ControlUp Community

Connect, Learn, and Grow

Security Related Training & Support Archives

Security training and support-related archives from inside the ControlUp Community on Slack.

IGEL thin clients using port 44484 for trace routes in Edge DX

Posted on

According to the source code, Edge DX uses traceroute or tracepath to perform trace routes, depending on which one exists. For IGEL devices, only tracepath seems to be available. The port used is random, but usually starts at 44444 and adds a varying modifier based on the version. It is possible that IGEL or the underlying OS uses a static offset. On 12/31, the security team noticed traffic on port 44484 from our IGEL thin clients, which may be caused by additional Network Latency targets set in Edge DX settings. To confirm, they will disable the targets and monitor the traffic.

Read the entire article here...

Troubleshooting Device Location Updates in Edge DX

Posted on

A user reported that their device location does not always update in Edge DX, giving an example of their device showing work location after working from home for 18 hours. A suggestion was made to check if device's public IP is changing when switching locations and checking the status of location services on the device's OS. A link to documentation on device geolocation was also shared.

Read the entire article here...

Securing Laptops with ControlUp and other Options

Posted on

A discussion took place about different security options for laptops, specifically a method to prevent bootup in the event of theft. It was mentioned that ControlUp does not have this feature, but there is a user voice open for it. It was also suggested to use MDM or Intune for this purpose, but it was noted that a script will not run if the agent cannot communicate with the device. Some laptops have Absolute software built-in for this purpose. Another possible solution is using BitLocker with TPM+PIN, but it is important to ensure proper policies are in place for it to be effective. URL mentioned: www.absolute.com

Read the entire article here...

Understanding Remediation Availability in ControlUp

Posted on

A user asked about the availability of remediation for certain devices and wondered if it was due to updates from ControlUp. It was clarified that remediation will only be available if there is either a pre-made remediation in the ControlUp catalog or if a custom issue has been added to an out of box scan without a catalog remediation. The blog posts https://www.controlup.com/resources/blog/enhance-endpoint-security-with-custom-issues-and-os-patching/ and https://www.controlup.com/resources/blog/expand-endpoint-security-use-cases-with-secure-dx-custom-issues/ provide more information on custom issues and their benefits for endpoint security.

Read the entire article here...

Troubleshooting Monitor Deployment Issues in ControlUp with Trellix

Posted on

A user encountered issues with the deployment of monitors while using the Real-Time console, resulting in errors and failed services. Another user suggested the issues may be caused by Trellix, a common problem for page timeouts. The solution offered was to either increase the timeout or add the monitor service executable to exclusions. The issue is commonly seen with Trellix but can also affect other antivirus or security tools.

Read the entire article here...