Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

Interactive Onboarding Demo

...

Weekly Consultant Lead Onboarding Sessions

Join our weekly group onboarding sessions led by our consulting team.

Tap the image below or visit http://www.connectsecure.com/onboarding

...

V4 Agent Prerequisites

We have a dedicated page with the V4 agent prerequisites for a smooth-running ConnectSecure agent and portal. This includes the Ports, IPs, Domain, and general whitelisting information.

Please refer to this page before completing your onboarding: V4 Agent Prerequisites

Accessing ConnectSecure V4

The ConnectSecure portal Configurations

You should also check out the Agent Whitelisting by POD/Regionfor any policy updates required.

...

Accessing ConnectSecure V4

The ConnectSecure portal is found here:

https://portal.myconnectsecure.com/sign-in

Info

If you

...

know your tenant's name, you can use the direct link here:

https://

...

portal.

...

myconnectsecure.

...

Onboarding Check List Table of Contents

...

com/sign-in?tenant_name=CHANGEME

** Replace the CHANGEME with your tenant name **

If you have an account created but are having trouble logging in, please check out our user password and MFA reset guide; tap the link below.

https://cybercns.atlassian.net/wiki/spaces/CVB/pages/2111111353/V4+User+Management+and+Security#Reset-Password-%2F-MFA

...

Onboarding Check List Table of Contents

Table of Contents
class
maxLevel6
minLevel2
include
outlinefalse
indent
excludeOnboarding Check List Table of Contents
styledefault
typelist
printabletrue
class

...

Setup Users and Security

...

  •  Review our User Management and Security Guide here: https://cybercns.atlassian.net/wiki/x/uQDVfQ
  •  You can review your user account details in the User Avatar > Profile section, where you can add additional Password and Security options.

...

Configure Global Settings

Note

Global Settings apply to all companies in your portal and auto-apply to any new ones created.

Navigate to Global > Settings > Global Settings and review the options.

While most of the default options will suffice, reviewing each one is important to become familiar with what's available and set by default.

Tip

We recommend you check at least the following global default settings:

See the full Global Settings documentation here: https://cybercns.atlassian.net/wiki/x/uICUgQ

Configure Global Scheduler

Info

The Global Scheduler is where you can configure automatic jobs for Scans, Patching, and Reporting. Remember, you can also configure the Company Scheduler for company-level jobs if you do not want it globally.

...

Scan Scheduler

  •  Configure Global Scan Scheduler

...

  • Avatar > Profile section, where you can add additional Passwords and Security options from the authentication portal Zitadel.

...

Configure Global Settings

Panel
panelIconId1f30e
panelIcon:earth_americas:
panelIconText🌎
bgColor#FFFAE6

Global Settings apply to all companies in your portal and auto-apply to any new ones created.

  •  Review Global Settings: Before adding companies to the portal, navigate to Global > Settings > Global Settings to review the available options and make any desired changes.

...

Reviewing each one is important to become familiar with what's available and set by default.

See the complete Global Settings documentation here: https://cybercns.atlassian.net/wiki/x/uICUgQ

...

Configure Global Scheduler

Info

The Global Scheduler is where you can configure automatic jobs for Scans, Patching, and Reporting. Remember, you can also configure the Company Scheduler for company-level jobs if you do not want it globally.

Navigate to Global > Settings > Scheduler to add, edit, and delete the settings.

...

Scan Scheduler

  •  Configure Global Scan Scheduler

Refer to our KB for additional information and setup help if needed: https://cybercns.atlassian.net/wiki/spaces/CVB/pages/2102198449/Global+Scheduler#Scan-Scheduler

Below is a sample scan recommendation.

