Search documentation

…s This article is a concise reference. A fully expanded guide for “VM Appliance” is scheduled in the documentation roadmap; the steps below are accurate for the current product ver…

Overview The AssurIQ Endpoint Agent is an architecture, not a rebrand: the collector you deploy today is its first form. The agent is modelled as seven capabi…

…le coverage Phase C ARM64 packages for Windows and Linux; hardened VM appliance Phase D Broader fleet-management tooling: staged rollout rings, richer health telemetry, and deeper…

…r hosts, host networking required Container runtime restart policy VM appliance (OVA) Sites with spare hypervisor capacity and no suitable host Hardened Linux VM, self-supervised…

…o the core of the segment it will assess: a server, a small always-on appliance, or a dedicated VM. Avoid laptops or workstations that sleep, roam between networks, or are reimaged…

Overview A collector uses two separate kinds of trust: its own identity with the AssurIQ control plane (the collector credential issued at enrollment), and an…

Overview The Linux package installs the collector as a systemd unit that starts on boot and restarts automatically if it exits unexpectedly. Linux ARM64 is…

Overview The Docker image runs the same collector binary as the native packages. Use host networking so the container can see local broadcast, ARP and multica…

Overview Retiring a collector is two separate actions: removing the software from the host, and revoking its credential in AssurIQ. Doing only the first leave…

Overview The v0.1 collector talks to three POST, JSON, snake_case endpoints under /api/v1/collectors. On deployments where the main site is access-restricted,…

…ing Docker/container image (roadmap) ARM64 packages and a hardened VM/appliance form factor (roadmap) Discovery method is always tcp_connect and scan scopes are always discovery…

Overview Install and operate the Windows collector service. Documentation status This article is a concise reference. A fully expanded guide for “Windows Co…

Overview Install the Linux collector as a systemd service on Ubuntu, Debian or RHEL. Documentation status This article is a concise reference. A fully expan…

Overview Run the collector as a container with host networking. Documentation status This article is a concise reference. A fully expanded guide for “Docker…

Symptoms AssurIQ raises AIQ-COL-001 when a collector has missed its expected heartbeat interval. The site's Collectors panel shows a red status dot, the last-…

Overview The Windows package installs the AssurIQ collector as a native Windows service, supervised by the Service Control Manager and configured to start aut…

What Collector 0.2.0-dev emits interfaces — ifIndex, name, description, MAC, type, MTU, speed, admin/operational status, PVID vlans — VLAN id and name per dev…

Overview Each collector reports a heartbeat every 60 seconds. The control plane derives a single health state from the heartbeat history, reported metrics, cr…

What it is AssurIQ Documentation is a per-customer workspace of structured records (organization, sites, contacts, network, firewalls, VLANs, servers, cloud t…

Overview Auto-upgrade rings and manual upgrade steps. Documentation status This article is a concise reference. A fully expanded guide for “Upgrade Collecto…

Overview AIQ-COL-001 — quick checks and escalation path. Documentation status This article is a concise reference. A fully expanded guide for “Collector Off…

Overview The AssurIQ collector is an outbound-only agent. It initiates every connection to the AssurIQ control plane over HTTPS/mTLS on port 443; the control…

Overview Where a site enforces all outbound traffic through a proxy, configure the collector to use it explicitly. Because the collector runs as a system serv…

Overview A collector never scans or probes a target that is not explicitly in scope. Scope is defined as a set of CIDR ranges, explicit exclusions, and hard-b…

Overview Collectors check in with an update channel periodically and, when a new release is available and the current time is inside an allowed window, downlo…

…reads firmware, security service and firewall rule state from SonicOS appliances to assess management exposure and patch currency for gateway devices. Requirements SonicOS 7.x…

…firewall rule, interface and package state from pfSense/pfSense Plus appliances using the pfSense REST API package or SNMP, supporting exposure and configuration-drift evidence fo…

Overview Platform, partner, customer, site and asset hierarchy; collectors, connectors, the evidence store and tenant isolation. Documentation status This a…

Overview Sites carry WAN, VLAN and collector assignments. Create one per physical or cloud location. Documentation status This article is a concise referenc…

Overview Route collector traffic through an explicit or PAC-defined proxy. Documentation status This article is a concise reference. A fully expanded guide…