The IOC Streaming module consists of a server module and an agent module. It is important to understand the following relationships between the server and agent modules:
You can install and enable the module using the Endpoint Security Web UI. This enables the server module and makes the agent module available to be installed on the agents that you have identified through policy.
You install and enable the module on endpoint agents using the IOC Streaming category within a policy. Agents assigned to this policy with IOC Streaming enabled will automatically download, install, and run the agent module.
If you disable the server module, the agent module for all policies that contain the IOC Streaming category will also get disabled.
Uninstalling the IOC Streaming server module removes the IOC Streaming category from all the polices. Agents with the IOC Streaming category previously enabled will stop the IOC Streaming agent module and uninstall it.