Monarx Installation

Please contact us if you're using an OS variant that you isn't detailed above.

The Monarx agent is the workhorse that coordinates security measures such as file system scanning, malicious process monitoring, malicious cron file activity, and more through to coordinating with the Monarx Cloud.

1. Set up the Agent configuration file
During initial account setup the web app will prompt you to download your agent configuration file, which contains your client_id and client_secret.

Alternatively, new credentials and configuration files can be provisioned in the Credentials Module in the Monarx web app. Select the ➕ symbol ➜ New Agent Credential ➜ Save which offers an option to Download the full agent configuration file.

Place this configuration file in /etc/monarx-agent.conf.

Before installing the Agent package below, uncomment/configure the user_base values in the monarx-agent.conf file according to the examples provided, or as described in Advanced Agent Configuration.

2. Add the Monarx Repository

To install any Monarx package, add the Monarx repository to your package manager:

3. Install the Agent and Protect

Install the monarx-protect-autodetect package with your preferred package manager:

For standard apache, litespeed, cPanel, Plesk style environments, the php extension can be automatically installed with:

The monarx-protect-autodetect package pulls in the monarx-agent and monarx-protect packages as dependencies. It configures Protect to be loaded as a PHP extension for common configurations of PHP, although you may need to restart your web servers for the changes to take effect.

You can verify that the Protect module is loaded and running via php -m | grep monarxprotect. Alternatively navigate to the Agents module in the Monarx web app, select the Agent then select Extensions where loaded and active PHP modules will be displayed.

For bespoke webserver installations, please see our Advanced Protect Installation guide.

An optional but recommended auditd integration is available for systems which support auditd. This enables near realtime processing of filesystem activity, providing the lowest malware time-to-detection and time-to-remediation.