{ "concept_eppproductwebhelp-latest-en.json": { "title": "title_product_webhelp_000001_1FD3F9A", "title_product_webhelp_000001_1FD3F9A": "WithSecure Exposure Management ", "shortdesc": "shortdesc_product_webhelp_000003_C705DF9", "shortdesc_product_webhelp_000003_C705DF9": "Information on using the product, including supported browsers and release notes. ", "content.p_product_webhelp_000008_0B7542F": "To download this documentation in PDF format, see the administration guide.", "content.dt_product_webhelp_00000B_85E8A2C": "Other material", "content.dd_product_webhelp_00000C_7AC4D78": "", "desc": [ "content.p_product_webhelp_000008_0B7542F", { "dl.dl_product_webhelp_00000A_83214DB": [ { "dlentry.other-material": [ "content.dt_product_webhelp_00000B_85E8A2C", "content.dd_product_webhelp_00000C_7AC4D78" ] } ] } ] }, "withsecure_elements_help-latest-en.json": { "title": "title_withsecure_elements_help_067DB", "title_withsecure_elements_help_067DB": "Introduction to the WithSecure Elements solution", "shortdesc": "shortdesc_withsecure_elements_help_027F2", "shortdesc_withsecure_elements_help_027F2": "Overview of the WithSecure Elements solution and its offering.", "content.dt_withsecure_elements_help_0BDDE": "WithSecure Elements overview", "content.dd_withsecure_elements_help_0F1A4": "WithSecure Elements is our single modular solution made up of a full range of cyber security applications that offer end-to-end business and cloud coverage. The product includes our award-winning technologies in vulnerability management, patch management, endpoint protection, and endpoint detection and response. In today's unpredictable, ever-changing business environment, our all-in-one security solution helps to build and ensure a resilient business.", "content.dt_withsecure_elements_help_07CBC": "The WithSecure Elements offering", "content.dd_withsecure_elements_help_07058": "", "content.dd_p_withsecure_elements_help_00656": "WithSecure Elements has been specifically designed to support the modern agile business environment, which constantly needs to adapt not only to the external threat landscape, but also to the changing business needs.
", "content.dd_p_withsecure_elements_help_0B3BD": "To highlight some of the main benefits:
", "choice.choice_withsecure_elements_help_03B47": "Centralized and streamlined cyber security management to improve productivity", "choice.choice_withsecure_elements_help_0AA1F": "All the needed software components integrated into one for smooth deployment", "choice.choice_withsecure_elements_help_0EFB3": "Available as a fully managed service or as a self-managed cloud solution", "content.dd_p_withsecure_elements_help_043F6": "The solution also offers flexible licensing options, which means that you can pick and choose which of WithSecure Elements applications your business needs.
", "content.dt_withsecure_elements_help_08337": "Supported languages", "content.dd_withsecure_elements_help_06929": "", "content.dd_p_withsecure_elements_help_0E353": "The Elements Security Center supports the following languages:
", "choice.choice_withsecure_elements_help_08889": "English (US), Finnish, French, German, Italian, Japanese, Polish, Portuguese (Brazil), Spanish (Latin America), Swedish", "content.dd_p_withsecure_elements_help_06D8E": "Endpoint products support the following languages:
", "choice.choice_withsecure_elements_help_06C89": "English, Czech, Danish, Dutch, Estonian, Finnish, French, French (Canadian), German, Greek, Hungarian, Italian, Japanese, Norwegian, Polish, Portuguese, Portuguese (Brazilian), Romanian, Russian, Slovenian, Spanish, Spanish (Latin America), Swedish, Turkish, Traditional Chinese (Hong Kong), Traditional Chinese (Taiwan), and Simplified Chinese (PRC).", "content.dt_withsecure_elements_help_04C3F": "WithSecure Elements training", "content.dd_withsecure_elements_help_00AB8": "For an introductory Elements training session, log into the WithSecure Academy via the Partner Portal.", "content.dt_withsecure_elements_help_09C41": "Accessing the WithSecure Elements Security