A user experienced an issue with the "Analyze logon duration" script run as a triggered task, only seeing an error attachment instead of the full output they needed. Ton suggested removing the -ErrorAction SilentlyContinue part to see if this helps, and @member suggested it may be a permission issue. The automated script creates the same output, with priority given to stderr streams over stdout. Users should check the audit log and ensure the logging of events is enabled.
Read the entire article here...
Security Related Training & Support Archives
Security training and support-related archives from inside the ControlUp Community on Slack.
Options to Monitor Missing Services in ControlUp 8.8
A user asked for options to monitor whether a service is missing, and was suggested to use the new service triggers in ControlUp 8.8. This can be done by monitoring the service stop and not configured status, and including the checkmark for just discovered machines. The user faced difficulty with slower login times and broken communications with banking apps due to their security groups not following vendor AV recommendations.
Read the entire article here...
Read the entire article here...
Bypassing Group Policy for PowerShell Scripts
A user was trying to run a PowerShell script in a script action, but was having issues due to an execution policy blocking the script. The user wanted to know if it was possible to bypass the group policy, to which it was suggested this would be seen as a security vulnerability by Microsoft. A workaround of setting the execution policy on the current user was suggested and seemed to work.
Read the entire article here...
Read the entire article here...
How to add users to ControlUp Insights and Solve Access
A user asked how to add users to Insights - they needed to be added to the Security policy and then launch the RTC one-time to sign up. It is recommended to give the user the "Use Solve" right in the security policy, and if a SAML is used, then there is no need for the export/import process. To get the "Manage Solve" permissions, this is found in the "Perform organization-wide actions". The "Create Solve user automatically" option in the SAML settings is not available at the moment, with no estimated time of repair.
Read the entire article here...
Read the entire article here...
ControlUp and FIPS Compliance: Progress Towards Certification and Security Efforts
A user asked about FIPS compliance with ControlUp, and the response was that ControlUp is likely closer to FIPS compliant but not certified. This is due to the way the registry key in Windows works, requiring only certified modules. ControlUp's security can be seen on https://www.controlup.com/controlling-your-security/, with different components in the process of certifying for FIPS 140-2. IOP being a Linux appliance, and COP being a webservice, the explanation does not directly apply to them.
Read the entire article here...
Read the entire article here...
How can ControlUp Edge DX prompt users to confirm disconnects or logoffs in Citrix sessions to avoid hung VMs?
Hello. We are seeing lots of issues with users getting disconnected from sessions, and then not being able to reconnect to the VDI environment due to hu...
Read the entire article here...
Read the entire article here...
Why is ControlUp ignoring an impending Netscaler SSL certificate expiration linked to an lbvserver?
A user asked why their expiry alert was not alerting for a NetScaler SSL cert. The solution was that the expiry monitor was not enabled. A recommendation was made to look at ControlUp Trigger Packs, which can be found at https://support.controlup.com/docs/trigger-packs?highlight=trigger.
Read the entire article here...
Read the entire article here...
Can the ControlUp Solve web console connect to a machine with a pre-installed agent, or is the legacy console necessary?
A user asked if the Solve web console will allow users to add new machines with an already-installed ControlUp agent, which would replace the current "Add Computers" configuration step. It was mentioned that a new version of ControlUp will have changes to the agent deployment process that will make this step less relevant. As an alternative, the support page https://support.controlup.com/docs/euc-synchronization-with-universal-sync-script provides a PowerShell script to sync Virtual Machines, though this is subject to customers' security concerns.
Read the entire article here...
Read the entire article here...
Seeking Resource for Appneta vs. Edge DX Comparison: Help Needed for Evaluating in My Environment?
When looking to compare network monitoring and performance management solutions AppNeta and ControlUp Edge DX, there are some key differences to consider. AppNeta focuses on network performance monitoring, while ControlUp Edge DX monitors endpoint devices. Additionally, AppNeta uses active probing technology while ControlUp Edge DX uses agent-based technology. ControlUp Edge DX provides additional features for endpoint management including patch management, remote access, and security. Also, the ControlUp team can provide assistance with the initial implementation and configuration for a trial period.
Read the entire article here...
Read the entire article here...
Can I Use a Wildcard for the Citrix Virtual Channel Allow List in ControlUp Agent?
The user asked if wildcard can be used for Citrix Virtual Channel Allow List. It was confirmed that wildcards are supported from VDA 2206, and they can be read about in the Citrix documentation article and ControlUp support article. The hashtag (#) is not a wildcard character and the version number has to be entered.
Read the entire article here...
Read the entire article here...