will be dine with the local files untile the patch DB sync processed in the server | 0 - 12% | 12 - 22 MB |
| Logon policy (whenever a user logon) | dcconfig, dcuserhandler | 10 KB | 0 - 4% | 20 MB |
| Agent Upgrade (Applying PPM and if agent version changes) | dcconfig, dcmaacupgrader | 30 MB | 0 - 2% | 6 MB |
| MDM Enrollment | MDM Enrollment.app, ProfileInstaller, ProfileAuthPlugin | 10 KB | 0 - 2% | 30 MB |
| Protection | com.manageengine.protectord | 0 | 0 - 2% (may spike to 20% for a small duration during any activity in Agent folder) | 10 MB |
| Message handler (Auto reboot/Reboot/Restart prompt) | ManageEngine UEMS.app | 0 | 0 - 2% | 19 - 22 MB |
| Uninstall | Uninstaller.app, com.ManageEngine.Uninstaller.helper, NativeUIHandler | 10 KB | 0 - 2% | 30 MB |
| Remote Control | ManageEngineRemoteAccess.app | 7 - 16 MB for normal usage 24 - 36 MB for heavy usage (May spike to 70 - 100 MB when there is a huge display image change) | 36 - 42% for normal usage 46 - 48% for heavy usage (May spike 10 140mb when there is a huge display image change) | 97 - 108 MB for normal usage 112 - 128 MB for heavy usage |
| Self Service Portal, When Opened from Tray Icon | Self Service Portal | 1-5mb | 0-10% | 100-150mb |
| Deploying Wallpaper Configuration | Wallpaper | 0 (No Network related consumption will occur) | 0-1% | 10mb |
| Module Name | Agent Process | Running Application Name | Bandwidth Consumption (Approximately) | CPU Consumption (Approximately) | Memory Consumption (Approximately) |
|---|---|---|---|---|---|
| Application Control | Application Control Driver | com.managee.ninja.apprctl.driver | 0 | 0-2% | 5 - 7 MB |
| Application Control Scanner | EC Application Control Helper | 5-7kb | 4-6% | 6-8mb | |
| Application Control Requests | EC Application Control.app | 0 | 2 - 3% | 15-17MB | |
| Application Control Notification | EC Application Control Alert.app | 0 | 4-5% | 15-17MB | |
| Browser Security Plus | Browser Agent | bsp agent | 26-28 kbps | 0-2% | 5 - 10 MB |
| Browser Native Host Application | bspNativeHost | NA | 0-2% | 5 - 10 MB | |
| Browser Component Installer | bspAgentRegister | 3-5kbps | 0-2% | 0-5 MB | |
| Device Control | Device Control Service | devicecontrolservice | 20 kbps | 0.5-2% | 15 - 20 MB |
| Device Alert Notification | Device Alert Notification.app | 0 | 3-5% | 15 - 20 MB | |
| Temporary Access Portal | Temporary Access Portal.app | 10 kbps | 0.5-2% | 35-40 MB | |
| Bluetooth Helper | DCBluetooth Helper | 0 | 0.5-1% | 2 - 5 MB |
All the below-mentioned data are predicted from a single agent machine. Up to 1 GB (approximately) of disk space will be consumed by the agent installed drive.
Uploaded files in the configuration/software packages, will be downloaded in the agent installed directory only. Hence, space consumption will be varied based on the uploaded files. Those downloaded files will be removed when the deployed configuration is executed successfully.
Other than dcservice, and dcondemand, all other processes are short-lived.
| Agent Process | Running Application Name | Bandwidth Consumption (approximately) | CPU Consumption (approximately) | Memory (RAM) Consumption (approximately) |
|---|---|---|---|---|
| At Agent Idle state | dcservice, dcondemand | 1 kbps | 0 - 2 % | 12 MB |
| Refresh policy (90 mins once - without any deployment) | dcconfig | 4 kb | 0 - 2 % | 7 MB |
| Applying configuration (90 mins once) | dcconfig | 5 kb (Will be varied based on configuration. i.e., If there are any files uploaded in the deployed configuration, Uploaded file size will be added in the bandwidth consumption) | 0 - 2 % | 8 - 20 MB (Will be based on the number of configurations applied at the current refresh policy) |
| Inventory scan (At Scheduled time in server) | dcinventory | < 1 mb | 15-30% | 15 MB |
| Patch scan (when applying patch task) | dcpatchscan | 5 mb | 20-30% | 15 MB |
| File scan (When applying file scan task) | dcfilescan | < 1 mb | 20-30% | < 2 MB |
| During Agent Upgrade | dclinuxupgrader | 30 mb | 2-4% | < 2 MB |
| Message boxes | dcmsghandler | < 1 mb | 2-4% | < 2 MB |
| Processing Reboot | dcreboothandler | < 1 mb | 2-4% | < 2 MB |
| Remote Control | dcrdsagent | 65-78 kb/sec - normal422-692 kb/sec - heavy usage (spike to 780 to 990kb/sec if diaply image change is huge | 14-26% - normal usage 55-72% - heavy usage (might spike to 80% if display image changes) | < 2 MB |
Note: All the above-mentioned data are stated approximately.