Center", "content.dd_withsecure_elements_help_01215": "You can access Elements Security Center as follows: WithSecure Elements Security Center", "desc": [ { "dl.dl_withsecure_elements_help_0E003": [ { "dlentry.withsecure-elements-in-a-nE0D8": [ "content.dt_withsecure_elements_help_0BDDE", "content.dd_withsecure_elements_help_0F1A4" ] }, { "dlentry.the-withsecure-elements-of0C00": [ "content.dt_withsecure_elements_help_07CBC", "content.dd_withsecure_elements_help_07058", "content.dd_p_withsecure_elements_help_00656", "content.dd_p_withsecure_elements_help_0B3BD", { "choices.ul_withsecure_elements_help_06852": [ "choice.choice_withsecure_elements_help_03B47", "choice.choice_withsecure_elements_help_0AA1F", "choice.choice_withsecure_elements_help_0EFB3" ] }, "content.dd_p_withsecure_elements_help_043F6" ] }, { "dlentry.supported-languages": [ "content.dt_withsecure_elements_help_08337", "content.dd_withsecure_elements_help_06929", "content.dd_p_withsecure_elements_help_0E353", { "choices.ul_withsecure_elements_help_0F5B2": [ "choice.choice_withsecure_elements_help_08889" ] }, "content.dd_p_withsecure_elements_help_06D8E", { "choices.ul_withsecure_elements_help_08941": [ "choice.choice_withsecure_elements_help_06C89" ] } ] }, { "dlentry.withsecure-elements-training": [ "content.dt_withsecure_elements_help_04C3F", "content.dd_withsecure_elements_help_00AB8" ] }, { "dlentry.accessing-the-withsecure-e9324": [ "content.dt_withsecure_elements_help_09C41", "content.dd_withsecure_elements_help_01215" ] } ] } ] }, "getting_started-2-latest-en.json": { "title": "title_getting_started_000001_BFE365B", "title_getting_started_000001_BFE365B": "Using WithSecure Elements Security Center", "shortdesc": "shortdesc_getting_started_000003_50A3824", "shortdesc_getting_started_000003_50A3824": "Basic tasks for everyday use of WithSecure Elements Security Center, including managing access rights and administrator accounts. ", "content.p_getting_started_000012_CBD0017": "This chapter describes the following tasks:", "step.step_getting_started_000014_1D65201": "managing access rights", "step.step_getting_started_000015_3E77E8E": "adding new administrator accounts", "step.step_getting_started_000016_12B0C92": "adding customer companies", "step.step_getting_started_000017_C3C4870": "using the scope selector to broaden or narrow the scope of information displayed in WithSecure Elements Security Center", "content.p_getting_started_00001A_7934732": "You can order WithSecure Elements products to users in the customer companies, as well as manage the subscriptions of the products installed on the companies' computers and mobile devices.", "desc": [ "content.p_getting_started_000012_CBD0017", { "steps.ul_getting_started_000013_B6721B1": [ "step.step_getting_started_000014_1D65201", "step.step_getting_started_000015_3E77E8E", "step.step_getting_started_000016_12B0C92", "step.step_getting_started_000017_C3C4870" ] }, "content.p_getting_started_00001A_7934732" ] }, "quick_start_guide_for_security_center-latest-en.json": { "title": "title_quick_start_guide_for_se_0FD4D", "title_quick_start_guide_for_se_0FD4D": "Get started with WithSecure Elements Security Center", "shortdesc": "shortdesc_quick_start_guide_for_se_0B73A", "shortdesc_quick_start_guide_for_se_0B73A": "Get started with WithSecure Elements Security Center in four steps: log in, set up multi-factor authentication, add administrators, and assign a subscription.", "content.p_quick_start_guide_for_se_01E3A": "You need a WithSecure Business Account to access Elements Security Center at WithSecure Elements Security Center. There are two ways to get an account:", "content.note_quick_start_guide_for_se_06572": "Tip: If the email has not arrived, check your junk mail folder first.", "step.step_quick_start_guide_for_se_06A89": "When you buy the product from a WithSecure partner, the partner usually creates the account for the first administrator. You then receive an email with a temporary password and a login link.", "step.step_quick_start_guide_for_se_06D70": "If you have a subscription key but no