Search documentation

…image runs the same collector binary as the native packages. Use host networking so the container can see local broadcast, ARP and multicast discovery traffic; bridge networking hi…

Overview Run the collector as a container with host networking. Documentation status This article is a concise reference. A fully expanded guide for “Docker Col…

…ngle collector, placed correctly, can see and assess an entire routed network segment. The question that matters is not "how many endpoints" but "how many distinct security boundar…

…nly, it can be placed behind NAT, on a private RFC1918 range, or on a network with no public IP without any special configuration. Required endpoints Purpose Direction Port Not…

…nvironment variables docker run -d \ --name assuriq-collector \ --network host \ --restart unless-stopped \ -e HTTPS_PROXY="http://proxy.internal:3128" \ -e ASSURIQ_ENROL…

…inary that runs unattended on customer infrastructure with no inbound network exposure. Its architecture prioritizes a minimal attack surface, predictable resource use, and a clean…

What Collector 0.2.0-dev emits interfaces — ifIndex, name, description, MAC, type, MTU, speed, admin/operational status, PVID vlans — VLAN id and name per dev…

…ax concurrency Caps simultaneous probes to avoid overwhelming fragile network gear Maintenance windows Restricts credentialed or intrusive scan types to approved time windows Crede…

…under /api/public/v1/collectors so a collector on an unauthenticated network path can still reach the control plane. Endpoint Mirror Purpose POST /api/v1/collectors/enroll /api/…

…etries harmless. Collected today: host identity, open services from network scan, interfaces/VLANs/neighbors/routes. Not yet collected: services, installed software, persistence,…

…irm the host is powered on, not suspended, and reachable on the local network. Check the collector service status locally (see commands below). Confirm outbound connectivity from t…

…tbeat received for more than 5 minutes Host down, service stopped, or network/egress path broken Enrollment Pending Installed but has not completed its first successful enrollment…

…tale credential causes authenticated checks to fail without affecting network-level discovery. Remove credentials for decommissioned service accounts promptly. Auditability Eve…

…Retry the update check; a single corrupted download from a transient network issue will usually succeed on retry. AIQ-UPD-002 — Blocked by maintenance window The update is ava…