navigation bar left navigation bar right

Secunia CSI7
navigation left tab About us navigation right tab
navigation left tab Careers navigation right tab
navigation left tab Memberships navigation right tab
navigation left tab Newsroom navigation right tab
navigation left tab Contact us navigation right tab

How to run Secunia CSI scanning without installing the CSI agent

Get this blog as an RSS Feed
Guest Blog
9:15 CET on the 1st July 2013
Entry written by Kent Agerlund, Senior consultant and Configuration Manager MVP at Coretech.

Lately I have done a lot of Secunia CSI installations. One of the questions that keeps coming up is “what client scanning options do we have, if we do not install the CSI agent locally?”. You basically have three options as described below.

Software Inventory

You can use ConfigMgr Inventory and gather information about *.EXE, *.OCX and *.DLL files. This process will get the job done although you are gathering much more information than CSI requires. This method requires that the Site Server (where you installed CSI) have access to the Cloud based database hosted by Secunia.

Network scanning

Perform a network scanning works nicely in a small lab enviroment, but I often find it to be to unrealiable when working in the “real world”.

Create a ConfigMgr package

The CSI agent dosn’t really have to be installed on the local host in order to do the scanning. I often create a traditional package in ConfigMgr and run the scan on a weekly basis. This approach requires that each of the clients will have Internet access and can connect to the CSI Cloud based database. In order to run the agent inside a ConfigMgr package follow these steps:

  1. Open the Secunia CSI console, from Scanning, Scaning Via Local Agents, Download Local Agent click Microsoft Windows and download the latest CSI agent.

  2. Launch the ConfigMgr console, select Software Library. Application Management, Packages.
  3. From the ribbon click Create package.
  4. Fill in the package information and click Next.

  5. On the Program Type page, ensure Standard program is selected and click Next.
  6. On the Standard Program page, configure these settings and click Next.

    Name: Secunia: CSI Agent Scan
    Command line: csia.exe -c
    Program can run: Whether or not a user is logged on

  7. On the Requirements page, click Next.
  8. Finish the wizard.
  9. Distribute the package to all Distribution Point groups using the Distribute Content feature.

Create the weekly scan

  1. Select the Package and click Deploy on the ribbon.
  2. On the General page, select the target collection and click Next.
  3. On the Content page, verify that the content is distributed and click Next.
  4. On the Deployment Settings page, ensure the purpose is Required and click Next.
  5. On the Scheduling page, in Assignment schedule click New and create a weekly scanning schedule. Also configure the deployment to Always Rerun.

  6. On the user Experience page, click Next.
  7. On the user Distribution Points page, click Next.
  8. Finish the wizard.

You will be able to monitor the scanning result from the CSI console.

Visit Kent Agerlunds original blogpost on

Discuss this blog entry
A new thread in our forum is created. Activate the thread by commenting/discussing below.
Subject: How to run Secunia CSI scanning without installing the CSI agent
No posts yet


You must be logged in to post a comment.

 Products Solutions Customers Partner Resources Company
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
Technology Partners
 About us

Secunia is a member of FIRST Secunia is a member of EDUcause Secunia is a member of The Open Group Secunia is a member of FS-ISAC
Secunia © 2002-2015 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability - Disclaimer
follow Secunia on Facebook follow Secunia on Twitter follow Secunia on LinkedIn follow Secunia on YouTube follow Secunia Xing follow Secunias RSS feed follow Secunia on Google+