ControlUp users discuss deploying the ControlUp Mac agent through Jamf and possible errors with tenant and code. Troubleshooting advice is given, including recommended locations for script and potential issues with SSL inspection on network. One user also mentions having a script for installing the Mac agent through Intune.
Read the entire article here...
Security Related Training & Support Archives
Security training and support-related archives from inside the ControlUp Community on Slack.
Troubleshooting CU V8.8 to V9.0 Upgrade Issues
A user is having trouble upgrading from CU V8.8 to V9.0 and requests support. Another user suggests trying to run the console on the monitor itself, which ends up working. There were no firewalls between the servers.
Read the entire article here...
Read the entire article here...
Using Zscaler with ControlUp
A user asked for experience with customers using Zscaler with ControlUP. It was mentioned that a fix for websockets connections may be necessary, and there is a KB article for issues with ISP name lookup. It was suggested to clarify which Zscaler solution is being used, as some features may require additional allowlisting for scripts to run. A ControlUP support document for displaying real IP addresses using Zscaler VPN was shared.
Read the entire article here...
Read the entire article here...
Troubleshooting Triggers for ControlUp Monitors
There is a trigger set to run on Monitors and the user encountered an error while it's running. One suggestion was to check the security context and make sure the relevant account is logged off from the server where the monitor is installed. Logging off the account logged into the server resolved the issue.
Read the entire article here...
Read the entire article here...
Understanding the “Failed to create PAT” Error Message for Outbound Communications in ControlUp
Users discuss the "Failed to create PAT" error message, with some providing background information that the PAT is a unique JWT for each agent machine and serves as a security mechanism to authenticate agents against monitors. Some users suggest discussing this further in private before summarizing in the thread.
Read the entire article here...
Read the entire article here...
Understanding SecureDX Issues and Managing Security Control Scans
A user noticed that the SecureDX Issues page has been updated to include new apps, including Carbon Black. However, the page shows that Carbon Black is unavailable and the user is unsure how to edit the apps or why they are not being detected. Others chimed in to explain that security controls can be checked through scans or device inventory, and the unavailable status means there is no built-in remediation for the app. It was suggested to disable the unnecessary controls in the template to avoid confusion. The issue was resolved and the user was able to scan for just Carbon Black.
Read the entire article here...
Read the entire article here...
Troubleshooting DUO TOTP Setup with ControlUp
A user is seeking assistance with setting up a TOTP code for DUO. ControlUp's instructions do not provide guidance on the process or supported MFA brands, so support from ControlUp may be needed. Another user suggests contacting support for a mobile number for authentication. ControlUp support refers to an article for further guidance. It is clarified that DUO does not support TOTP natively and a third-party utility may be needed.
Read the entire article here...
Read the entire article here...
Troubleshooting Outbound Issues with ControlUp 9.0 Upgrade
A user experienced issues with upgraded servers that were reporting to the wrong site. They received helpful information and links on how to fix this issue. Additionally, a related question was asked about updating template machines and their effect on new deployments. They were informed that the outbound change would need to be made on new deployments.
Read the entire article here...
Read the entire article here...
Troubleshooting ControlUp Error Message
The team discussed an error message that was appearing when trying to access ControlUp. It was suggested to check the URLs needed to access the service, SSL inspection, and network communication. Some URLs required for v9 may need to be whitelisted. A tool was released to test network connectivity to ControlUp cloud services. The URLs and relevant validation results can be found at https://support.controlup.com/docs/how-to-check-network-connectivity-to-controlup-cloud-services?highlight=netwrok%20test%20tool.
Read the entire article here...
Read the entire article here...
Understanding the Device Controls Column and Troubleshooting Carbon Black with ControlUp
A user asked what the Device>Controls column does, and others suggested it shows installed but disabled antivirus and deployment products. The user was unsure if Secure DX was accurately displaying the status of Carbon Black. Other users suggested checking services and data being pulled from the device, and to contact support if necessary. Screenshots were shared.
Read the entire article here...
Read the entire article here...