...
Table of Contents |
---|
Getting Started
ConnectSecure has already signed you up for the new instance.
Please check Inbox for an email that looks like below:
Please
To log into the portal please click on the URL in this mail and log in using the username and password given in the mailportal link as shown in the picture above. Activate the user by following the instructions on the “Activate User” screen as seen below. Here is where you can set your password too.
Two-factor Authentication
Once entered username and password is entered, you will be redirected to set up authentication
...
Once the authentication is set, you will be directed redirected to the portal.
Please proceed to get started by following a pre requisites and creating a new company.
Pre requisites
Please open port 4222 from agent machine to below IP addresses of respective regions (where ConnectSecure instance is hosted) for successful communication.
Please whitelist outbound communication from agent machine to *.myconnectsecure.com.
Region | POD number | IP’s | Load Balancer IP’s |
---|---|---|---|
US | POD101 | 155.138.163.9 | 144.202.23.74 |
US | POD102 | 149.28.93.167 | 45.77.87.242 |
US | POD103 | 45.77.164.106 | 104.207.144.192 |
US | POD104 | 149.248.11.111 | 144.202.125.97 |
US | POD105 | 155.138.201.146 | 66.42.92.100 |
CA | POD200 | 216.128.178.144 | 155.138.140.251 |
UK LONDON | POD300 | 95.179.196.101 | 209.250.225.16 |
EU POLAND | POD400 | 70.34.254.208 | 64.176.69.126 |
EU MADRID | POD401 | 65.20.105.37 | 65.20.103.34 |
AU SYDNEY | POD500 | 45.32.245.127 | 139.180.161.236 |
AF | POD600 | 139.84.226.34 | 139.84.229.231 |
Creating a New Company
Navigate to the "Global View" and follow these steps to create a new company
...
2. New Company: Locate the "Create New Company" option and click on it.
3. Fill in Details: Provide the necessary information for the new company, including Company name, description, and any other required details.
Save Changes: After filling in the details, save the changes to create the new company
...
Discovery Settings and Credentials
Note: |
If the scan is limited to workstations only (LIGHTWEIGHT), please skip the "Discovery Settings and Credentials" section and proceed. |
Once the company is created, proceed to configure Discovery Settings and Credentials. This section will guide one through is an easy guide to the process.
...
...
Access Discovery Settings:
...
Verify Credentials: Once credentials are added, perform a verification to ensure they are valid and can be used for scanning.
Choose an OS type to add master credentials: Windows, MacOS, Linux, VMware, and Network devices.
Depending on the network setup, select either Active Directory or Asset Credential as the credential type.
...
...
...
...
...
...
Agent Installation
Info |
---|
|
...
Copy the script by selecting the "Copy to Clipboard" option.
...
Next, run the copied script on the Windows or Mac system with administrator permissions.
...
Map Discovery Settings and Credentials to Agent
Navigate to the "Agents" section within the application.
...
Locate and click on the "Action Button" (often represented by three dots or a gear icon) associated with the specific agent tha.
...
...
From the menu that appears, select "Map Discovery & Credentials"
...
Similarly, map the necessary Credentials to the agent by choosing the relevant credentials from the list.
Once you have mapped the Discovery Settings and Credentials, click the "Save" button to apply the changes.
...
Click on the "Scan" button to initiate the scanning process for the configured agent.
Assets
Go to the 'Company View'.
Click on 'Assets' to access the assets view.
...
In this section, you will find a comprehensive list of scanned assets.
The list includes assets along with their associated risk scores and vulnerability counts.
...
In this section, you can find the following information about the asset:
System information
Storage
Network information
BIOS Information
Firewall Policy
Problems
Solutions
Firewall Rules
Internal Ports
External Ports
Software
Asset Patches
Extension Programs
Services
User Shares
For network vulnerabilities, we can find scripts to remediate them.
We can directly copy the script and run it on the machine for remediation.
...
Problems
Click on 'Assets' to access the Problems view.
