# Download INSIGHT Agent

The **GuardWare INSIGHT Agent** is installed on endpoint devices, such as desktops, laptops, and servers, within your organisation. It continuously monitors user activities and file interactions, such as file uploads, downloads, and copies, email attachments, and print actions, access to non-corporate websites and applications, and so on.

The Agent securely transmits all collected activity data to the Web Management Console using HTTPS (TLS-encrypted communication).

You can **download** the INSIGHT Agent directly **from the Management Console**. The downloaded agent includes the MSI configuration defined for your organisation, so no additional setup is required during installation.

## Prerequisite

To download the agent, you must first set up the MSI Config Settings for the organisation.

MSI Config Settings allow administrators to configure installation parameters for the GuardWare INSIGHT Agent MSI installer.

### Set up MSI Config Settings

1. Log in to the Management Console.
2. Navigate to **Settings Panel >** **General Settings**, click **MSI Config**, and enter the required details.<br>

   <figure><img src="/files/Gz1IZLntFdjAaHJuwtj4" alt=""><figcaption></figcaption></figure>
3. **Organization:** Select the organisation for which the MSI configuration is created. The downloaded agent will be linked to this organisation and will register endpoints under it.
4. **Client Location:** Specify the location or site of the endpoint.
5. **Server Name**: Enter the hostname or domain of the INSIGHT server.
6. **Server IP**: Enter the IP address of the INSIGHT server. This is used by the agent to establish communication with the server.
7. **Server Port**: Enter the port used for communication between the agent and the server. Ensure the port is allowed in the firewall when required. The standard HTTPS port is 443.
8. **Is Proxy Server**: Enable this option if endpoints connect to the server through a proxy.
9. **Proxy Server IP**: Enter the IP address or hostname of the proxy server.
10. **Proxy Server Port**: Enter the port used by the proxy server.
11. **Proxy Override Path**: Specify addresses or domains that should bypass the proxy. Traffic to these destinations is sent directly.
12. **Is Proxy Authentication**: Enable this option if the proxy requires authentication.
13. **Proxy Username**: Enter the username used to authenticate with the proxy server.
14. **Proxy Password**: Enter the password used to authenticate with the proxy server.
15. **Update Link**: Specify the URL of the client update control file if it is hosted on a different server than the default. By default, agents look for this file on the connected Windows Server; however, you can use this field to point to a different server or location from which the agent retrieves update information.
16. **Uninstall Client Before Execute**: Enable this option to remove any existing agent before installing a new one. Use this when upgrading or redeploying the agent.&#x20;
17. **Advanced Options**
    1. **Retain Advanced Options**: Enable this option to preserve selected advanced settings during updates or reinstallation.
    2. **Option Use WFP**: Enable this option to use Windows Filtering Platform (WFP) for network-level monitoring and control.
    3. **Option Kill Browsers During Uninstall**: Enable this option to close running browsers during uninstallation to avoid conflicts.
    4. **Option Server Installer**: Enable this option to allow the agent to be installed on a Windows Server. By default, installation is blocked on server operating systems; enabling this option overrides that restriction.
    5. **Option Check Close Wait**: Enable this option to ensure required applications are closed before installation continues.
18. **Driver Options**
    1. **Retain Driver Option**: Enable this option to preserve selected driver settings during updates.
    2. **Enable** the required drivers. For a fresh installation, we recommend enabling all the following  drivers:
       1\.
       GWDogFile: Prevents renaming and deletion of INSIGHT client system files.
       2\. GWScanner: Monitors USB file transfers with respect to productivity functionality.
       3\. ChatDocMon: Monitors chat and cloud applications.
       4\.
       USBMon: Monitors USB file transfers for DLP functionality.
       5\. GWProcessGuardian: Prevents termination of INSIGHT client processes.
       6\. GWProxy: Monitors higher-level network traffic.
19. Click **Submit**.

## Download the Agent

Once the MSI configuration is complete for an organisation, the **Download Agent** link becomes available in the top-right menu. Click it to download the agent with the configured MSI settings.

<figure><img src="/files/R3eRk7h4Zy29rzhojBQn" alt=""><figcaption></figcaption></figure>

{% hint style="info" %}
Update the MSI configuration whenever required and download a new agent to apply the changes.
{% endhint %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.guardware.com/insight/guardware-insight/getting-started/download-insight-agent.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.