A customer asked for information about an issue they were having with ControlUp Admin permissions. It was suggested to double check the user's permissions and group membership in the Security Roles tab, and to ensure they are part of the CU Admins group. Another solution mentioned was to add the user to the "ControlUp Admins" role, although there was some uncertainty about the level of permissions this may grant. The customer thanked everyone for their help.
Read the entire article here...
Security Related Training & Support Archives
Security training and support-related archives from inside the ControlUp Community on Slack.
Troubleshooting Deployment of ControlUp Mac Agent through Jamf
ControlUp users discuss deploying the ControlUp Mac agent through Jamf and possible errors with tenant and code. Troubleshooting advice is given, including recommended locations for script and potential issues with SSL inspection on network. One user also mentions having a script for installing the Mac agent through Intune.
Read the entire article here...
Read the entire article here...
Troubleshooting CU V8.8 to V9.0 Upgrade Issues
A user is having trouble upgrading from CU V8.8 to V9.0 and requests support. Another user suggests trying to run the console on the monitor itself, which ends up working. There were no firewalls between the servers.
Read the entire article here...
Read the entire article here...
Using Zscaler with ControlUp
A user asked for experience with customers using Zscaler with ControlUP. It was mentioned that a fix for websockets connections may be necessary, and there is a KB article for issues with ISP name lookup. It was suggested to clarify which Zscaler solution is being used, as some features may require additional allowlisting for scripts to run. A ControlUP support document for displaying real IP addresses using Zscaler VPN was shared.
Read the entire article here...
Read the entire article here...
Troubleshooting Triggers for ControlUp Monitors
There is a trigger set to run on Monitors and the user encountered an error while it's running. One suggestion was to check the security context and make sure the relevant account is logged off from the server where the monitor is installed. Logging off the account logged into the server resolved the issue.
Read the entire article here...
Read the entire article here...
Understanding the “Failed to create PAT” Error Message for Outbound Communications in ControlUp
Users discuss the "Failed to create PAT" error message, with some providing background information that the PAT is a unique JWT for each agent machine and serves as a security mechanism to authenticate agents against monitors. Some users suggest discussing this further in private before summarizing in the thread.
Read the entire article here...
Read the entire article here...
Understanding SecureDX Issues and Managing Security Control Scans
A user noticed that the SecureDX Issues page has been updated to include new apps, including Carbon Black. However, the page shows that Carbon Black is unavailable and the user is unsure how to edit the apps or why they are not being detected. Others chimed in to explain that security controls can be checked through scans or device inventory, and the unavailable status means there is no built-in remediation for the app. It was suggested to disable the unnecessary controls in the template to avoid confusion. The issue was resolved and the user was able to scan for just Carbon Black.
Read the entire article here...
Read the entire article here...
Troubleshooting DUO TOTP Setup with ControlUp
A user is seeking assistance with setting up a TOTP code for DUO. ControlUp's instructions do not provide guidance on the process or supported MFA brands, so support from ControlUp may be needed. Another user suggests contacting support for a mobile number for authentication. ControlUp support refers to an article for further guidance. It is clarified that DUO does not support TOTP natively and a third-party utility may be needed.
Read the entire article here...
Read the entire article here...
Troubleshooting Outbound Issues with ControlUp 9.0 Upgrade
A user experienced issues with upgraded servers that were reporting to the wrong site. They received helpful information and links on how to fix this issue. Additionally, a related question was asked about updating template machines and their effect on new deployments. They were informed that the outbound change would need to be made on new deployments.
Read the entire article here...
Read the entire article here...
Troubleshooting ControlUp Error Message
The team discussed an error message that was appearing when trying to access ControlUp. It was suggested to check the URLs needed to access the service, SSL inspection, and network communication. Some URLs required for v9 may need to be whitelisted. A tool was released to test network connectivity to ControlUp cloud services. The URLs and relevant validation results can be found at https://support.controlup.com/docs/how-to-check-network-connectivity-to-controlup-cloud-services?highlight=netwrok%20test%20tool.
Read the entire article here...
Read the entire article here...