# Agents & Probes Most of CyberGuard runs in the portal, but some information can only be collected from inside your network. For that, CyberGuard provides small programs that run on a machine of your organization and send the results to the portal. | Component | What it does | Needed for | | --- | --- | --- | | [Active Directory Agent](https://wiki.cyberguard.srl/cat/agents/active-directory.md) | Collects the data of your on-premises domain. | The Active Directory assessment. | | [Microsoft 365 Agent](https://wiki.cyberguard.srl/cat/agents/microsoft-365.md) | Collects the Microsoft 365 data that the portal cannot read directly: Exchange, Defender, SharePoint, Teams, Purview, mailboxes. | The Microsoft 365 assessment. | | [Network Probe](https://wiki.cyberguard.srl/cat/networking/network-probe.md) | Scans your networks for devices, exposed services and vulnerabilities. | The [Network Assessment](https://wiki.cyberguard.srl/cat/networking.md). | The Microsoft Entra assessment needs no agent: the portal reads your tenant through the [Microsoft Entra app](https://wiki.cyberguard.srl/cat/onboarding/entra-app.md). ## Agents and Probes The Active Directory and Microsoft 365 agents can be used in two ways: - **On demand** — you download the agent, run it by hand on a machine and it sends the results at the end. Useful for a first assessment or for a one-off check. - **As a probe** — you install the agent once as a Windows service. From then on it runs the assessments you start from the portal or [schedule](https://wiki.cyberguard.srl/cat/administration/scheduling.md), and it updates itself. This is the recommended way: see [Run as a Service](https://wiki.cyberguard.srl/cat/agents/service.md). The network probe always runs as a service. ## Trust and Security - Every agent and probe is digitally signed by Inside Technologies Srl: Windows shows the verified publisher. - Each organization has its own configuration (`config.dat`) and installation code: an agent can only send data to your organization. - The configuration is encrypted on the machine where the agent runs, and the communication with the portal is protected. - Agents only read: they never change the configuration of your domain or tenant. ## Download and Configuration On the **Active Directory** and **Microsoft 365** pages of the portal: - **Download ZIP** downloads the agent. - **Download config** generates a new installation code and `config.dat` for your organization.  Generating a new configuration **replaces the previous one**: the old `config.dat` stops working immediately on every machine where it was copied. The confirmation shows when the current one was created and when it was last used, so you can decide whether you really need a new one. The installation code is shown only once, on the next page: copy it before continuing. The page also shows the exact command to run.