A member shared a link regarding Docker runc container breakout vulnerabilities and asked if there are any plans to address this for IOP and SOP. The latest versions of SOP and IOP are affected. The member will inform the security department and provide updates.
Read the entire article here...
Security Related Training & Support Archives
Security training and support-related archives from inside the ControlUp Community on Slack.
Addressing a Tenable Finding for ControlUp Agent Manager Service at ControlUp
A Tenable finding involving the ControlUp Agent Manager Service was discussed. A new agent manager was built and tested in order to address the issue. A link to the new agent manager was provided, and one member offered to test it out. A user also asked if the permission change was necessary, and the new version of the agent manager showed that the issue was fixed. The agent manager was eventually to be deployed within 24 hours. The Tenable finding was requested to be rerun to confirm if it was resolved.
Read the entire article here...
Read the entire article here...
Implementing SSO Groups in ControlUp
A user asked about implementing SSO groups from the dex platform into ControlUp. Documentation on using SSO groups for user roles was shared, along with a suggestion to check assertion data. It was confirmed that the VDI is enforcing the security policy set in the RTDX Console.
Read the entire article here...
Read the entire article here...
Troubleshooting Script Execution Issues in ControlUp Agents
There were reported issues with script execution on ControlUp Agents within an organization. Errors were received when executing specific scripts, but not when using the Realtime Console. The problem may be with ControlUp monitor servers. For now, a workaround is to stop the affected monitors, delete the ControlUp Store.xml file, and restart the monitor. This is a known issue and will be addressed in a future release. The issue is documented as VSO 155910 and 158919.
Read the entire article here...
Read the entire article here...
Understanding Edge DX Agent’s Location Data Accuracy and Privacy Concerns for ControlUp Users
Location data from Edge DX agent seems to be inconsistent, with devices reporting in different locations than their physical location. It was suggested that the agent uses the WAN IP, provided by the ISP, which can be inaccurate. Some users suggest enabling location services on the endpoint for more accurate data. However, there may be privacy concerns with this feature. ControlUp's support site provides information on how to customize locations based on IP ranges.
Read the entire article here...
Read the entire article here...
ControlUp Community Radio #6 – Day 1 with Simon Townsend, ControlUp Field CTO
Join us in this exciting episode of ControlUp Community Radio, where our host, Douglas Brown, talks with Simon Townsend, the newly appointed Field CTO of ControlUp.
Read the entire article here...
Read the entire article here...
Accessing “Access Control” in ControlUp Edge DX
An admin asked how to give themselves access to the "Access Control" under Configuration in Edge DX. Access permissions have been moved to the URL app.controlup.com. A screenshot was provided.
Read the entire article here...
Read the entire article here...
Finding User Roles and Permissions Settings in ControlUp Solve and DEX
A user was looking for user roles and permissions settings that they had set in Solve or DEX. It was pointed out that it is the "Use Solve" permission in the security policy that controls this. If using DEX, it can be accessed from the gear on the bottom left in app.controlup.com, under roles. The user found the settings successfully.
Read the entire article here...
Read the entire article here...
Troubleshooting ControlUp Edge DX Error on Ubuntu Device
A forum member asked about an error with a ControlUp Edge DX service running on Ubuntu. They checked the siplog.log, which showed a normal log from 2023, and determined that the service was running but something else was causing it to shut down when the user attempted a remote shell. The issue seemed to be caused by a typo when restarting the service, and the user suggested creating a support ticket and reinstalling the service. URL: cuacademy.controlup.com
Read the entire article here...
Read the entire article here...
Creating Reports on Device Network Connections with ControlUp Edge DX
A user asked if it is possible to create a report based on the last time a device connected to the company's network using EdgeDX. EdgeDX provides the 'netcfg_info' and 'location_history' indexes with information on the public IP and network adapter IP associated at that time. Alternatively, a script can be used to send data to a custom index when an internal IP address is reachable.
Read the entire article here...
Read the entire article here...