Nmap is a network scanning tool, that is used to discover hosts and services on a computer network by sending packages and analyzing the responses. Atera uses Nmap for the Network Discovery feature. It allows Network Discovery to extract more data from endpoints, providing more accurate results.

Before running Network Discovery, we recommend whitelisting Nmap to prevent potential disruptions or false positives from security software, antivirus solutions, or endpoint detection and response (EDR) systems.
 

Doing so helps ensure the scanning process runs smoothly and that all discovery results are captured accurately. For detailed instructions on how to whitelist Nmap, please see Nmap Whitelist Guide for Antivirus Software.

Installation

Nmap OEM and Npcap OEM will be installed when you first attempt to scan a network. The installation will take place on the scanning agent. Devices that were discovered by the Network Discovery scan will not have installed Nmap or Npcap.

Remove Nmap and Npcap

The script below will uninstall Nmap and Npcap from your endpoints. The script needs to run as .bat with Admin rights.

schtasks /delete /tn AteraAgentTasksScheduler /f
schtasks /delete /tn npcapwatchdog /f
reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\ATERA Networks\AlphaAgent\Packages\AgentPackageNetworkDiscovery" /f
reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\ATERA Networks\AlphaAgent\TaskSchedulerTasks" /f
del "C:\Program Files\Atera Networks\AteraAgent\Packages\AgentPackageNetworkDiscovery" /q
del "C:\Program Files\Atera Networks\AteraAgent\Packages\AgentPackageTaskScheduler" /q