Remote Agents keep Secrets up to date on external networks by allowing Remote Password Changing and Heartbeat to occur on networks not directly connected to Secret Server (e.g. DMZ vs. internal or over the internet).
The Remote Agent is installed as a Windows Service on one computer on the network being managed (not on each computer).
The Remote Agent connects outbound to Secret Server on a configurable port. Verification of client and server authenticity is done using public/private key technology. All communication between the Remote Agent and Secret Server is encrypted.
Next User Guide
Thycotic on Twitter 
Secret Server on Facebook