Collectors & Agents
Collectors
The SIFF Collector is responsible for collecting configuration files and command output from devices within your organization and forwarding the information back to SIFF. To get started a single Collector is sufficient, although when scaling out additional Collectors may be needed depending on the number of devices monitored.
Collectors are able to remotely access devices via SSH or Telnet for collection purposes, or can work in conjunction with Agents where remote access is not permitted.
Collectors are also used to auto discover devices within your environment.
Recommended reading:
Network connectivity
Collectors must be able to communicate back to the SIFF platform. The complete list of access points and ports will depend on the AWS region and whether subscribed under a shared or dedicated usage plan.
All communication with SIFF is encrypted via HTTPS (TLS) and the Collectors serve as the only direct contact points within your environment.
Collectors must also have network access to devices they will be monitoring. This is either via SSH, or Telnet, or through a SIFF Agent.
Agents
Note: Agents are not required for Linux, UNIX, or Network devices that support SSH or Telnet and valid access credentials are available.
The SIFF Agent is a lightweight client for Windows and Linux/UNIX systems where remote shell access is not available or permitted. Agents are configured to work with a Collector to manage collection jobs and all do not communicate directly with SIFF.
Recommended reading:
Network connectivity
Agents only need to communicate with a Collector in your environment. All communications are encrypted via TLS.