Platform Objects

Because of its modular architecture, Palo Alto Networks Trust Protection Foundation can be deployed on a single server as a self-contained system or it can be deployed on multiple servers to distribute specialized functions such as Discovery or Logging. Every time you install Palo Alto Networks Trust Protection Foundation, the program automatically registers the server in the Palo Alto Networks Trust Protection Foundation database. The server then appears as an object in the Platforms tree.

The program modules also appear under every server in the Platforms tree. When you install Palo Alto Networks Trust Protection Foundation, every module is installed on the server. However, the modules may or may not be enabled. During installation, you can select which modules you want to enable on the current server. After install, you can enable or disable modules in the Platform tree. Therefore, if a server performs a specialized function, such as a dedicated Discovery Server, you may enable only a single module on that server.

The Platform modules also enable you to configure program functions. For example, the agent Modules allow you to centrally manage agent configuration. Using the Agent Modules, you can determine the time at which Trust Protection Foundation Agents run local discovery scans as well as the time the Agents report their discovery results. Additionally, you can designate the directories or keystores that you want to include or exclude from the discovery scan and the types of files you want to discover.