We are looking to implement SailPoint FAM 8.4 into our environment and in the documentation we found the attached chart.
If I am reading this correctly it states that for Microsoft Windows, a Local Agent is required for Activity Monitoring, Permission Analysis, Data Classification, and Access Fulfillment. Unfortunately, this would require us to install .NET core 6 onto over 1000 servers and with the EOL scheduled for November 12 of this year, we’re a little hesitant to do so. So my two questions are this:
Is there a scheduled release where anything greater than .NET core 6 will be supported?
If we decide to NOTinstall the Local Agent on some of these servers, what information can SailPoint FAM collect?
Thanks for looking into this, and look forward to hearing back
Yes, we are aware of the pending EOL for .NET 6 and will be offering a FAM Service Pack mid-year which will support the latest version of .NET. As we have more details we will announce the upcoming change.
Likely, you have a relatively small subset of those servers which are hosting your core services (Agent Configuration Manager, Event Manager(s), Engines - Permission Collection (PC) and Data Classification (DC), Scheduled Task Handler, etc). Also, likely, your PC and DC Collectors (this is under the local agents you are referring to above) are minimal - generally customers will install a few per Engine. Therefore, I’m making the assumption that majority of your servers are for hosting your Activity Monitors (especially if you have a large amount of Windows File Servers which you have configured AM for). If you upgrade the servers hosting just your core & collector services, all functionality will work except your Activity Monitoring. However, we do not recommend this. I would instead recommend working with our Professional Services team to help accomplish the custom solution you could implement in the interim.
Therefore, all servers hosting FAM services will need .NET 6 installed. I’m aware there are Powershell scripts which can help upgrade the .NET version on mass (one attached). Please note: This is not something currently officially supported by File Access Manager; and has not been tested in any official capacity. If you decide to use, please be aware this will be at your discretion. Also, if you have any questions or concerns around this, you would need to work with our Expert or Professional Services teams. It would not be supported under general Support. We will consider to support this in future versions.
If you decided to upgrade FAM without upgrading the underlying platform, you will likely have significant issues in communication and any FAM service(s) hosted on that server will not functioning properly. bulkinstallerdotnet.zip (564 Bytes)