...
In this section, we can identify all the problems related to assets at the company level.
...
In this section, we can suppress Problems, triggering an email to the designated user for approval. This user can be internal or external.
...
Solutions
Click on 'Assets' to access the Remediation PlanSolutions.
...
The Remediation Plan Solutions lists missing OS (Operating System) security patches and the latest application versions that have not yet been installed.
...
Application Vulnerabilities
Click on 'Assets' to access the Application Vulnerabilities.
...
In this section, we can find the Application Vulnerabilities and missing OS (Operating System) security patches.
...
Pending OS Patches
Click on 'Assets' to access the Pending OS Patches.
...
In this section, we can review the pending OS patches across the company's view.
...
Ports
Click on 'Assets' to access the Ports section.
In this section, we can review the Ports details across the company's view.
...
Anchor | ||||
---|---|---|---|---|
|
Anchor | ||||
---|---|---|---|---|
|
Go to the 'Company View'.
Click on “Vulnerabilities” to access the Vulnerabilities view.
...
Select the reason for suppressing the vulnerability.
User Type: Choose the user type for whom the suppression request is intended: Internal User or External User.
Suppression Comments: Provide comments explaining the justification for suppressing
vulnerability.
Suppression Start Date and End Date:
Specify the start and end dates for the vulnerability suppression.
...
After completing these steps, the user will receive an email for approval. Upon approval, the request will proceed to the suppression stage.
...
Compliance
Go to the 'Company View'.
Click on “Compliance” to access the Compliance view.
In this section, we can access compliance details for CIS, PCIDSS, HIPAA, Cyber Essentials, NIST 800-53, Essential Eight across multiple platforms such as Windows Server, Azure Server, Windows Desktop, Linux, and Mac.
...
And for Manual Compliance, we can upload evidence to mark it as compliant or not applicable.
...
Active Directory
Click on “Active Directory” to access the Active Directory Section.
...
Here we can find:
Problems
Identifies and lists issues or challenges.
...
AD Summary
Provides a summary of Active Directory-related information.
...
Azure AD Summary
Offers a summary of Azure Active Directory-related information.
...
Active Directory: Presents detailed information and insights related to the Active Directory.
...
Azure Active Directory: Provides detailed information and insights concerning Azure Active Directory.
...
Microsoft Secure Score: Offers information and metrics related to the security score assigned by Microsoft, indicating the overall security posture.
...
PII Scan
Click on “PII Scan” to access the PII Scan Section.
...
Add a scan profile
Click on +Add to add a new scan profile.
Scan settings
Scan Settings lets you choose all by selecting the Select All option. Users can select optional information from fields like Surname, Phone, Date Of Birth, Postal Code, OAuth Token, Location, Email, IP, Credit Card, Phone, and SSN, and Street.
Select Default Extension
Select the Default Extension Type Select All option. Users can select optional extension types html, json, yaml, yml, tex, xml, ts, sh, wpd, php, go, cpp, c, js, xlsm.
Select the appropriate Source Type and an Agent to use for PII Scan.
...
Once all required fields are selected, please click on Save to successfully save this PII Profile with a message as Saved Successfully.
Initiate PII Scan
Locate and select the profile for which you want to initiate the PII scan.
...
Once the scan is complete, review the results to identify any flagged Personally Identifiable Information. This may include names, addresses, social security numbers, or other sensitive data.
...
Based on the scan results, take appropriate actions. This could involve redacting or encrypting sensitive information, notifying relevant parties, or implementing additional security measures.
...
Clicking on the highlighted PII data will redirect you to the detailed view of the chosen PII data.
Dashboard
On the right Pane, click on the Dashboard icon to be redirected to the Dashboard section. This area provides an overview of relevant information and data. Once in the Dashboard section, you can proceed to the next step.
...
After choosing the desired dashboard type, the system will display the corresponding information. Explore the various components and visualizations to gain insights relevant to your needs.