Search documentation

Overview The HIPAA Security Rule requires covered entities and their business associates to protect the confidentiality, integrit…

…s article is a concise reference. A fully expanded guide for “Initial Security Assessment” is scheduled in the documentation roadmap; the steps below are accurate for the current p…

…article is a concise reference. A fully expanded guide for “Identity Security” is scheduled in the documentation roadmap; the steps below are accurate for the current product vers…

Purpose The SonicWall connector reads firmware, security service and firewall rule state from SonicOS appliances to assess management exposure and patch curre…

…ulnerability, EDR alert and onboarding status via the Microsoft Graph Security API, feeding endpoint vulnerability and detection controls alongside the Microsoft 365 identity conne…

…nagement IP and API key under Integrations. Verify collection Confirm security policy, App-ID and threat prevention evidence populate. Verification Firewall or Panorama-managed…

…ich interfaces face the internet) SNMP system and interface metrics Security model The REST API administrator profile is Read-Only across all categories and its trusted-host li…

…re (Spotlight), where licensed Falcon-assigned host risk indicators Security model The API client is restricted to Read-only scopes and cannot trigger containment, isolation or…

…ry per endpoint, where licensed Policy and site assignment metadata Security model The Viewer role cannot mitigate threats, isolate endpoints or change policy; it is strictly r…

…o inventory subscriptions, resource groups, virtual machines, network security groups and public IP exposure, feeding cloud asset, patching and attack-surface controls. Requireme…

…ssumes a read-only cross-account IAM role to inventory EC2 instances, security groups, IAM configuration and public exposure across one or more AWS accounts, without requiring long…

…ki Dashboard API to collect organization, network, device, client and security appliance event data across MX, MS and MR product lines without requiring device-level credentials.…

…dmin.reports.audit.readonly — read admin and login audit events admin.security.readonly — read 2-Step Verification enrollment Setup Create a service account In Google Cloud Con…

…stion that matters is not "how many endpoints" but "how many distinct security boundaries." A security boundary is any network the collector cannot reach broadcast/ARP traffic a…

…ster Password policy and stale-account findings appear under Identity Security Data collected Domain users, groups and organizational units Privileged group membership (Domain…

…ry and signal/health metrics Port and PoE state on managed switches Security model The connector uses a Viewer-role account or read-only API key; it cannot change controller co…

…nk and CDP neighbor data CPU, memory and environmental SNMP metrics Security model SNMPv3 authPriv encrypts and authenticates all polling traffic. The SSH account used for conf…

…and association history Configuration snapshots for on-prem devices Security model SNMPv3 authPriv encrypts polling traffic; the SSH account is read-only and cannot modify conf…

…ed package versions and pfSense version WAN-facing service exposure Security model The API user's privilege set is restricted to read-only status and diagnostic pages and canno…

…t to endpoint health Organization/site structure for reconciliation Security model The API application is limited to read scopes; AssurIQ never issues remote commands or script…

…used for mapping Time entries against synced tickets, where enabled Security model The API member/client is scoped to ticketing and company objects only; it cannot access unrel…

…abilities — Asset Sensor, Configuration Sensor, Vulnerability Sensor, Security Sensor, Threat Sensor, Response Engine and Evidence Engine — each negotiated by key and version at he…

….Read.All Sign-in and directory audit logs Reports.Read.All Usage and security reports, including MFA registration detail UserAuthenticationMethod.Read.All Per-user registered auth…

…ial Vault and select New Credential, type SNMP. Choose SNMPv3 Set the security level to authPriv, the auth protocol to SHA-256, and the privacy protocol to AES-128 or AES-256, matc…

Overview The FTC Safeguards Rule sets information security expectations for entities the FTC treats as financial institutions, based on the activities they perf…

…Instead, it maintains a single set of universal controls — the actual security practices that matter, such as MFA enforcement, patch cadence, endpoint protection and access review…

…m the site's maintenance window schedule matches intent. If an urgent security-relevant update needs to apply sooner, temporarily widen or override the window with appropriate chan…

…evoked Credential invalidated by an operator Deliberate retirement or security response Degraded in detail Degraded means the collector is still reachable and heartbeating, but…

…), plus a combined view. Overlays re-color the same nodes for health, security, compliance, lifecycle, changes, VLAN or subnet — without changing the underlying edges. Solid edg…