Scan Scheduler Examples

Scan Job Name

Scan Type

Frequency

Target Time

Agent Type

Daily Full Scan - All Companies

(Includes Active Directory, Compliance, Firewall, and Network Scans)

Full Scan

Once Per Day

During business hours, we want assets to be online for scanning

Probe

Daily ASM Scan - All Companies

Attack Surface Mapper

Once Per Day

After hours, any time

Non-Agent Scan

Daily External Scan - All Companies

External Scan

Once Per Day

After hours, any time

Non-Agent Scan

Weekly Compliance Scan - All Companies

(Only needed if you are not using the Probe - Full Scan option)

Compliance

Once Per Week

During business hours, we want assets to be online for scanning

Lightweight or Probe Agent

Panel
panelIconId23f0
panelIcon:alarm_clock:
panelIconText
bgColor#DEEBFF

NOTE: The lightweight scan is unavailable in the scheduler. It can be configured under the Settings tab for both Global and company-level options.

See: https://cybercns.atlassian.net/wiki/spaces/CVB/pages/

...

2173993144/Global+

...

Below is a sample scan recommendation.

...

Automated Scan Schedule Recommendations

...

Scan Job Name

...

Scan Type

...

Frequency

...

Target Time

...

Agent Type

...

Daily Full Scan - All Companies

(Includes Active Directory, Compliance, Firewall, and Network Scans)

...

Full Scan

...

Once Per Day

...

During business hours, we want assets to be online for scanning

...

Probe

...

Daily ASM Scan - All Companies

...

Attack Surface Mapper

...

Once Per Day

...

After hours, any time

...

Non-Agent Scan

...

Daily External Scan - All Companies

...

External Scan

...

Once Per Day

...

After hours, any time

...

Non-Agent Scan

...

Daily Compliance Scan - All Companies

(Only needed if you are not using the Probe - Full Scan option)

...

Compliance

...

Once Per Day

...

During business hours, we want assets to be online for scanning

...

Lightweight or Probe Agent

Info

NOTE: The lightweight agent scan interval is configured under the Global Settings or Company Settings menu; the LWA scan type is unavailable in the scheduler.

Patch Scheduler

  •  Configure Global Patch Scheduler

...

Settings#Scan-Time-Interval/ https://cybercns.atlassian.net/wiki/spaces/CVB/pages/2174716655/Company+Settings#Scan-Time-Interval

...

Patch Scheduler

  •  Configure Global Patch Scheduler

This is where you configure automatic patching for Applications (third-party) and Operating Systems (OS). You can use one or both of the patching types. If you plan to use both Application and OS patching, you will build at least one schedule for each.

Refer to our KB for additional information and setup help: https://cybercns.atlassian.net/wiki/spaces/CVB/pages/2102198449/Global+Scheduler#Patch-Scheduler

Panel
panelIconId1f914
panelIcon:thinking:
panelIconText🤔
bgColor#DEEBFF

You may consider not configuring Patch Scheduler globally but on a per-company basis. The Company vs Global Scheduler can be used to balance these requirements.

Panel
panelIconIdatlassian-check_mark
panelIcon:check_mark:
panelIconText:check_mark:
bgColor#DEEBFF

Patch Status must be enabled at the Global or Company Settings to use patching.

See https://cybercns.atlassian.net/wiki/spaces/CVB/pages/2173993144/Global+Settings#Patching-Statusor https://cybercns.atlassian.net/wiki/spaces/CVB/pages/

...

Info

NOTE: You may consider not configuring Patch Scheduler globally but on a per-company basis. The Company vs Global Scheduler can be used to balance these requirements.2174716655/Company+Settings#Patching-Status

Panel
panelIconId1512c248-50a8-4494-824d-3e0862511784
panelIcon:_report:
panelIconText:_report:
bgColor#DEEBFF

Check out our Patch Management Guide: Patch Management Guide

Panel
panelIconId1f4f9
panelIcon:video_camera:
panelIconText📹
bgColor#DEEBFF

Watch on YouTube: https://youtu.be/hZ-yjR08lWI

...

