GFI OneGuard system requirements
Computers running GFI OneGuard must meet or exceed the system requirements described below. GFI OneGuard can be installed on a physical, a virtual or a cloud environment.
Software requirements
| Requirement | Description |
|---|---|
| 64-bit operating system |
Install the GFI OneGuard PlatformThe main component of GFI OneGuard that connects all the services offered by the product and the database that stores all collected information. and ControllerA GFI OneGuard component automatically discovers devices connected to the network, acting as a relay that channels communications between Agents and Platform. on 64-bit versions of the following operating systems:
|
| Fixed IP Address | The server where the GFI OneGuard Platform is installed requires a fixed IP address to ensure that no network communication breakdowns occur due to a changing address. |
| Domain | The server where the Platform is deployed must be joined to an Active DirectoryA technology that provides a variety of network services, including LDAP-like directory services. domain. |
| Supported browsers |
The latest versions of these web browsers:
|
| Internet Information Services (IIS)A set of Internet-based services created by Microsoft® Corporation for internet servers. | Required to access the GFI OneGuard web interface. If not found, this is automatically installed by GFI OneGuard during installation. |
| Microsoft .NET Framework 4.5.1 |
Automatically installed during setup. If automatic installation fails, download setup from: https://www.microsoft.com/en-us/download/details.aspx?id=40779 |
| ASP.NET 4.5.1 |
Required to access the GFI OneGuard web interface. If Microsoft® .NET framework is installed after IIS is installed, then ASP.NET is usually automatically registered. If not found, this is automatically enabled by GFI OneGuard during installation. |
Supported databases
GFI OneGuard uses a database to store information retrieved from scans, audits, notifications, configuration and services data. This information is critical to the operation of GFI OneGuard and for reporting purposes. The database backend can be any of the following:
| Database | Recommended Use |
|---|---|
| Microsoft SQL LocalDB | An embedded database installed automatically when installing the GFI OneGuard Platform. Adequate for small and medium installations containing up to 500 managed devices. |
| Microsoft SQL ServerA Microsoft relational database management system. A database is a collection of data that is organized so that its contents can easily be accessed, managed, and updated Express 2008 R2 or later editions | Recommended for networks containing up to 500 managed devices. |
| Microsoft SQL Server 2008 R2 or later versions | Recommended for larger networks of up to 10,000 managed devices. |
| Microsoft Azure SQLMicrosoft AzureSQL is a cloud database service offered by Microsoft. | A hosted database backend that is recommended for larger networks of up to 10,000 managed devices. |
Hardware requirements
Computers hosting GFI OneGuard components must meet the following hardware requirements:
| Component |
Minimum requirement |
Recommended minimum requirement |
|---|---|---|
| Processor | 1.6 GHz Dual Core | 2.1 GHz Quad Core |
| Physical Storage | 2 GB hard disk space for the installation only | 8 GB for the installation only |
| RAMRandom Access Memory. A hardware device that allows information to be stored and retrieved on a computer | 4 GB | 8 GB |
Firewall Ports
GFI OneGuard Platform communicates with Controllers and agentsA GFI OneGuard component that runs as a background service on target devices and handles the deployment of patches, service packs and software updates. on managed devices using the ports below. The firewalls that control traffic between these machines need to allow requests on ports:
| TCP Ports | Description |
|---|---|
| 80 |
Listening port on GFI OneGuard Platform server, handling all Platform-Controller-Agents communications. This port can be customized from the Controller settings. |
| 135 | Remote WMI - Port used for AgentA GFI OneGuard component that runs as a background service on target devices and handles the deployment of patches, service packs and software updates. deployment on both server and client machines managed by GFI OneGuard. |
| 139 | Remote Registry - Port used for Agent deployment on both server and client machines managed by GFI OneGuard. |
| 443 | Listening Port on GFI OneGuard Platform server, accepting transfer of data from the Controller to the Platform. |
| 445 |
Remote Registry - Port used for Agent deployment on both server and client machines managed by GFI OneGuard. |
| 8123 | The Controller Bandwidth SaverA feature available on the Controller which stores locally downloadable files such as system patches. It downloads and store the patches to be used by all the computer using the same controller. feature listens to Agent requests on this port. |
The GFI OneGuard Controller requires ICMP response on the internal network to be allowed:
- Windows Firewall. Ensure that in the Windows Firewall with Advanced Security > Inbound Rules the Rule File Printer and Sharing(Echo Request - ICMPv4-In) is allowed.
- Third-party Firewalls. These settings may vary according to the model of the firewall. Some firewalls exempt certain protocols or services. In those cases, you must enable ping. Some firewalls call the setting Ping or Incoming Ping. Others refer to it by its technical name, ICMP Echo Reply. Either way, allow this protocol.
Antivirus and backup software
AntivirusA software countermeasure that detects malware installed on a computer without the user's knowledge. and backup scanning may cause GFI OneGuard to malfunction. This occurs when such software denies access to certain files required by GFI OneGuard.
Disable third party antivirus and backup software from scanning the installation folder of each component, which by default are:
| Component | x64 default install path | x86 default install path |
|---|---|---|
| Platform | ..\Program Files\GFI\OneGuard\ | Not supported |
| Controller | ..\Program Files (x86)\GFI\OneGuard\ | ..\Program Files\GFI\OneGuard\ |
| Agent | ..\Program Files (x86)\GFI\OneGuard\ | ..\Program Files\GFI\OneGuard\ |