Denise Dubie
Senior Editor

Agent-based vs. agentless

News
Oct 26, 20073 mins

IT managers might not like agents, but say they’re often necessary

A management software mainstay, agent software can be difficult to deploy and update on multiple boxes and, in some cases, is said to hurt the performance of the device it managers. But still you’ll find the software running on most machines in today’s networks.

When it comes to software agents, most IT managers would rather live with the little gremlins on their machines than opt for the alternative.

The small pieces of software code work with network management software to collect information from and take action on managed devices. But configuring, deploying and updating thousands of agents across client and server systems isn’t appealing. And in some cases, performance and security degrade when machines become overloaded with agent software from multiple vendors. 



But without agents, IT managers would have to physically visit desktops and servers to carry out simple tasks such as software updates. That’s why many IT managers choose to place a few hand-picked agents on managed machines, reducing manual effort and helping secure the machine with antivirus tools.

“There are risks in putting too many agents on any one device, so I’ve had to set hard limits on how many agents we send out to our endpoints,” said William Bell, director of information security at CWIE, an Internet-based Web-hosting company in Tempe, Ariz. “Some people will tell you agents are botnets waiting to happen, but if you have ever tried to patch thousands of machines without agents, you know agents have their place. It’s a judgment call.”

For now at least it seems the judgment will usually fall in favor of agents despite the headache of keeping them up-to-date. 

“Agents offer value. They allow you to extend your policy outside of your network and to control activities on endpoints no matter where they are. But there is a need to reduce the complexity of agents,” says Charles Kolodgy, a vice president at IDC. “You have to be diligent and vigilant with the agents that are required. Vendors must provide smart management with their agents.”

Going forward, industry watchers expect that multiple functions will be instrumented into a universal agent of sorts and others predict the capabilities will become embedded into operating systems and loaded onto equipment. Management vendors today have started work on standardizing agent technology across products to reduce the administrative burden agents put on customers, while also giving them the capabilities agents provide on the managed machine.

“Because endpoints are changing to include handheld devices, vendors know that an agent on each device is not feasible in the long term,” says George Hamilton, director of Yankee Group’s enabling-technologies enterprise group.

Return to the list of arguments >

Denise Dubie

Denise Dubie is a senior editor at Network World with nearly 30 years of experience writing about the tech industry. Her coverage areas include AIOps, cybersecurity, networking careers, network management, observability, SASE, SD-WAN, and how AI transforms enterprise IT. A seasoned journalist and content creator, Denise writes breaking news and in-depth features, and she delivers practical advice for IT professionals while making complex technology accessible to all. Before returning to journalism, she held senior content marketing roles at CA Technologies, Berkshire Grey, and Cisco. Denise is a trusted voice in the world of enterprise IT and networking.

More from this author