Search documentation

Overview Scheduled config capture for firewalls and switches. Documentation status This article is a concise reference. A fully…

…atus This article is a concise reference. A fully expanded guide for “Configuration Diffs” is scheduled in the documentation roadmap; the steps below are accurate for the current p…

Purpose This integration collects running configuration, interface, VLAN and CDP neighbor data from Cisco IOS and IOS-XE switches and routers using SNMP…

…ba Central-managed access points to collect VLAN, wireless client and configuration evidence using SNMPv3 or the Aruba Central API. Requirements For on-prem: SNMPv3 enabled on…

…group, or an IP range so discovery applies it automatically. Vendor configuration Enable SNMP on the device using credentials that match the profile created above. Examples for…

…verview Where a site enforces all outbound traffic through a proxy, configure the collector to use it explicitly. Because the collector runs as a system service (not an interacti…

…his article is a concise reference. A fully expanded guide for “Proxy Configuration” is scheduled in the documentation roadmap; the steps below are accurate for the current product…

…s using the pfSense REST API package or SNMP, supporting exposure and configuration-drift evidence for small and mid-size sites. Requirements pfSense 2.6+ or pfSense Plus with…

…n AssurIQ's Credential Vault (FortiGate shows it once). Enable SNMPv3 Configure an SNMPv3 user with authPriv matching the AssurIQ credential profile. Add the device to AssurIQ Add…

…oss-account IAM role to inventory EC2 instances, security groups, IAM configuration and public exposure across one or more AWS accounts, without requiring long-lived access keys.…

…s to the correct AssurIQ customer; unmapped companies are not synced. Configure ticket templates Choose the board/queue, ticket type and priority mapping used when AssurIQ creates…

…management group scope Azure Policy or Azure Monitor read access for configuration and patch compliance evidence, where used Permissions Reader role at subscription or managem…

…and firmware version VLAN inventory matches the controller's network configuration Client list matches connected devices in the UniFi dashboard Data collected Access point, sw…

…NAT policy rulebase (read-only) App-ID and threat prevention profile configuration PAN-OS and content/antivirus version status Interface and zone configuration, including internet…

…(IDS/IPS, content filtering, VPN status) Switch port and wireless AP configuration Security model The API key is scoped to a Read-only administrator role, which cannot change…

…license status Firewall access rules and NAT policy summary Interface configuration and internet-facing status System resource and session metrics Security model The Auditor ro…

…le URL Permissions Viewer role — read agent inventory, health and configuration Read access to Threats/Incidents for detection evidence Read access to Application Inventory, wh…

…tor is the outbound-only agent that performs discovery, SNMP polling, configuration backup, log collection and local vulnerability checks for a site. It never accepts inbound conne…

…DP Enrichment, ARP/ICMP-based Network Discovery, Vulnerability Probe, Configuration Collection, Active Directory Assessment and Local Evidence Collection are designed but not yet a…

Purpose On-prem Active Directory integration reads domain user, group and Group Policy state through a lightweight collector-side query so AssurIQ can assess…

Purpose The Google Workspace connector collects user, group, 2-Step Verification and admin role evidence for organizations using Google as their identity prov…

Purpose The Defender for Endpoint connector pulls device risk score, vulnerability, EDR alert and onboarding status via the Microsoft Graph Security API, feed…

Purpose The CrowdStrike Falcon connector uses the Falcon OAuth2 API with read-only scopes to collect host sensor health, detection and vulnerability exposure…

Purpose RMM connectors reconcile the device inventory, patch status and monitoring alerts already managed by your RMM platform against AssurIQ's asset and vul…

…OL-001 fires only after the collector has been silent longer than its configured grace period, so treat it as a real outage rather than a transient blip. Quick checks Confirm t…

…RFC1918 range, or on a network with no public IP without any special configuration. Required endpoints Purpose Direction Port Notes Enrollment and heartbeat Outbound only 443/…

…rst form. The agent is modelled as seven capabilities — Asset Sensor, Configuration Sensor, Vulnerability Sensor, Security Sensor, Threat Sensor, Response Engine and Evidence Engin…

…me, authentication protocol and privacy protocol all match the device configuration. A mismatch on auth (MD5 vs SHA) or privacy (DES vs AES, or key length) causes a silent authenti…

…he target requires a restart to complete the change. Many patches and configuration changes do not take effect until reboot, and validation will correctly fail until then. Supersed…

…native Windows service, supervised by the Service Control Manager and configured to start automatically on boot. Windows ARM64 is on the roadmap and not yet available. Use an x6…