Search documentation

…se The Microsoft 365 / Entra ID integration is the primary identity evidence source in AssurIQ. It powers privileged account inventory, MFA coverage, conditional access posture,…

…roup membership and legacy protocol exposure alongside cloud identity evidence. Requirements A domain-joined Windows host or the AssurIQ collector reachable to a domain control…

…ling to collect firewall policy, VPN, firmware and interface exposure evidence — the same data source behind the KEV SSL-VPN attack-surface storyline. Requirements FortiOS 7.x…

…le to collect firewall policy, threat prevention, App-ID and firmware evidence, including Panorama-managed estates. Requirements PAN-OS 10.x+ (firewall or Panorama) with API ac…

…REST API package or SNMP, supporting exposure and configuration-drift evidence for small and mid-size sites. Requirements pfSense 2.6+ or pfSense Plus with the REST API package…

…er Integrations. Confirm collection Verify firmware, license and rule evidence populate on the next cycle. Verification Device appears in Attack Surface with current firmware v…

…AWS Config or Security Hub enabled, optionally, for richer compliance evidence Permissions A managed policy equivalent to ReadOnlyAccess, or a scoped policy covering ec2:Descri…

…ce connector collects user, group, 2-Step Verification and admin role evidence for organizations using Google as their identity provider, feeding the same identity controls as Micr…

…its can delay large-organization syncs; this is expected and resolves automatically. Disconnect Remove the organization from AssurIQ Integrations. Revoke or delete the API key…

…aged access points to collect VLAN, wireless client and configuration evidence using SNMPv3 or the Aruba Central API. Requirements For on-prem: SNMPv3 enabled on AOS-CX/AOS-Swi…

…icy. Tokens are issued via OAuth 2.0 client credentials and refreshed automatically. Common errors Code Title Fix AIQ-INT-MS-003 Microsoft permission missing Grant admin consen…

…pes Falcon Spotlight (vulnerability) module licensed if vulnerability evidence is required Permissions Hosts: Read — device inventory and sensor health Detections: Read — endpo…

…alth and configuration Read access to Threats/Incidents for detection evidence Read access to Application Inventory, where the module is licensed Setup Create a service user In…

…ed and vulnerability scanner may sample at different times; the newer evidence wins. Disconnect Disconnect the RMM platform from AssurIQ Integrations. Revoke or delete the API…

…y or Azure Monitor read access for configuration and patch compliance evidence, where used Permissions Reader role at subscription or management group scope — read all resource…

Purpose The UniFi connector reads controller (UniFi Network Application or UniFi OS Console) inventory, client, VLAN and firmware state so AssurIQ can assess…

Purpose This integration collects running configuration, interface, VLAN and CDP neighbor data from Cisco IOS and IOS-XE switches and routers using SNMPv3 for…

Purpose PSA connectors synchronize AssurIQ findings and remediation items into your ticketing system as tickets, and read back ticket status so remediation SL…