A user asked about enabling agent connectivity from Windows 10 operating systems that are not domain connected and have no open inbound ports - with the existence of an option to open outbound traffic. They also asked if the agent is capable of initiating communication once installed. The response was that starting from version 9, both EdgeDX and RealtimeDX agents can connect using an outbound SSL 443 connection, and domain membership is not a requirement.
Read the entire article here...
Certificates Related Training & Support Archives
Certificates training and support-related archives from inside the ControlUp Community on Slack.
ControlUp for Multiple Customers Without AD Trusts
A user is asking for help with setting up ControlUp for multiple customers without AD trusts. They have read an article about installing the ControlUP Monitor in the customer's domain and opening port 40706. The discussion includes clarification on DNS resolution and port 40706. The upcoming release of Real-Time DX v9 is mentioned as a solution for easier installation in the future, with the ability to deploy the Monitor in a DMZ and access it remotely. The user is advised to open a ticket for more instructions on assigning monitor templates. The discussion also mentions using extensions for vCenter, XenDesktop, Horizon, NetScalers, etc.
Read the entire article here...
Read the entire article here...
Efficient Deployment Strategies for ControlUp Users
Members of the ControlUp team discussed how to handle deployment scripts requiring an install file or certificate. Suggestions included using a shared location or a platform such as MS Intune/SCCM, although issues with Edge DX were noted. Another option would be to manually install through remote control, but automation is preferred. Some members have found success with using workarounds involving Google Drive and PowerShell scripts.
Read the entire article here...
Read the entire article here...
Troubleshooting Script Execution Issues on Windows Server 2022 with ControlUp
Users experienced scripts not executing on Windows Server 2022 but works on earlier servers. Possible problems were discussed, such as GPO settings, the account the script is running under, and if a signature was needed. It was suggested that a signed script may need to be imported, and if the issue persists to reach out to ControlUp support at support@controlup.com.
Read the entire article here...
Read the entire article here...
Restricting Access to the ControlUp DEX Portal
The user asked how to restrict access to the DEX portal - the solution provided is to use the SAML login and configure the service provider to only allow access from certain clients or IP addresses. This can be done with the Azure login option, and IP restrictions are on their way to DEX, estimated to be available in early Q1 2024.
Read the entire article here...
Read the entire article here...
Restricting Access to ControlUp DEX Portal
A discussion arose about restricting access to ControlUp's DEX portal, such as with a specific client certificate, IP address or Azure hybrid joined client machine. Using SAML could be a solution as the service provider can deny access if criteria are not met, and IP restrictions are said to be arriving in the early months of 2024. The DEX login method "azure login" does not have further possibilities, but SAML does.
Read the entire article here...
Read the entire article here...
Locked Out of ControlUp Solve Portal Despite Permissions
A user was locked out of their Solve and DEX portals due to a permissions issue. After being granted all necessary permissions, they still couldn't access Solve from the console. It was established that the user needed the "Use Solve" right in their security policy. The user then tried a few solutions, including the add-cuuser cmdlet (https://support.controlup.com/docs/add-cuuser-create-new-solve-users#), but still could not access the portal. A restart of the monitor did not help however, so the issue is still unresolved.
Read the entire article here...
Read the entire article here...
Authentication Options for ControlUp Integration with Azure
The user asked about setting up ControlUp integration with Azure and using Certificate Options for authentication. They confirmed that only key/secret authentication is supported at this time.
Read the entire article here...
Read the entire article here...
Implementing Multi-Tenancy for Managed Service Providers in ControlUp
A user asked who had successfully implemented multi-tenancy as a managed service provider in order to replace LogicMonitor. It was suggested to open bidirectional port 40706 between each tenant and the user's data center, and to set up certificate-based authentication. The user was advised to use 'MSP mode' and use the cert to see the parent organisation. Links to documentation were provided.
Read the entire article here...
Read the entire article here...
Avoiding Alert Floods with Multiple Conditions in ControlUp Scoutbees
Users asked if there was any way to avoid getting flooded with alerts when setting multiple conditions in Scoutbees - one suggestion is to have the scout run every hour and have it alert after a certain number of failed tests. Although this solution is not ideal, another suggestion was to have a user vote for the request on the roadmap and ask for an update. Further, another user suggested introducing Polly for Slack polls instead. The certificate alerts provided by ControlUp are also not ideal.
Read the entire article here...
Read the entire article here...