account yet, create the first administrator account with the self-registration link to WithSecure Elements Security Center.", "content.p_quick_start_guide_for_se_02DA4": "This quick start guide walks you through the four main steps to start using WithSecure Elements Security Center: log in, set up multi-factor authentication, add administrator accounts, and assign a subscription.", "substep.substep_quick_start_guide_for_se_0ACD6": "Log in at WithSecure Elements Security Center sign-in page with your Business Account credentials. For the login options, see Logging in.", "substep.substep_quick_start_guide_for_se_0DADB": "If you manage more than one company, switch between them with the scope selector, as described in Move between the managed companies.", "step.step_quick_start_guide_for_se_04152": "Log in to Elements Security Center.", "substep.substep_quick_start_guide_for_se_0F8BE": "Turn on MFA for your account, as described in Choose multi-factor authentication.", "substep.substep_quick_start_guide_for_se_0B42A": "Choose an authentication method that fits your needs. For the available methods, see MFA methods.", "step.step_quick_start_guide_for_se_0034C": "Set up multi-factor authentication (MFA).", "substep.substep_quick_start_guide_for_se_05D1F": "Invite additional administrators and assign their roles, as described in Invite Security Administrator to company organization.", "step.step_quick_start_guide_for_se_0F07F": "Add administrator accounts.", "substep.substep_quick_start_guide_for_se_00C8B": "Assign a subscription key for the company, as described in Assign a subscription key for a customer company.", "substep.substep_quick_start_guide_for_se_0A9BF": "Download the installer for the product that you want to deploy, as described in Download software from Elements Security Center.", "step.step_quick_start_guide_for_se_06CD6": "Assign a subscription and deploy a product.", "content.p_quick_start_guide_for_se_03747": "Follow the quick start guide for the specific product that you want to deploy to complete the setup.", "desc": [ "content.p_quick_start_guide_for_se_01E3A", { "steps.ul_quick_start_guide_for_se_023A7": [ "step.step_quick_start_guide_for_se_06A89", "content.note_quick_start_guide_for_se_06572", "step.step_quick_start_guide_for_se_06D70" ] }, "content.p_quick_start_guide_for_se_02DA4", { "steps.steps_quick_start_guide_for_se_0658C": [ "step.step_quick_start_guide_for_se_04152", { "substeps.substepsalpha_quickalpha_startalpha_guidealpha_foralpha_sealpha_0C6D5": [ "substep.substep_quick_start_guide_for_se_0ACD6", "substep.substep_quick_start_guide_for_se_0DADB" ] }, "step.step_quick_start_guide_for_se_0034C", { "substeps.substepsalpha_quickalpha_startalpha_guidealpha_foralpha_sealpha_07568": [ "substep.substep_quick_start_guide_for_se_0F8BE", "substep.substep_quick_start_guide_for_se_0B42A" ] }, "step.step_quick_start_guide_for_se_0F07F", { "substeps.substepsalpha_quickalpha_startalpha_guidealpha_foralpha_sealpha_00F43": [ "substep.substep_quick_start_guide_for_se_05D1F" ] }, "step.step_quick_start_guide_for_se_06CD6", { "substeps.substepsalpha_quickalpha_startalpha_guidealpha_foralpha_sealpha_0B5AE": [ "substep.substep_quick_start_guide_for_se_00C8B", "substep.substep_quick_start_guide_for_se_0A9BF" ] } ] }, "content.p_quick_start_guide_for_se_03747" ] }, "logging_in-latest-en.json": { "title": "title_logging_in_000001_0BA857E4", "title_logging_in_000001_0BA857E4": "Logging in", "shortdesc": "shortdesc_logging_in_000002_9B7851E5", "shortdesc_logging_in_000002_9B7851E5": "Requirements for logging in to WithSecure Elements Security Center using a Business Account. ", "content.p_logging_in_000012_D18408E2": "You need a WithSecure Business Account to access Elements Security Center. When you purchase the product from a WithSecure partner, the partner typically creates a Business Account for the first administrator in your organization. If this applies to you, you have received an email from WithSecure with a temporary password and a link to log in to Elements Security