A user asked if anyone had set up an EUC scout to log in to Horizon view with Duo MFA. Control Up support have an open case on this, and @member has more information. ICMP is sometimes dropped/blocked by routers/firewalls so TCP is a better approach so real latency and QoS (high priority) traffic values can be measured. The port also needs to be listening.
Read the entire article here...
Security Related Training & Support Archives
Security training and support-related archives from inside the ControlUp Community on Slack.
Getting Started with Securely Exporting ControlUp Metrics
A user asked if a ControlUp Solve dashboard can be published externally without authentication; it's not possible for security reasons. Alternatives include exporting metrics with PowerShell and HTML and using the Power Platform, or leveraging ControlUp DEX with its username/password authentication. More information on ControlUp DEX can be found at https://support.controlup.com/docs/get-started-with-the-new-dex-platform.
Read the entire article here...
Read the entire article here...
Troubleshooting Error When Deploying ControlUp Agent in Dev Environment
A user was experiencing an error while trying to deploy ControlUp Agent in a Dev environment locally, even after uninstall, reboot, and trying from the RTC. It was suggested to stop the agent service before doing the upgrade of the agent and it was determined that due to either routing or firewall issues, the copying files part was hanging. It was then determined that WMI/RPC ports need to be opened to properly push the ControlUp Agent.
Read the entire article here...
Read the entire article here...
Understanding Data Transmitted by ControlUp Agent
A user asked for documentation and other information about the data the ControlUp Agent sends to the cloud service -- sales or CSM contacts can help with this question, and GDPR/security documents can address customer security concerns. Edge DX is cloud-only, and relevant data can be found in the data indexes when the internal indices tickbox is enabled. Link to Security Architecture: https://support.controlup.com/docs/security-architecture.
Read the entire article here...
Read the entire article here...
Managing Access Control in ControlUp EdgeDX
A user enquired about whether Access Control was removed from EdgeDX. It was suggested the user compare access in Edge and app.controlup.com. It was advised the user should look for the toggle in the upper right corner in Edge, and if it wasn't present then they didn't have the permissions to make role changes. A screenshot was provided to illustrate the toggle.
Read the entire article here...
Read the entire article here...
Issue with Two Netscalers Resolved with Shared Credentials with the ControlUp DEX Portal
A user experiencing issues with their two Netscalers asked for help. They were advised to check their monitor settings, data sources tab, credentials, and run a test-netconnection. The user detected a firewall issue, used the shared credentials and saw data in the web portal. They then asked help with their email trigger when the primary/secondary flip not working.
Read the entire article here...
Read the entire article here...
Feature Parity Matrix and FedRamp Certification for ControlUp
A user asked ControlUp about FedRamp certification, and if there was a feature parity matrix between the on-prem release and SaaS. They were informed that ControlUp is not FedRamp certified but is in the process of obtaining this certification, and a feature matrix is available at https://support.controlup.com/docs/controlup-modes. Additionally, edge dx and Scoutbees require the cloud and when in the Government space, Hybrid mode is not available.
Read the entire article here...
Read the entire article here...
Tools to Make ControlUp Easier to Use
Three ControlUp articles were shared: Edge DX Prerequisites, a Fix for devices with ZScaler VPN not showing their real IP address in Edge DX, and a script/scheduled trigger to sync ControlUp accounts with an AD group. These tools can help make ControlUp easier to use. The articles can be found at https://support.controlup.com/docs/.
Read the entire article here...
Read the entire article here...
Sending MSFT Teams Messages with ControlUp Realtime DX’s Rest Action
A user asked for examples of using Realtime DX's Rest action to send messages to MSFT Teams via the Graph API. It was suggested to follow ControlUp guidelines (https://support.controlup.com/docs/using-webhooks-as-follow-up-action) and use webhooks and Adaptive Cards for Teams. Sample powershell code was provided along with the permissions typically needed (Chat.ReadWrite or ChannelMessage.Send).
Read the entire article here...
Read the entire article here...
Restricting Access to ControlUp DEX Portal
A discussion arose about restricting access to ControlUp's DEX portal, such as with a specific client certificate, IP address or Azure hybrid joined client machine. Using SAML could be a solution as the service provider can deny access if criteria are not met, and IP restrictions are said to be arriving in the early months of 2024. The DEX login method "azure login" does not have further possibilities, but SAML does.
Read the entire article here...
Read the entire article here...