UNICON DLP/DPI Console

Requires Attention

Operational Status

DPI, endpoint agents, policy coverage and channel validation

VPN / RDP

Incident Trend

DLP Activity

USB, Web, Telegram, Email, Cloud, Print, Clipboard, File

DPI / Network Activity

Applications, VPN, TOR, RDP, DNS anomalies, unknown traffic, destinations, sources

Recent Incidents

DLP Events

File Audit

Analyze Word/PDF files and show real findings, risk and policy outcome.

Drop Word/PDF file here or browse. Unsupported files show a clear pilot error.

Upload / Drag&Drop Automatic Analysis Findings Risk Result

No file analyzed yet.

DPI Overview

Sensor health, protocol and application visibility from real events only

DPI Sensors

SPAN/TAP Ubuntu sensor validation remains required for live PASS

Network Sessions

Customer Demo Mode

DLP/DPI Pilot

0/5

Demo ready.

Scenario Runner

No scenario executed yet.

Incident Queue

Risk matrix & triage

How incidents are graded and which ones to handle first.

Critical

Confirmed or high-impact threat (malware/C2, active intrusion, blocked sensitive-data exfiltration).

High

Likely policy violation or data exposure (unauthorised VPN/TOR/RDP, cloud/messenger exfiltration, sensitive data to an external destination).

Medium

Suspicious activity worth review (anomalous flows, P2P/mining, DLP monitor-mode hits).

Low

Informational signals, unclassified flows, and diagnostics.

Priority: P1 = review now, P2 = today, P3 = this week, P4 = monitor.

Incident Details

Full file path and investigation metadata are shown outside raw JSON.

Endpoint Agents

Select visible

Agent Details

Identity, health, security and diagnostics for the selected endpoint.

Agent Collector Diagnostics

Collector failures reported by endpoint agents. These agent-health events are hidden from the Events feed and shown here for diagnostics.

Groups

Groups of agents. Incidents below are filtered by the selected group.

Group Incidents

Devices / USB

Physical removable device evidence from endpoint events only.

USB Policies

Policy Management

Endpoint Policy

Policy name Enforcement mode Enabled VPN detection RDP detection Quarantine dir Max file size Max files Watch paths Risky extensions Sensitive extensions Name keywords Quarantine events Shadow copies (file shadowing) Shadow max file size (bytes) Shadow files per cycle Shadow total bytes per cycle Shadow copies kept locally Shadow retention days Shadow event types Shadow extensions Shadow store dir

Effective policy

No endpoint policy loaded.

Reports & Audit

Real system posture only; no fictitious compliance percentages.

Critical Audit Trail

TIME / ACTOR / ACTION / OBJECT / DETAILS / RESULT

Integrations

Gateway and service integration status from runtime state.

System

Runtime, integrations and deployment readiness

Service Links

System

Runtime, integrations and deployment readiness

Service Links

Agent Packages

Download the endpoint agent and verify SHA-256 before installation.

Package	Version	Size	SHA-256	Download
UNICON Corp Agent (Windows, eternal) RC4	1.0.5-RC4	129 MB	`be5fb50f0b468b21f3c9c034c7ec97f365cd38fc7b637a9c0d2fabdca65578d5`	Download ZIP .sha256
UNICON Corp Agent (Windows, eternal) RC3	1.0.5-RC3	128 MB	`bbfda07e70e9a4a4a91093cb7307837332e828d736fa267e8de82ef10b98fd58`	Download ZIP .sha256
UNICON Agent Setup (Windows, standalone — Python ichida) RC3	1.0.5-RC3	96 MB	`53a6567507048ab0a04db4c0a99d1c6ac8e1ee031cac5af69d68cb55fd710298`	Download EXE .sha256
UNICON Agent Uninstaller (Windows)	1.0.5-RC2	36.5 MB	`4f0dfaa5b6c6d5be491887d2d6cdb1161d0ebf2b4c376b0feb9204c9c5e382ce`	Download EXE .sha256
Linux Agent (eternal)	1.0.5-RC3	0.59 MB	`45286ae1a5c6974ff3a945e32449bd0eaac5b0b409255e2d71eebf3fd3e5ccb3`	Download TGZ .sha256
macOS Agent (eternal)	1.0.5-RC3	0.59 MB	`9e24cb260e9ba037100fcdb865a0bd2fed75a3702be5b1aaf94678724ec57d42`	Download TGZ .sha256

Tokens are issued by the administrator (role service). Do not publish the token or place it in the package.

UNICON Corp Agent — O'rnatish (eternal)

Windows 10/11 x64 · alohida Python kerak emas (runtime ichida) · Установка вечного агента