Center.", "content.p_logging_in_000018_58DD10A6": "If your account has not yet been created, but you have received a subscription key from your partner, you can use the subscription key to create a WithSecure Business account for the first administrator in your organization. To do that, use the company self-registration link for your specific region.", "desc": [ "content.p_logging_in_000012_D18408E2", "content.p_logging_in_000018_58DD10A6" ] }, "logging_in_to_non_federated_domains-latest-en.json": { "title": "title_logging_in_to_non_federa_0ADB9", "title_logging_in_to_non_federa_0ADB9": "Log in to non-federated domains", "shortdesc": "shortdesc_logging_in_to_non_federa_038ED", "shortdesc_logging_in_to_non_federa_038ED": "Logs in to a non-federated domain using your username and password.", "content.p_logging_in_to_non_federa_0555A": "To log in to a non-federated domain, do the following:", "content.p_logging_in_to_non_federa_06841": "The Log in page opens.", "step.step_logging_in_to_non_federa_04403": "Open the following link in the web browser: WithSecure Elements Security Center sign-in page.", "content.note_logging_in_to_non_federa_08EAF": "Note: If you do not have login credentials, ask your contact person for portal access. If you forget your password, you can order a new one by selecting Forgot password. Instructions for resetting your password are sent to your email address.", "content.p_logging_in_to_non_federa_0FC43": "Elements Security Center opens. You can toggle between the services using the navigation menu in the sidebar.", "step.step_logging_in_to_non_federa_0100A": "Enter your username and password, and select Log in.", "desc": [ "content.p_logging_in_to_non_federa_0555A", { "steps.steps_logging_in_to_non_federa_02AB6": [ "step.step_logging_in_to_non_federa_04403", "content.p_logging_in_to_non_federa_06841", "step.step_logging_in_to_non_federa_0100A", "content.note_logging_in_to_non_federa_08EAF", "content.p_logging_in_to_non_federa_0FC43" ] } ], "related": [ "logging_in_to_a_federated_domain-latest-en" ] }, "logging_in_to_a_federated_domain-latest-en.json": { "title": "title_logging_in_to_federated__05880", "title_logging_in_to_federated__05880": "Log in to federated domains", "shortdesc": "shortdesc_logging_in_to_federated__06F7A", "shortdesc_logging_in_to_federated__06F7A": "Logs in to a federated domain using Microsoft Entra ID credentials.", "content.p_logging_in_to_federated__0A6A1": "Before you begin, make sure that you have a Microsoft Entra account. If you are a new user, you must create one first.", "content.p_logging_in_to_federated__0F288": "To log in to a federated domain, do the following:", "content.p_logging_in_to_federated__0623F": "You are redirected to the Microsoft login page.", "step.step_logging_in_to_federated__068E9": "Open the following link in the web browser: WithSecure Elements Security Center sign-in page.", "content.note_logging_in_to_federated__0F621": "Important: If you are a first-time user and you had a WithSecure Business Account before the domain was federated, you are redirected to the Microsoft login page to enter your Microsoft credentials for authentication. This links your account to federated single sign-on. For subsequent logins, authentication will be handled via SSO using the Microsoft Entra ID account.", "step.step_logging_in_to_federated__0CA8D": "Enter your Entra credentials, and select Log in.", "content.p_logging_in_to_federated__0950C": "Elements Security Center opens. You can toggle between the services using the navigation menu in the sidebar.", "desc": [ "content.p_logging_in_to_federated__0A6A1", "content.p_logging_in_to_federated__0F288", { "steps.steps_logging_in_to_federated__0A5C6": [ "step.step_logging_in_to_federated__068E9", "content.p_logging_in_to_federated__0623F", "step.step_logging_in_to_federated__0CA8D", "content.note_logging_in_to_federated__0F621" ] }, "content.p_logging_in_to_federated__0950C" ] }, "mfa-latest-en.json": { "title": "title_mfa_000001_E9DF3B3D", "title_mfa_000001_E9DF3B3D": "Multi-factor