A user asked about using CU4C to remediate vulnerabilities on VDIs. It was suggested that both the CU4C and VDI Agents must be installed based on documentation, but this may change when ControlUp Agent ONE is released.
Read the entire article here...
ControlUp for Compliance (Secure DX)
ControlUp for Compliance (Secure DX) training and support-related archives from inside the ControlUp Community on Slack.
Understanding ControlUp’s App Catalog List
A user asked if there is a maintained list of apps that are covered under ControlUp's app catalog. The list is pulled from their back end database and it is best practice to include all apps at scoping. This information cannot be copied easily and there is not a public list available as it can change daily.
Read the entire article here...
Read the entire article here...
Creating a Device Matching Workflow in ControlUp
Multiple members had a discussion on how to create a workflow that would synchronize devices from an Entra ID dynamic group into ControlUp using tags. The matching issue is caused by Entra ID and ControlUp having different device identifiers. Various solutions were presented, such as using a custom query or the Split String node, and eventually a solution was found using the Get Custom Data node. Further details and a visual example can be seen in the discussion.
Read the entire article here...
Read the entire article here...
Understanding the API Rate Limit and Cooldown Period at ControlUp
A user asked about the cooldown period for the API rate limit and received information from a colleague stating that there is a limit of 60 requests per user per minute or 200 per minute for the entire organization, with the cooldown period showing up in the header of the API query for retry attempts. The user was unsure if this applied to compliance APIs as well and was reassured that the limit is consistent across all APIs.
Read the entire article here...
Read the entire article here...
Automating Installation of Compliance Agent on New Devices in ControlUp
Users discuss automatically installing compliance agent on new devices on ControlUp. There is currently no supported way of doing, but a new update will allow for this and controlling the version deployed. One user shares their workaround using a script. Other customers have done similar but it is not a supported method, however a new update will provide ability to push versions to specific tags or device groups.
Read the entire article here...
Read the entire article here...
Writing Events to System Events Log with Custom SecureDX Scripts in ControlUp
A user asked about writing events to the system events log using custom issue scan/remediation scripts in SecureDX. Another user confirmed that the same formatting used for normal scripts should work. However, it was noted that missing options in the CU4C scripts may prevent this from working.
Read the entire article here...
Read the entire article here...
Setting up ControlUp Compliance for macOS with JamfPro as the MDM
A discussion about setting up Compliance for macOS with JamfPro as the MDM was had, with a user mentioning that they were prompted for additional approvals despite having imported the configuration profile from ControlUp's site. Others suggested adding additional configurations to the Profile Policy and raised the question of whether the "Local Network" option can be added using the PPPC Utility. Discussion also took place about whether documentation could be improved for this service.
Read the entire article here...
Read the entire article here...
Security concerns regarding ControlUp for Compliance
A user encountered an issue where C:\Program Files\ControlUp\Cu4Compliance\cu4csvc.exe was being blocked by an ASR rule. They suggested that this be added to the documentation on the support site and a discussion about this update will happen internally. Two key locations for CU4C functionality are C:\Program Files\ControlUp\CU4C and C:\ProgramData\ControlUp\CU4C. To further address security concerns, a user is referred to a relevant Knowledge Base article.
Read the entire article here...
Read the entire article here...
Removing Uninstalled Apps from ControlUp Reports
ControlUp users discussed the lingering appearance of FortiClient on CU4C reports despite its removal from all devices. It was suggested to remove the software from the template scope in order for it to no longer appear in future reports. It was also advised to check for any leftover folders or files that may have caused the detection. To exclude it from scan reports, it should only be removed from the template.
Read the entire article here...
Read the entire article here...
Troubleshooting and Validating ControlUp’s Compliance API
A team member reported an error while using the new Compliance API and asked if it was a known issue. Another member suggested creating a new API key as a possible solution and confirmed that the API was working for them. The team explained how to use the API and shared a code for testing API key access. After rechecking, the team found and fixed the issue.
Read the entire article here...
Read the entire article here...