Remote Agents Architecture Overview

The Remote Agent is a lightweight application installed at the end-customer site and that connects the remote environment to your Google Security Operations platform. The Agent allows security teams to run actions and playbooks on the remote environment to gather information and interact with remote security products.

The agent communicates with Google Security Operations via the  Publisher – a Proxy Server managed by Google Security Operations. The agent syncs automatically with Google Security Operations to allow seamless agent distribution. The relevant connectors and integrations need to be configured to allow the Agent to run them.

The following screenshot shows an overview of the solution.