authentication", "shortdesc": "shortdesc_mfa_000002_E8E2DBB8", "shortdesc_mfa_000002_E8E2DBB8": "Multi-factor authentication (MFA), also know as two-factor authentication (2FA), is a method of increasing security during the login process to systems.", "content.p_mfa_000011_27FA82DE": "MFA protects you and your environment against, for example, phishing and credential stuffing attacks.", "content.note_mfa_000012_1EFAF577": "Important: We recommend that you use Multi-Factor Authentication (MFA) to secure access to WithSecure Elements Security Center. Set up MFA immediately in Elements Security Center.", "content.note_mfa_000015_21E85E33": "Important: We recommend that, as a backup, you use more than one multi-factor authentication method. If your only multi-factor authentication method is lost, the account needs to be re-created.", "content.p_mfa_000016_94AEF88C": "When users log in to a system with their username and password, their credentials may already have been compromised, for example, due to a vulnerability in their browser or password manager. These leaked credentials may be on some publicly accessible list, used by attackers to gain entry into systems. With the addition of MFA, an extra step is needed when logging in. System access is traditionally protected with username and password, something that only you know. MFA introduces additional factors; something that you have (a security key or device) and something that you are (your fingerprint or facial recognition).", "desc": [ "content.p_mfa_000011_27FA82DE", "content.note_mfa_000012_1EFAF577", "content.note_mfa_000015_21E85E33", "content.p_mfa_000016_94AEF88C" ] }, "concept_k4l_nv5_m1c-latest-en.json": { "title": "title_mfa_methods_000001_3C4ED65E", "title_mfa_methods_000001_3C4ED65E": "MFA methods", "shortdesc": "shortdesc_mfa_methods_000002_B3223654", "shortdesc_mfa_methods_000002_B3223654": "WithSecure Elements has multiple MFA methods to keep your access safe as possible. ", "content.p_mfa_methods_000015_D0C2EB27": "The methods include the following:", "step.step_mfa_methods_000017_BD2D0658": "Authenticator applications with Time-Based One-Time Password (TOTP), such as Microsoft Authenticator, Google Authenticator, Auth0 Guardian, or other authenticator applications that are available either on your computer or mobile devices. A six-digit authentication code is sent to the Authenticator application, and you need to enter it into the login dialog to continue.", "step.step_mfa_methods_00001A_537FA044": "Push notifications with Auth0 Guardian authenticator - allows you to approve an authentication request with a single click of a button. The Auth0 Guardian Multi-Factor Authenticator application is available in Google Play and AppStore.", "content.note_mfa_methods_000020_D23D12C9": "Important: SMS messages are vulnerable to security breaches and malicious software, and receiving them may also charge you extra fees. For these reasons, we recommend that you only use SMS when there are no safer alternatives for you to use.", "content.note_mfa_methods_000021_AB3F0653": "Tip: If you request several SMS codes in a short time, further messages might be blocked temporarily. The block clears after a short while. For everyday sign-in, we recommend an authenticator app or a security key (WebAuthn/FIDO2), which are more reliable than SMS.", "step.step_mfa_methods_00001E_3BFBC094": "Phone number for Short Message Service (SMS) messages with One-Time Passwords (OTP) - A six-digit authentication code is sent to your configured mobile phone number via SMS. You need to enter the code into the login dialog to continue.", "step.step_mfa_methods_000022_D3CCAE11": "Secure USB keys, such as Yubico YubiKey, Google Titan, and others that support the FIDO2 standard (FIDO2 specification)", "step.step_mfa_methods_000025_88720CB8": "Smartphones or other devices that support the FIDO2 standard (FIDO2 specification)", "content.note_mfa_methods_00002B_BCDE8731": "Important: Device biometrics are specific to individual devices and it must not be the only authentication method that you use. You are prompted to