A user asked how to best sign ControlUp scripts - either through buying a code-signing certificate or using KB guidance. It was suggested that scripts be imported into the SBA using the import button, as they can be too big for copy/paste, and a GitHub link was shared for a script which could be used to sign PowerShell scripts using a code-signing certificate.
Read the entire article here...
Security Related Training & Support Archives
Security training and support-related archives from inside the ControlUp Community on Slack.
Accessing Service Desk with ControlUp Solve
A user asked about accessing the service desk with unique accounts - you can add them to Solve, though the security policy for the legacy console still applies. There is a feature to add ControlUp users from Solve, which can be found in the documentation at https://support.controlup.com/docs/add-controlup-users-from-solve.
Read the entire article here...
Read the entire article here...
Is it Possible to Have a ControlUp Monitor Server in a DMZ?
A user asked if it is possible to have a ControlUp monitor server in a DMZ while managing Citrix desktops not in the DMZ. Connectivity over port 40705 to the agent is possible, but DNS resolution and AD connections must also be in place for it to work.
Read the entire article here...
Read the entire article here...
Any extra Firewall rules required to allow use of session actions from ControlUp Solve?
When trying to use the actions from Solve, a user asked if anything needs to be enabled or if there are extra firewall rules required. The user confirmed that all other pages in Solve worked well, but the actions were failing. According to the ControlUp support page https://support.controlup.com/docs/solve-actions, the monitors need to be able to connect to solve.controlup.com over 443.
Read the entire article here...
Read the entire article here...
How to Configure the Firewall for ControlUp Remote DX and IGEL Devices
A user asked if port 40705 needed to be opened between monitors and IGEL devices for Remote DX. It was suggested that no firewall rules were necessary, and the user was given the steps to deploy the Remote DX plugin and configure the virtual channel in order to view Remote DX metrics. It was also suggested for the user to test on a laptop/PC. The user then asked for the cuepux_srv_dll which was not immediately found.
Read the entire article here...
Read the entire article here...
Trouble Adding Host to ControlUp Console
A user had trouble adding a host in the Console, receiving the error "The RPC server is unavailable". Suggestions included checking all necessary firewall ports were open and unchecking the 'Deploy agent automatically' setting in the agent settings, which solved the issue. It is advised that the latest version of .Net Framework (4.8) is installed to ensure compatibility. The latest On-prem version of ControlUp available is 8.7.0.24.
Read the entire article here...
Read the entire article here...
Any plans to upgrade ControlUp with Splunk to a version 9+?
The IOP team is looking at upgrading Splunk to a version 9+ after a customer's security scan revealed multiple vulnerabilities for versions below 9.x. In the meantime, exceptions have been put in place. IOP is a Splunk OEM product and cannot be incorporated into another Splunk solution, and multiple support requests have been sent as well. Ref #132898.
Read the entire article here...
Read the entire article here...
Troubleshooting ControlUp Solve / Edge Access for Help Desk Guys
A user had setup ControlUp Solve / Edge access for help desk guys, however they weren't seeing the same controls on their Edge machines as the user could. Checked permissions as a suggestion, the user found that the permissions were set under Edge DX. They only had the viewer role, which resolved the issue. Access can be found in Edge via Solve Configuration > Access Control, and Solve has manager & non-admin security policies.
Read the entire article here...
Read the entire article here...
Enabling Encrypted Communication for ControlUp Agents
A user asked how to enable encrypted communication for ControlUp Agents that were deployed without an authentication key; the solution is to apply a registry key to the machine and restart the Agent service, or configure the authentication key up front with a group policy.
Read the entire article here...
Read the entire article here...
Can ControlUp Insights display ICA proxy connections for my NetScaler Gateway?
The ControlUp console displays ICA proxy connections for NetScaler Gateways, but ControlUp Insights does not. Filtering session activity reports by initial client IP or using export-cuquery may provide the desired results. Details can be found on the ControlUp Support page: https://support.controlup.com/docs/monitor-cluster-powershell-fields-by-table#hdxsessions.
Read the entire article here...
Read the entire article here...