How to manually deploy Hexnode XDR Agent

What is Hexnode XDR Agent?

The Hexnode XDR Agent (Extended Detection and Response) is an endpoint security agent that offers comprehensive threat monitoring and response to endpoints. The agent collects telemetry data continuously, evaluates activity on the system, and provides on-device protection from cyber threats on Windows endpoints. The agent works seamlessly in heterogeneous environments that may include remote devices or devices spread over multiple locations. Installing the XDR Agent across endpoints aids faster detection and response to threats, allowing organizations to maintain consistent security coverage throughout their enterprise.

Why do we need manual deployment in XDR?

Manually installing the Hexnode XDR Agent can be important in situations where automated installation is not possible or permitted, such as air‑gapped systems without internet access, devices not enrolled in Hexnode UEM, or environments with strict internal security policies that forbid remote installations. Manual deployment is also useful during testing, troubleshooting, and for the endpoints in remote or offsite locations where centralized deployment tools are not available. Hexnode guarantees that even with manual installation endpoints will be monitored, have threat detection capabilities, and response capabilities that are equal in level to automated installations. Once installed, the agent functions the same way by collecting telemetry data continuously and integrating with Hexnode XDR platform for secure coverage across all devices.

Steps to obtain the Hexnode XDR Agent package

1. Log into the Hexnode XDR portal.
2. Navigate to the Endpoints tab and click on Installation.
3. Look for the available Hexnode XDR Agent packages which are listed. The list contains the newer and updated versions of the XDR Agent.
4. Select the version that is compatible with your device, then click the download button to obtain the installer as .msi package.
5. Copy the portal token which is the passkey that is to be entered while installing the agent at the endpoint.
6. Send both the portal token and the downloaded .msi package to the target endpoint devices using a UEM solution, USB drive, file-sharing platforms, email, or remote file transfer tools.

How to install the package at the endpoint?

1. Select the shared package to install and run the installer.
2. Follow the on-screen instructions and complete the dependency installations.
3. After successful installation of the required dependency packages, Hexnode EULA will be displayed. Read the EULA and click on Agree and Enroll.
4. Enter the passkey.
5. Click Finish.

What happens after the Hexnode XDR agent is installed on the device?

The Hexnode XDR Agent gets installed on the endpoint device. After deployment, the agent silently runs in the background and continuously monitors the system for telemetry collection and threat detection in real time.

After deployment, the device automatically gets listed on the Hexnode XDR portal under the Endpoints tab. Admins can view the device’s security status, monitor activities, and manage responses to potential threats from this console, ensuring consistent protection across endpoints.