add this authentication method for each device that you use.", "step.step_mfa_methods_000028_625F50F3": "Device biometrics, fingerprint or facial recognition or Windows Hello from your device using WebAuthn (Web Authentication (WebAuthn) specification).", "desc": [ "content.p_mfa_methods_000015_D0C2EB27", { "steps.ul_mfa_methods_000016_D8BC2EDE": [ "step.step_mfa_methods_000017_BD2D0658", "step.step_mfa_methods_00001A_537FA044", "step.step_mfa_methods_00001E_3BFBC094", "content.note_mfa_methods_000020_D23D12C9", "content.note_mfa_methods_000021_AB3F0653", "step.step_mfa_methods_000022_D3CCAE11", "step.step_mfa_methods_000025_88720CB8", "step.step_mfa_methods_000028_625F50F3", "content.note_mfa_methods_00002B_BCDE8731" ] } ], "related": [ "setting_up_2fa-latest-en" ] }, "setting_up_2fa-latest-en.json": { "title": "title_setting_up_2fa_000001_91F702F1", "title_setting_up_2fa_000001_91F702F1": "Choose multi-factor authentication", "shortdesc": "shortdesc_setting_up_2fa_000002_BD431774", "shortdesc_setting_up_2fa_000002_BD431774": "Chooses one or more multi-factor authentication methods.", "content.p_setting_up_2fa_000011_6D8DA1CB": "Before you choose a multi-factor authentication method:", "step.step_setting_up_2fa_000013_38B7268F": "Install an authentication app, for example, Google Authenticator on your mobile device.", "step.step_setting_up_2fa_000014_032A47C1": "Make sure that your mobile device can read QR codes.", "content.p_setting_up_2fa_000016_65FB154E": "Choose the most secure authentication method available to you. FIDO2 is the best option, followed by authenticator apps. SMS should only be used as a last resort. Note that if you lose your mobile device and have not backed up your security keys or authenticator app, you will lose access to your account, so SMS can be used as a backup method in such situations.", "content.note_setting_up_2fa_000017_8CAC0BAC": "Tip: Register more than one authentication method. If you lose access to all of your authentication methods, the account cannot be reset and must be re-created.", "content.p_setting_up_2fa_000018_22FD18C5": "To choose one or more multi-factor authentication methods:", "step.step_setting_up_2fa_00001A_D59D4B14": "Log in to WithSecure Elements Security Center with your email address and password.", "content.note_setting_up_2fa_000022_F83FCA71": "Note: If you have already configured one or more MFA methods, select Change.", "content.p_setting_up_2fa_000024_5114260E": "The Multi-Factor Authentication Settings window opens.", "step.step_setting_up_2fa_00001D_A5AA9423": "Select at the top-right corner, then select My settings.", "content.p_setting_up_2fa_000029_6814FDF4": "The Verify your identity screen opens.", "step.step_setting_up_2fa_000026_197D4D85": "Select Add to select one or more of the authentication options that you want to use.", "content.p_setting_up_2fa_00002D_00B5006A": "Multi-factor authentication is now set up for your WithSecure Elements account.", "content.note_setting_up_2fa_00002F_C1BD13C1": "Note: We recommend that you select multiple multi-factor authentication methods as a backup. If your only multi-factor authentication method is lost, there is no way to reset the multi-factor authentication. If all multi-factor authentication methods are lost, the account needs to be re-created.", "step.step_setting_up_2fa_00002B_C4019025": "Follow the instructions on the screen. The required actions depend on the MFA method that you selected.", "desc": [ "content.p_setting_up_2fa_000011_6D8DA1CB", { "steps.ul_setting_up_2fa_000012_073F3331": [ "step.step_setting_up_2fa_000013_38B7268F", "step.step_setting_up_2fa_000014_032A47C1" ] }, "content.p_setting_up_2fa_000016_65FB154E", "content.note_setting_up_2fa_000017_8CAC0BAC", "content.p_setting_up_2fa_000018_22FD18C5", { "steps.steps_setting_up_2fa_000019_C286A671": [ "step.step_setting_up_2fa_00001A_D59D4B14", "step.step_setting_up_2fa_00001D_A5AA9423", "content.note_setting_up_2fa_000022_F83FCA71", "content.p_setting_up_2fa_000024_5114260E", "step.step_setting_up_2fa_000026_197D4D85", "content.p_setting_up_2fa_000029_6814FDF4", "step.step_setting_up_2fa_00002B_C4019025", "content.p_setting_up_2fa_00002D_00B5006A", "content.note_setting_up_2fa_00002F_C1BD13C1" ] } ], "related": [ "task_qc3_vmh_k1c-latest-en" ] }, "task_qc3_vmh_k1c-latest-en.json": { "title": "title_removing_mfa_000001_D53C16DF", "title_removing_mfa_000001_D53C16DF": "Remove a multi-factor authentication", "shortdesc": "shortdesc_removing_mfa_000002_0CA2A01B", "shortdesc_removing_mfa_000002_0CA2A01B": "Removes a multi-factor authentication method.", "content.p_removing_mfa_000011_884BA051": "To remove a multi-factor authentication method:", "step.step_removing_mfa_000013_FE193C0B": "Log in with your email address and password.", "step.step_removing_mfa_000015_D31813E7": "Enter your multi-factor authentication code and select Continue.", "step.step_removing_mfa_000018_6D917E9B": "Select at the top-right corner, then select My settings.", "content.p_removing_mfa_000020_23C12649": "The Verify your identity window opens.", "step.step_removing_mfa_00001C_E4410FD3": "Select Change next to Multi-factor Authentication enabled.", "step.step_removing_mfa_000022_C4B3B02B": "Follow the instructions on the screen.", "step.step_removing_mfa_000024_BE8B3AB9": "Select Remove next to the multi-factor authentication methods that you want to remove.", "step.step_removing_mfa_000027_29D4F4A1": "Enter your email address and password.", "desc": [ "content.p_removing_mfa_000011_884BA051", { "steps.steps_removing_mfa_000012_5D9D81CC": [ "step.step_removing_mfa_000013_FE193C0B", "step.step_removing_mfa_000015_D31813E7", "step.step_removing_mfa_000018_6D917E9B", "step.step_removing_mfa_00001C_E4410FD3", "content.p_removing_mfa_000020_23C12649", "step.step_removing_mfa_000022_C4B3B02B", "step.step_removing_mfa_000024_BE8B3AB9", "step.step_removing_mfa_000027_29D4F4A1" ] } ] }, "using_device_biometrics-latest-en.json": { "title": "title_using_device_biometrics_0096D8", "title_using_device_biometrics_0096D8": "Use device biometrics", "shortdesc": "shortdesc_using_device_biometrics_004693", "shortdesc_using_device_biometrics_004693": "Biometric authentication requires that you first have another multi-factor authentication (MFA) method in use.", "content.p_using_device_biometrics_0021E5": "You must already have another multi-factor authentication (MFA) method set up before you can use device biometrics.", "content.p_using_device_biometrics_00557F": "To use device biometrics, do the following:", "content.p_using_device_biometrics_009179": "The My settings window opens.", "step.step_using_device_biometrics_002951": "In Elements Security Center, select at the top-right corner, and select My settings.", "content.p_using_device_biometrics_00A090": "The Use fingerprint or face recognition to log in window opens.", "step.step_using_device_biometrics_00C376": "If you already have one or more MFA methods configured, select Change.", "step.step_using_device_biometrics_00A1BE": "Select Try another method.", "content.p_using_device_biometrics_00E9EA": "The Log in faster on this device window opens.", "step.step_using_device_biometrics_00E158": "Use your already configured MFA method to verify your identity and select Continue.", "content.p_using_device_biometrics_00CDBA": "The Save your passkey window opens.", "step.step_using_device_biometrics_00DCCB": "Select Continue.", "content.p_using_device_biometrics_00DF70": "The Device registration successful window opens.", "step.step_using_device_biometrics_006713": "Select Continue to save the passkey to your device, and then select Ok.", "content.p_using_device_biometrics_0038A6": "The Multi-factor authentication settings window now shows your new device biometric key.", "step.step_using_device_biometrics_00CC2B": "Select Continue.", "step.step_using_device_biometrics_00D8D7": "At the bottom of the screen, select Back to return to the Home page", "content.p_using_device_biometrics_00C377": "The next time that you log in to Elements Security Center on this device, you can authenticate using your biometric