The user was trying to add scouts using the API but encountered an error message. Dennis suggested adding the TLS setting `$AllProtocols = [System.Net.SecurityProtocolType]'Ssl3,Tls,Tls11,Tls12'[System.Net.ServicePointManager]::SecurityProtocol = $AllProtocols` which resolved the issue.
Read the entire article here...
Security Related Training & Support Archives
Security training and support-related archives from inside the ControlUp Community on Slack.
Issues Setting Up ControlUp with Split Accounts
A user was setting up ControlUp with split accounts and was facing issues when connecting with the console. It appeared that the impersonation activity was using the wrong account, causing access denials. Support explored the issue but couldn't find a rootcause. It turned out changing the account for a specific application pool in IIS to the SVC_CU_DB account fixed the issue, suggesting it was an installer problem. An event log in security was making logon failures with a STATUS_WRONG_PASSWORD code.
Read the entire article here...
Read the entire article here...
Troubleshooting Access to ControlUp Portal – can access ControlUp Console but not Solve
A user was facing issues while trying to access https://solve.controlup.com/ portal, and was advised to make sure the account has the right permissions in the security policy and to add organization members that right if necessary. The user was then guided to add the org name to the URL, then save the settings, after which the user was able to log in.
Read the entire article here...
Read the entire article here...
How to Troubleshoot ‘Request Timed Out’ Error When Implementing ControlUp’s High Latency Analysis Script
A user asked for help with a script found at https://www.controlup.com/script-library-posts/analyze-high-latency-issues/, which was running the full 5 minutes before timing out. A member suggested to change the endpoint IP to the public one if the client is on the same network or at least pingable, but noted that most home firewalls will not allow ping so it will likely time out.
Read the entire article here...
Read the entire article here...
How to Select Storage Region and Understand Security in ControlUP (Cloud)?
A user asked about setting up ControlUp Cloud - the default regional location depends on the user's location and can either be the US or EU. Historical data loss will occur if migration to a different region is requested. The region specific locations are US-East-1 (N. Virginia) and EU-central-1 (Frankfurt). There might also be some customers on eu-west-1 (Ireland). Any client identifiable information should be discussed with the sales team.
Read the entire article here...
Read the entire article here...
Help Needed with ‘Analyze Logon Duration’ Script: Auto-Action Issue and Incomplete Output
A user experienced an issue with the "Analyze logon duration" script run as a triggered task, only seeing an error attachment instead of the full output they needed. Ton suggested removing the -ErrorAction SilentlyContinue part to see if this helps, and @member suggested it may be a permission issue. The automated script creates the same output, with priority given to stderr streams over stdout. Users should check the audit log and ensure the logging of events is enabled.
Read the entire article here...
Read the entire article here...
Options to Monitor Missing Services in ControlUp 8.8
A user asked for options to monitor whether a service is missing, and was suggested to use the new service triggers in ControlUp 8.8. This can be done by monitoring the service stop and not configured status, and including the checkmark for just discovered machines. The user faced difficulty with slower login times and broken communications with banking apps due to their security groups not following vendor AV recommendations.
Read the entire article here...
Read the entire article here...
Bypassing Group Policy for PowerShell Scripts
A user was trying to run a PowerShell script in a script action, but was having issues due to an execution policy blocking the script. The user wanted to know if it was possible to bypass the group policy, to which it was suggested this would be seen as a security vulnerability by Microsoft. A workaround of setting the execution policy on the current user was suggested and seemed to work.
Read the entire article here...
Read the entire article here...
How to add users to ControlUp Insights and Solve Access
A user asked how to add users to Insights - they needed to be added to the Security policy and then launch the RTC one-time to sign up. It is recommended to give the user the "Use Solve" right in the security policy, and if a SAML is used, then there is no need for the export/import process. To get the "Manage Solve" permissions, this is found in the "Perform organization-wide actions". The "Create Solve user automatically" option in the SAML settings is not available at the moment, with no estimated time of repair.
Read the entire article here...
Read the entire article here...
ControlUp and FIPS Compliance: Progress Towards Certification and Security Efforts
A user asked about FIPS compliance with ControlUp, and the response was that ControlUp is likely closer to FIPS compliant but not certified. This is due to the way the registry key in Windows works, requiring only certified modules. ControlUp's security can be seen on https://www.controlup.com/controlling-your-security/, with different components in the process of certifying for FIPS 140-2. IOP being a Linux appliance, and COP being a webservice, the explanation does not directly apply to them.
Read the entire article here...
Read the entire article here...