Report Scheduler

  •  Configure Global Report Scheduler

Refer to our KB for additional information and setup help: https://cybercns.atlassian.net/wiki/spaces/CVB/pages/2102198449/Global+Scheduler#Report-Scheduler

Automated Report Schedule RecommendationsExamples

Report Schedule Name

Report Type

Frequency

Monthly Assessment Report - All Companies

PDF

Monthly

Monthly Executive Summary Report - All Companies

PDF

Monthly

Monthly Remediation Plan Report - All Companies

PDF

Monthly

Monthly Security Report Card Report - All Companies

Word

Monthly

Monthly Vulnerability Overview Report - All CompaniesExternal Scan Vulnerability Detailed

Word

Monthly

Weekly All Vulnerabilities Report - All Companies

Excel

WeeklyMonthly Compliance Report

Word

Monthly

...

Company Management

Info

Companies can be created manually in the portal (Local) , or imported from one of the support PSA Integrations using the import options. This does require an integration setup. It’s easier to create the local company first and then map the company to an integration later.

Add Local Company

  •  Add Local Company

Refer to our KB for additional information and setup help: https://cybercns.atlassian.net/wiki/x/DQB0gQ

...

Configure Company Settings

  •  Review and Update Company Settings

...

Refer to our KB for additional information and setup help: https://cybercns.atlassian.net/wiki/x/74qfgQ

...

Configure Company Discovery

  •  Review and Update Company Discovery

...

Refer to our KB for additional information and setup help: https://cybercns.atlassian.net/wiki/spaces/CVB/pages/2102919235/Company+Agents#Discovery

...

Configure Company External Asset(s)

  •  Review and Update Company External Asset Configurations

...

Refer to our KB for additional information and setup help: Company External Assets

...

Configure Company Scheduler

Review and update Company Scheduler options. If you have configured the Global Scheduler, you will see those options in the Company Scheduler window, as shown below. You may consider not setting a company-level schedule if you have it covered by the global.

...

Info

NOTE: You can view any inherited Global options within the company scheduler under ‘Is Global’

image-20240502-213525.png

...

Agent Deployment

  •  Prepare Company Agent Install Package

...

To use the Probe Agent, you must map the Discovery Settings and Credentials section; tap below for the guide on converting a lightweight agent to a probe.

...

Review Scan Results

Info

Now that we have configured all our settings and deployed agents, data should flow into our Assets, Vulnerabilities, Compliance, Active Directory, and PII modules where applicable.

image-20240509-213119.png

...

  •  Other Assets = Probe discovered assets not supported for vulnerability scanning; these assets are not counted towards your billable devices.
  •  Problems = Vulnerabilities. Instead of just dumping a list of CVEs, we classify them into our problem group categories; check our KB for the full listing: https://cybercns.atlassian.net/wiki/x/TgEUgg

...

  •  Solutions = Remediation Plan. This is where you will find the proposed/recommended solutions to address the problem (CVEs) discovered by the scans. Check the KB/FIX column to see a URL or link to the source for a solution.

...

This integration will also populate the Microsoft Secure Score data.

...

Review Dashboard and Reporting

Now that you have collected data from the various scans use the dashboard and reporting to get the information into the hands of the people who matter.

We have prebuilt Standard Reports and a customizable Report Builder.

...

You can also use the in-app Company Dashboard and/or Global Dashboard to see your data in different views with additional filtering and sorting options in our dashboards.

...

Need Onboarding Help?

We have an onboarding team dedicated to your success. Please use the link below to schedule a time that works for you. We will be happy to assist in your onboarding and answer any questions you have to get your implementation up and running smoothly.

One-on-one bookings:

https://calendly.com/connectsecure-onboarding

Group bookings (held multiple times a week)

https://connectsecure.com/onboarding

...

Need Support?

Contact our support team by sending an email to support@connectsecure.com or by visiting our Partner Portal, where you can create, view, and manage your tickets.

...