Home » Help » LAN Architecture

LAN Architecture

Learn how Ransomware Protection works in a Local Area Network.

ManageEngine Ransomware Protection Plus is an enterprise endpoint data loss prevention software that helps secure sensitive data in endpoints and prevent insider threats. In-built with the ability to exercise its functionalities at various levels of flexibility, Ransomware Protection Plus can fit the unique requirements of any kind of enterprise.

The following guide will help you understand the process of Ransomware Protection Plus with the help of an architecture diagram.

endpoint-dlp-architecture

Components Required

IT administrators or network security teams need the following components to perform Ransomware Protection in their enterprise:

  1.  Ransomware Protection Plus Server
  2. Agents
  3. Web console
  4. Active Directory

Ransomware Protection Plus Server

The Ransomware Protection Plus server is located in the customer's site. Example, in an enterprise. This server facilitates the deployment of the Ransomware Protection Plus policies defined to discover and classify data as well as determine boundaries in which the data should be secured within. Once the server assigns a policy to a computer, it is interpreted even if the the system goes offline. All endpoint data loss prevention tasks can be completed using Ransomware Protection Plus's web based administrative console.

Server
  • Port
  • Purpose
  • Type
  • Connection
  • 8020
  • For communication between the agent and the Ransomware Protection Plus server
  • HTTP
  • In bound to server
  • 8383
  • For communication between the agent and the Ransomware Protection Plus server
  • HTTPS
  • In bound to server
  • 8027
  • Agent Server communication
  • TCP
  • In bound to server

Agents

Ransomware Protection Plus agent is a lightweight software application that is installed in computers which are managed using Ransomware Protection Plus. It is installed automatically in the computers in a LAN. It helps to complete various tasks that are initiated in the Ransomware Protection Plus  server. For example, if you want to protect sensitive data through applications, websites and peripheral devices in your network, you can make the required policy for this task in the Ransomware Protection Plus server. The agent replicates these settings and ensures that the task is completed effectively.

The agent also updates the Ransomware Protection Plus  server with the details of all the running applications in the computers in the form of reports and audits. The agent contacts the server during every 90 minute refresh interval.

Web console

The Web console of Ransomware Protection Plus provides a central point from where an administrator can control sensitive data within applications running in the managed systems. This console can be accessed from anywhere. For example, it can be accessed through a LAN, WAN and from home using the Internet or a VPN. Separate client installations are not required to access the Web console.

Active Directory

In an Active Directory-based domain setup, the Ransomware Protection Plus server gathers data from the Active Directory to generate the reports for the following:

  • Sites
  • Domains
  • Organizational Units (OUs)
  • Groups
  • Computers

This enables administrators to access all the information that is stored by the Active Directory.

Back to Top