Yuklab olish / Скачать: eng oson yo‘l — jadvaldan UNICON Agent Setup (standalone) → Download EXE: bitta fayl, Python runtime ichida — ZIP va arxiv ochish kerak emas. Alternativa: UNICON Corp Agent (Windows, eternal) → Download ZIP → yechildiring (masalan C:\UNICON-Agent) → ichidan unicon-agent-setup.exe.
O'rnatish / Установка (GUI): unicon-agent-setup.exe → ma'mur huquqida ishga tushiring (Right click → Run as administrator) → til (uz/ru/en) → rozilik → server http://45.150.25.74 → IT bergan service-token → Install. Xizmat «UNICON DLP Agent» (UniconDlpAgent) o'rnatiladi va ishga tushadi.
Eternal rejim — avtomatik / Автоматический вечный режим: installer ichida client_secret (dlpdpi-api) boshqarilgan. O‘rnatish jarayonida agent o‘zi client_credentials orqali 30 kunlik token mint qiladi, uni agent.json ga yozadi, xizmatni ishga tushiradi va birinchi register+heartbeat natijasini kutadi. GUI‘dagi service-token maydoni ixtiyoriy — bo‘sh qoldirsangiz ham ishlaydi. Qo‘lda almashtirish (kerak bo‘lsa):
```
$cfg = "C:\ProgramData\UNICON\Agent\agent.json"
$j = Get-Content $cfg -Raw | ConvertFrom-Json
$j.client_secret = "<yangi_secret>"
$j | ConvertTo-Json -Depth 5 | Set-Content $cfg -Encoding UTF8
Restart-Service UniconDlpAgent
```
Silent / GPO (massaviy):
```
unicon-agent-setup.exe /VERYSILENT /SERVER=http://45.150.25.74 /LANG=ru
```
/TOKEN berilsa — undan foydalanadi; berilmasa — agent o‘zi mint qiladi.
Tekshirish / Проверка:
```
Get-Service UniconDlpAgent
Get-Content C:\ProgramData\UNICON\Agent\agent-state.json
```
Status: Running, last_error: null — konsolning Agents bo'limida heartbeat ko'rinadi.
Natija / Результат: o'rnatish tugaganda oyna aniq javob beradi: «Agent MUVAFFAQIYATLI O'RNASHTIRILDI va serverga ulandi» — yoki — xato va uning aniq sababi (masalan: fayl yetarli emas, antivirus blokladi, serverga aloqa yo'q). To'liq jurnal: C:\ProgramData\UNICON\Agent\setup.log. (При успешной установке появится окно «УСПЕШНО УСТАНОВЛЕН и подключён к серверу», при ошибке — точная причина и путь к логу.)
Agar o'rnatish ishlamasa / Если установка не идёт: SmartScreen oynasi chiqsa — «Batafsil ma'lumot» → «Baribir ishga tushirish» (Подробнее → Выполнить в любом случае). Antivirus karantinga olgan bo'lsa — fayllarni tiklang va papkani istisnolarga qo'shing. Xatolar endi ekranda ko'rinadi.
O'chirish / Удаление: papkadagi unicon-agent-uninstall.exe — ma'mur huquqida (tavsiya). Yoki: "C:\Program Files\UNICON\Agent\unicon-agent.exe" uninstall

Token va client_secret faqat IT administrator tomonidan beriladi — ularni paketga qo'shmang va uchinchi shaxslarga bermang. To'liq qo'llanma ZIP ichida: INSTALL-README-RU-UZ.txt.

Linux Agent — O'rnatish (eternal)

Ubuntu 22.04+/Debian 12+ · systemd · python3 ставится автоматом · offline wheels

Yuklab olish / Скачать: jadvaldan Linux Agent (eternal) → Download TGZ, keyin:

tar -xzf UNICON-Linux-Agent_1.0.5-RC3_eternal.tar.gz
cd UNICON-Linux-Agent
sudo ./install-systemd.sh

Nima qiladi skript: python3+venv (kerak bo'lsa apt'dan o'rnatadi) → /opt/unicon-agent, offline wheels'dan httpx, konfig /etc/unicon-agent/agent.json (client_secret ichida, root-only 600), systemd unit unicon-dlp-agent — Restart=always (вечный режим): token o'zi mint qiladi (30 kun) va avtomatik yangilaydi, birinchi register+heartbeat'ni kutadi.

Tekshirish / Проверка:

systemctl status unicon-dlp-agent
cat /var/lib/unicon-agent/agent-state.json   # "last_error": null

O'chirish / Удаление:
```
sudo /opt/unicon-agent/uninstall.sh
```

Env sozlamalar (ixtiyoriy): UNICON_SERVER, UNICON_AGENT_ID, UNICON_INTERVAL, UNICON_CLIENT_SECRET. Log: journalctl -u unicon-dlp-agent -f.

macOS Agent — O'rnatish (eternal)

macOS 13+ (Intel/Apple Silicon) · LaunchDaemon · python3 kerak (xcode-select --install)

Yuklab olish / Скачать: jadvaldan macOS Agent (eternal) → Download TGZ, keyin Terminal:
```
tar -xzf UNICON-Mac-Agent_1.0.5-RC3_eternal.tar.gz
cd UNICON-Mac-Agent
sudo ./install-macos.sh
```
python3 bo'lmasa: xcode-select --install
Nima qiladi: venv + offline wheels → /Library/UNICON, konfig /Library/Application Support/UNICON/agent.json (client_secret ichida), LaunchDaemon com.unicon.dlp.agent KeepAlive=true — o'zi qayta ishga tushadi (jumladan reboot'dan keyin). Token o'zi mint qiladi (client_credentials, 30 kun).

Tekshirish / Проверка:

launchctl print system/com.unicon.dlp.agent | grep state
tail /Library/Logs/unicon-dlp-agent.log

O'chirish / Удаление:
```
sudo /Library/UNICON/uninstall.sh
```

macOS: register/policy/heartbeat/fayl-events ishlaydi; print/screenshot/clipboard — faqat Windows (modul o'zi o'chadi).

Notifications

Audit Log

Roles & Permissions

No RBAC changes yet.

Permissions

Server-side permission catalog

Users

Local authorization overrides

Select visible

Operator Workflow

Runtime map

Service Links

Pilot Readiness

Pilot Documents

Acceptance Checklist

Pilot evidence closure

Delivery Files

Checkpoint metadata loading

Handoff Commands

Final gates before customer delivery

Scope Boundary

Current pilot phase