...
| Table of Contents |
|---|
Getting Started
ConnectSecure has already signed you up for the new instance.
...
To log into the portal please click on the portal link as shown in the picture above. Activate the user by following the instructions on the “Activate User” screen as seen below. Here is where you can set your password too.
Two-factor Authentication
Once username and password is entered, you will be redirected to set up authentication
...
Once the authentication is set, you will be redirected to the portal.
Please get started by following a pre requisites and creating a new company.
Pre requisites
Please open port 4222 from agent machine to below IP addresses of respective regions (where ConnectSecure instance is hosted) for successful communication.
Please whitelist outbound communication from agent machine to *.myconnectsecure.com.
Region | POD number | IP’s | Load Balancer IP’s |
|---|---|---|---|
US | POD101 | 155.138.163.9 | 144.202.23.74 |
US | POD102 | 149.28.93.167 | 45.77.87.242 |
US | POD103 | 45.77.164.106 | 104.207.144.192 |
US | POD104 | 149.248.11.111 | 144.202.125.97 |
US | POD105 | 155.138.201.146 | 66.42.92.100 |
CA | POD200 | 216.128.178.144 | 155.138.140.251 |
UK LONDON | POD300 | 95.179.196.101 | 209.250.225.16 |
EU POLAND | POD400 | 70.34.254.208 | 64.176.69.126 |
EU MADRID | POD401 | 65.20.105.37 | 65.20.103.34 |
AU SYDNEY | POD500 | 45.32.245.127 | 139.180.161.236 |
AF | POD600 | 139.84.226.34 | 139.84.229.231 |
Creating a New Company
Navigate to the "Global View" and follow these steps to create a new company
...
2. New Company: Locate the "Create New Company" option and click on it.
3. Fill in Details: Provide the necessary information for the new company, including Company name, description, and any other required details.
Save Changes: After filling in the details, save the changes to create the new company
...
Discovery Settings and Credentials
Note: |
If the scan is limited to workstations only (LIGHTWEIGHT), please skip the "Discovery Settings and Credentials" section and proceed. |
Once the company is created, proceed to configure Discovery Settings and Credentials. This section is an easy guide to the process.
...
...
Access Discovery Settings:
...
Verify Credentials: Once credentials are added, perform a verification to ensure they are valid and can be used for scanning.
Choose an OS type to add master credentials: Windows, MacOS, Linux, VMware, and Network devices.
Depending on the network setup, select either Active Directory or Asset Credential as the credential type.
...
...
...
...
...
...
Agent Installation
| Info |
|---|
|
...
Copy the script by selecting the "Copy to Clipboard" option.
...
Next, run the copied script on the Windows or Mac system with administrator permissions.
...
Map Discovery Settings and Credentials to Agent
Navigate to the "Agents" section within the application.
...
Locate and click on the "Action Button" (often represented by three dots or a gear icon) associated with the specific agent tha.
...
From the menu that appears, select "Map Discovery & Credentials"
...
Click on the "Scan" button to initiate the scanning process for the configured agent.
Assets
Go to the 'Company View'.
Click on 'Assets' to access the assets view.
...
In this section, you will find a comprehensive list of scanned assets.
The list includes assets along with their associated risk scores and vulnerability counts.
...
In this section, you can find the following information about the asset:
System information
Storage
Network information
BIOS Information
Firewall Policy
Problems
Solutions
Firewall Rules
Internal Ports
External Ports
Software
Asset Patches
Extension Programs
Services
User Shares
...
We can directly copy the script and run it on the machine for remediation.
...
Problems
Click on 'Assets' to access the Problems view.
...
In this section, we can suppress Problems, triggering an email to the designated user for approval. This user can be internal or external.
...
Solutions
Click on 'Assets' to access the Remediation PlanSolutions.
...
The Remediation Plan Solutions lists missing OS (Operating System) security patches and the latest application versions that have not yet been installed.
...
Application Vulnerabilities
Click on 'Assets' to access the Application Vulnerabilities.
...
In this section, we can find the Application Vulnerabilities and missing OS (Operating System) security patches.
...
Pending OS Patches
Click on 'Assets' to access the Pending OS Patches.
...
In this section, we can review the pending OS patches across the company's view.
...
Ports
Click on 'Assets' to access the Ports section.
In this section, we can review the Ports details across the company's view.
...
| Anchor | ||||
|---|---|---|---|---|
|
| Anchor | ||||
|---|---|---|---|---|
|
Go to the 'Company View'.
Click on “Vulnerabilities” to access the Vulnerabilities view.
...
Select the reason for suppressing the vulnerability.
User Type: Choose the user type for whom the suppression request is intended: Internal User or External User.
Suppression Comments: Provide comments explaining the justification for suppressing
vulnerability.
Suppression Start Date and End Date:
Specify the start and end dates for the vulnerability suppression.
...
After completing these steps, the user will receive an email for approval. Upon approval, the request will proceed to the suppression stage.
...
Compliance
Go to the 'Company View'.
Click on “Compliance” to access the Compliance view.
...
And for Manual Compliance, we can upload evidence to mark it as compliant or not applicable.
...
Active Directory
Click on “Active Directory” to access the Active Directory Section.
...
Here we can find:
Problems
Identifies and lists issues or challenges.
...
AD Summary
Provides a summary of Active Directory-related information.
...
Microsoft Secure Score: Offers information and metrics related to the security score assigned by Microsoft, indicating the overall security posture.
...
PII Scan
Click on “PII Scan” to access the PII Scan Section.
...
Add a scan profile
Click on +Add to add a new scan profile.
Scan settings
Scan Settings lets you choose all by selecting the Select All option. Users can select optional information from fields like Surname, Phone, Date Of Birth, Postal Code, OAuth Token, Location, Email, IP, Credit Card, Phone, and SSN, and Street.
Select Default Extension
Select the Default Extension Type Select All option. Users can select optional extension types html, json, yaml, yml, tex, xml, ts, sh, wpd, php, go, cpp, c, js, xlsm.
...
Once all required fields are selected, please click on Save to successfully save this PII Profile with a message as Saved Successfully.
Initiate PII Scan
Locate and select the profile for which you want to initiate the PII scan.
...
Clicking on the highlighted PII data will redirect you to the detailed view of the chosen PII data.
Dashboard
On the right Pane, click on the Dashboard icon to be redirected to the Dashboard section. This area provides an overview of relevant information and data. Once in the Dashboard section, you can proceed to the next step.
...