{"id":145,"date":"2026-04-17T15:49:56","date_gmt":"2026-04-17T12:49:56","guid":{"rendered":"https:\/\/mangen.kitabara.org\/?p=145"},"modified":"2026-04-21T22:38:34","modified_gmt":"2026-04-21T19:38:34","slug":"installing-the-watchguard-threatsync-ndr-collection-agent-on-ubuntu-linux","status":"publish","type":"post","link":"https:\/\/mangen.kitabara.org\/index.php\/installing-the-watchguard-threatsync-ndr-collection-agent-on-ubuntu-linux\/","title":{"rendered":"Installing the WatchGuard ThreatSync+ NDR Collection Agent on Ubuntu Linux"},"content":{"rendered":"\n

This article explains how to install the WatchGuard Agent<\/strong> and enable the ThreatSync+ NDR Collector Agent<\/strong> on an Ubuntu Linux server. The steps apply to Ubuntu Server 24.04 LTS<\/strong>.<\/p>\n\n\n\n

Please check also:<\/strong>
WatchGuard’s guide how to install NDR collector to a ubuntu Linux server.<\/strong><\/a>
Ubuntu server 24.04 LTS download lin<\/strong>k<\/a><\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n
<\/div>\n\n\n\n

This guide walks you through the full installation process on Ubuntu Server 24.04 LTS<\/strong>, from preparing the system to installing the WatchGuard Agent<\/strong> and enabling the NDR Collector<\/strong>.<\/p>\n\n\n\n

\n
\"\"\n\t\t\t\n\t\t\t\t\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n
\"\"\n\t\t\t\n\t\t\t\t\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n
\"\"\n\t\t\t\n\t\t\t\t\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n
\"\"\n\t\t\t\n\t\t\t\t\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n
\"\"\n\t\t\t\n\t\t\t\t\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n<\/figure>\n\n\n\n
<\/div>\n\n\n\n

Change the network interface from DHCP to Manual mode and configure a static IP address.<\/p>\n\n\n\n

\"\"\n\t\t\t\n\t\t\t\t\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n

<\/p>\n\n\n\n

\n
\"\"\n\t\t\t\n\t\t\t\t\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n
\"\"\n\t\t\t\n\t\t\t\t\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n<\/figure>\n\n\n\n
<\/div>\n\n\n\n

Continue with installation and configure the hard disk configuration settings.<\/p>\n\n\n\n

\n
\"\"\n\t\t\t\n\t\t\t\t\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n
\"\"\n\t\t\t\n\t\t\t\t\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n
\"\"\n\t\t\t\n\t\t\t\t\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n
\"\"\n\t\t\t\n\t\t\t\t\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n
\"\"\n\t\t\t\n\t\t\t\t\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n<\/figure>\n\n\n\n
<\/div>\n\n\n\n

In the Profile Configuration you create a Primary user account and define the computer name<\/p>\n\n\n

\n
\"\"\n\t\t\t\n\t\t\t\t\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n<\/div>\n\n\n
<\/div>\n\n\n\n

Continue with the installation of the Ubuntu Linux.
Skip the Ubuntu Pro option.
Install SSH (recommended).
Don’t choose any Snaps options.<\/p>\n\n\n\n

\n
\"\"\n\t\t\t\n\t\t\t\t\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n
\"\"\n\t\t\t\n\t\t\t\t\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n
\"\"\n\t\t\t\n\t\t\t\t\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n<\/figure>\n\n\n\n
<\/div>\n\n\n\n

Choose Reboot Now<\/strong> after installation is complete and Login to the Ubuntu with the credentials you entered earlier.
Run sudo apt update<\/strong> and sudo apt upgrade<\/strong> to update the ubuntu <\/p>\n\n\n\n

\n
\"\"\n\t\t\t\n\t\t\t\t\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n
\"\"\n\t\t\t\n\t\t\t\t\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n
\"\"\n\t\t\t\n\t\t\t\t\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n<\/figure>\n\n\n\n
<\/div>\n\n\n\n

Log in to your WatchGuard Cloud<\/strong> account.
Select Configure<\/strong> > ThreatSync+ Integration<\/strong>s > Collection Agents<\/strong>.
On the ThreatSync+ NDR Collection Agents tab, click Add Collection Agent.<\/strong>
In the Download and Install the WatchGuard Agent section, click Download the WatchGuard Agent<\/strong>. In the Download WatchGuard Agent Installer dialog box, select Linux<\/strong>.<\/p>\n\n\n\n

\n
\"\"\n\t\t\t\n\t\t\t\t\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n
\"\"\n\t\t\t\n\t\t\t\t\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n
\"\"\n\t\t\t\n\t\t\t\t\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n<\/figure>\n\n\n\n
<\/div>\n\n\n\n

Copy the “WatchGuard Agent.run” <\/strong>file to the Linux server example with WinSCP<\/a> software and run start the installation, sudo bash “WatchGuard Agent.run”<\/strong>
<\/p>\n\n\n\n

\n
\"\"\n\t\t\t\n\t\t\t\t\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n
\"\"\n\t\t\t\n\t\t\t\t\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n<\/figure>\n\n\n\n
<\/div>\n\n\n\n

From the Host drop-down list, select the Linux computer that you want to use as a ThreatSync+ NDR Collection Agent and Click Save.<\/p>\n\n\n\n

\"\"\n\t\t\t\n\t\t\t\t\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n
<\/div>\n\n\n\n
\"\"\n\t\t\t\n\t\t\t\t\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n
\"\"\n\t\t\t\n\t\t\t\t\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n
<\/div>\n\n\n\n

And after NDR Collection Agent starts to receive NetFlow traffic <\/p>\n\n\n\n

\"\"\n\t\t\t\n\t\t\t\t\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n
\"\"\n\t\t\t\n\t\t\t\t\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n
\"\"\n\t\t\t\n\t\t\t\t\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n","protected":false},"excerpt":{"rendered":"

This article explains how to install the WatchGuard Agent and enable the ThreatSync+ NDR Collector Agent on an Ubuntu Linux server. The steps apply to Ubuntu Server 24.04 LTS. Please check also:WatchGuard’s guide how to install NDR collector to a ubuntu Linux server.Ubuntu server 24.04 LTS download link This guide walks you through the full…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11,8,2],"tags":[],"class_list":["post-145","post","type-post","status-publish","format-standard","hentry","category-linux","category-ndr","category-watchguard"],"_links":{"self":[{"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/posts\/145","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/comments?post=145"}],"version-history":[{"count":48,"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/posts\/145\/revisions"}],"predecessor-version":[{"id":241,"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/posts\/145\/revisions\/241"}],"wp:attachment":[{"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/media?parent=145"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/categories?post=145"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/tags?post=145"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}