Teramind Components
Teramind is built on a high-performance client-server architecture designed to capture, process, and visualize workforce data and enforce security policies. The platform consists of three primary components: the Agent, the Server, and the Dashboard.
Teramind Agent
Teramind deployments require the installation of the Teramind Agent, which is a standalone application available on Windows, macOS and Linux. The Agent captures detailed user activity on the endpoint and securely transmits that information to the Teramind Server for analysis. Beyond data collection, the Agent also enforces behavior policies and rules (configured on the Teramind Dashboard) on the computer.
The Agent is available as a Revealed version that is visible to the user or a Stealth version that operates silently in the background. A Standard version is also available to trial accounts which operates like a Stealth Agent but shows a consent dialogue to the user during installation.
For more information about the Agent:
Teramind Server
The Teramind Server receives all activity telemetry sent by the Teramind Agent. The server processes the raw data, runs the analytics engine to generate insights, and manages core system functions. Additionally, the server hosts the web-based Teramind Dashboard, which serves as the primary management interface for administrators.
Teramind offers flexible server hosting models tailored to your infrastructure requirements:
Teramind Cloud: Fully managed by Teramind and hosted on Oracle Cloud Infrastructure (OCI) tier-3 data centers.
Private Cloud: Hosted within your organization's virtual private cloud across major providers, including AWS/AWS GovCloud, Azure/Azure Government, or Google Cloud Platform (GCP).
On-Premises: Delivered as a pre-configured virtual machine (VM) image for deployment within your own infrastructure or supported data center.
Enterprise Scalability: For On-Premises or Private Cloud environments, the server architecture can be configured according to your scalability and security requirements with features like multi-node deployment, load balancing, high availability (HA) configurations, and end-to-end encryption (E2EE) to ensure maximum uptime and data security.
For more information about the deployment options, check out this article:
Teramind Dashboard
The web-based Dashboard is the central monitoring and management hub. From the Dashboard, you can view monitoring reports and user behavior analytics (UBA), replay session recordings, analyze workforce productivity, set up role-based access control (RBAC), build policies and rules to automatically prevent security incidents, and more. You can also configure all aspects of the Agent and the overall deployment from the Dashboard.
High-Level Architecture and Data Flows
The following chart and table describe how data flows between the components.
|
1 | Using the network filtering driver (proxy) Teramind Agent is able to analyze all network traffic on the machine. Agent detects high-level events (emails sent, webpages visited, instant messages, etc.), fetches all meta-information from underlying raw network traffic and creates monitoring events. |
2 | Using the filesystem filter driver, Teramind Agent is able to oversee and analyze all file-level operations happening on the computer. The Agent detects high-level events (file created, copied, etc.), fetches all metadata, and creates monitoring events. |
3 | The Agent uses other OS APIs to oversee application behavior and user activities on the system and generate monitoring events. |
4 | When there is no direct connection to the server, The Agent stores generated monitoring events in an offline data store. Once the connection is re-established, the Agent reads stored events and pushes them to the server. |
5 | The Agent streams generated events to the server. Various protocols/ports are used:
The Agent also receives configurations, monitoring settings, behavior policies & rules from the server and enforces them to the endpoint. |
6 | A web-based Dashboard allows admins and privileged users to configure the system and Agent settings, create behavior policies and rules, etc., and view reports. |