A user asked for experience with customers using Zscaler with ControlUP. It was mentioned that a fix for websockets connections may be necessary, and there is a KB article for issues with ISP name lookup. It was suggested to clarify which Zscaler solution is being used, as some features may require additional allowlisting for scripts to run. A ControlUP support document for displaying real IP addresses using Zscaler VPN was shared.
Read the entire article here...
Security Related Training & Support Archives
Security training and support-related archives from inside the ControlUp Community on Slack.
Troubleshooting Triggers for ControlUp Monitors
There is a trigger set to run on Monitors and the user encountered an error while it's running. One suggestion was to check the security context and make sure the relevant account is logged off from the server where the monitor is installed. Logging off the account logged into the server resolved the issue.
Read the entire article here...
Read the entire article here...
Understanding the “Failed to create PAT” Error Message for Outbound Communications in ControlUp
Users discuss the "Failed to create PAT" error message, with some providing background information that the PAT is a unique JWT for each agent machine and serves as a security mechanism to authenticate agents against monitors. Some users suggest discussing this further in private before summarizing in the thread.
Read the entire article here...
Read the entire article here...
Understanding SecureDX Issues and Managing Security Control Scans
A user noticed that the SecureDX Issues page has been updated to include new apps, including Carbon Black. However, the page shows that Carbon Black is unavailable and the user is unsure how to edit the apps or why they are not being detected. Others chimed in to explain that security controls can be checked through scans or device inventory, and the unavailable status means there is no built-in remediation for the app. It was suggested to disable the unnecessary controls in the template to avoid confusion. The issue was resolved and the user was able to scan for just Carbon Black.
Read the entire article here...
Read the entire article here...
Troubleshooting DUO TOTP Setup with ControlUp
A user is seeking assistance with setting up a TOTP code for DUO. ControlUp's instructions do not provide guidance on the process or supported MFA brands, so support from ControlUp may be needed. Another user suggests contacting support for a mobile number for authentication. ControlUp support refers to an article for further guidance. It is clarified that DUO does not support TOTP natively and a third-party utility may be needed.
Read the entire article here...
Read the entire article here...
Troubleshooting Outbound Issues with ControlUp 9.0 Upgrade
A user experienced issues with upgraded servers that were reporting to the wrong site. They received helpful information and links on how to fix this issue. Additionally, a related question was asked about updating template machines and their effect on new deployments. They were informed that the outbound change would need to be made on new deployments.
Read the entire article here...
Read the entire article here...
Troubleshooting ControlUp Error Message
The team discussed an error message that was appearing when trying to access ControlUp. It was suggested to check the URLs needed to access the service, SSL inspection, and network communication. Some URLs required for v9 may need to be whitelisted. A tool was released to test network connectivity to ControlUp cloud services. The URLs and relevant validation results can be found at https://support.controlup.com/docs/how-to-check-network-connectivity-to-controlup-cloud-services?highlight=netwrok%20test%20tool.
Read the entire article here...
Read the entire article here...
Understanding the Device Controls Column and Troubleshooting Carbon Black with ControlUp
A user asked what the Device>Controls column does, and others suggested it shows installed but disabled antivirus and deployment products. The user was unsure if Secure DX was accurately displaying the status of Carbon Black. Other users suggested checking services and data being pulled from the device, and to contact support if necessary. Screenshots were shared.
Read the entire article here...
Read the entire article here...
How to Troubleshoot Connection Issues with ControlUp for Physical Endpoints
There is a potential issue with connecting to a Windows device with Edge DX installed. It was suggested to check the event viewer and device events, and to allow the traffic on the proxy/firewall. The agent's outbound tunnel may also facilitate inbound requests, but if the websocket connection fails, a different method will be used. The documentation for this can be found at https://support.controlup.com/v1/docs/prerequisites-for-controlup-for-physical-endpoints-apps, and logs may also appear in the device events in Edge DX itself.
Read the entire article here...
Read the entire article here...
ControlUp Academy’s Open Office Hours – What’s New and What’s Next?
ControlUp Academy creates new Open Office Hours sessions based on hot topics seen within the community. Topics discussed in the past include trigger and security policy best practices, as well as migration to DEX. Suggestions for future sessions were also asked for, including a deep dive on "Analyze Logon Duration", useful script actions, presets, custom dashboards, and more. Academy link: must be entered manually.
Read the entire article here...
Read the entire article here...