Skip to content

2.2 Endpoint Agent Deployment

Describe endpoint agent deployment at scale across the enterprise on end-user devices (Windows, Mac, and Room OS)

ThousandEyes Endpoint Agents can be deployed at scale across enterprise environments using various methods tailored to specific operating systems and business scenarios.

Deployment Methods

Windows Deployment

Active Directory Environments: For enterprises using Active Directory, deploying the ThousandEyes Endpoint Agent and browser extension via Group Policy Objects (GPOs) is typically the most efficient approach. This method ensures centralized management and streamlined updates for domain-joined Windows machines.

Cloud-Managed Environments: If your organization leverages cloud-based device management, Microsoft Intune provides the flexibility to deploy and manage Endpoint Agents effectively across diverse Windows devices, including those in remote or hybrid work setups.

Cisco Secure Client Deployment

Organizations already utilizing Cisco Secure Client (formerly AnyConnect) across their network can leverage this existing infrastructure for streamlined Endpoint Agent deployment. This offers flexibility in deployment points, including:

  • VPN Headends
  • Firewalls
  • Identity Services Engine (ISE)

This approach can be particularly advantageous for managing deployments across diverse operating systems where Cisco Secure Client is already in place.

Mac Deployment

For Mac-centric environments or those with a mix of Windows and macOS devices, Munki is the recommended and fully supported option for large-scale Endpoint Agent deployment.

While other tools like JAMF can be used for deployment, Munki is the officially supported option. Other deployment methods, including JAMF, are supported on a best-effort basis for any issues faced during deployment.

RoomOS Deployment

If your organization uses Cisco video conferencing systems, you can easily deploy the ThousandEyes Endpoint Agent to RoomOS devices through the native integration with Webex Control Hub. This integration allows administrators to:

  • Activate and manage Endpoint Agents across their organization.
  • Enable the integration for all devices or select specific ones.

Deployment is handled within the Webex Control Hub admin console's Devices section.

Resources

Sample Questions

2.2 Question 1

Which deployment option should a network administrator use to deploy the ThousandEyes Endpoint Agent to all users on their internal domain using a Microsoft Domain Controller?

  • A) Microsoft Intune
  • B) Group Policy Objects
  • C) JAMF
  • D) Power Shell

2.2 Question 2

An administrator has configured a Group Policy Object (GPO) to deploy ThousandEyes Endpoint Agent, but noticed it was not installed on one of the office PCs. What is the most appropriate first troubleshooting step?

  • A) After GPO deployment, an administrator account must log in to deploy the EPA
  • B) Check that the PC belongs to the needed domain
  • C) Reboot the PC, this will restart GPO on the server
  • D) Reboot the Server, this will restart GPO on the PC

2.2 Question 3

Which strategy is most effective for a scalable, secure, and minimally disruptive deployment of ThousandEyes Endpoint Agents to Windows users?

  • A) Manually install the Endpoint Agent on each device
  • B) Use a centralized software deployment tool (e.g., GPOs, Intune) that supports silent installation to deploy the Endpoint Agent
  • C) Email employees a download link for the Endpoint Agent and request they install it on their devices
  • D) Provide a web portal where employees can log in and download the Endpoint Agent