key, which makes the process faster and more secure.", "desc": [ "content.p_using_device_biometrics_0021E5", "content.p_using_device_biometrics_00557F", { "steps.steps_using_device_biometrics_0049A1": [ "step.step_using_device_biometrics_002951", "content.p_using_device_biometrics_009179", "step.step_using_device_biometrics_00C376", "content.p_using_device_biometrics_00A090", "step.step_using_device_biometrics_00A1BE", "step.step_using_device_biometrics_00E158", "content.p_using_device_biometrics_00E9EA", "step.step_using_device_biometrics_00DCCB", "content.p_using_device_biometrics_00CDBA", "step.step_using_device_biometrics_006713", "content.p_using_device_biometrics_00DF70", "step.step_using_device_biometrics_00CC2B", "content.p_using_device_biometrics_0038A6", "step.step_using_device_biometrics_00D8D7" ] }, "content.p_using_device_biometrics_00C377" ] }, "user_management-latest-en.json": { "title": "title_user_management_000001_31B432F", "title_user_management_000001_31B432F": "User management", "shortdesc": "shortdesc_user_management_000002_C576F6F", "shortdesc_user_management_000002_C576F6F": "Instructions about access rights, adding and managing customer companies, and adding and managing administrator accounts. ", "content.p_user_management_000011_3FF8354": "This section describes how to manage who can access WithSecure Elements Security Center, including access rights and roles, the scope selector, and adding and managing administrator accounts.", "desc": [ "content.p_user_management_000011_3FF8354" ] }, "access_rights-latest-en.json": { "title": "title_access_rights_000001_B00A5704", "title_access_rights_000001_B00A5704": "About access rights", "shortdesc": "shortdesc_access_rights_000002_0FF56B8E", "shortdesc_access_rights_000002_0FF56B8E": "New users who have been granted access to Endpoint Protection (EPP) features do not automatically receive access to Extended Detection and Response (XDR) features. Administrators can assign EPP and XDR capabilities to separate user groups and combine them as necessary.", "content.p_access_rights_000012_E13260DB": "New users who get granted access to Exposure Management must also be assigned the Vulnerabilities role to manage vulnerability-related matters, including configuring scans and running reports.", "content.p_access_rights_000015_3D316F0C": "You can set access rights when you create a new account, or edit an existing account.", "desc": [ "content.p_access_rights_000012_E13260DB", "content.p_access_rights_000015_3D316F0C" ], "related": [ "add_admin_account_company-latest-en", "edit_admin_account-latest-en" ] }, "access_rights_by_role-latest-en.json": { "title": "title_access_rights_by_role_00003AF9", "title_access_rights_by_role_00003AF9": "Access rights by role", "shortdesc": "shortdesc_access_rights_by_role_0000C61A", "shortdesc_access_rights_by_role_0000C61A": "The roles and access rights available for each WithSecure Elements product area, with the audit-log entry for each role.", "content.title_access_rights_by_role_000022C6": "Exposure Management – Exposure", "content.dt_access_rights_by_role_0000CC85": "Full editing", "content.dd_access_rights_by_role_0000B825": "", "content.dd_p_access_rights_by_role_000040CB": "Allows access to the following Exposure Management features:
", "choice.choice_access_rights_by_role_00006838": "Environment: Devices, Cloud, Network, Exposure, Identities", "choice.choice_access_rights_by_role_000015FC": "Security configurations", "choice.choice_access_rights_by_role_000008BF": "Reports", "choice.choice_access_rights_by_role_00004E39": "Management", "choice.choice_access_rights_by_role_0000DAB4": "Cloud onboarding", "content.note_access_rights_by_role_0000FFDD": "Note: Security Administrators can create additional administrators and assign this role to users within the same organization (will be replaced by the IAM role)
", "content.dd_p_access_rights_by_role_0000F8A6": "Audit logs entry: cspm: admin
", "content.title_access_rights_by_role_00005222": "Exposure Management – Vulnerabilities", "content.dt_access_rights_by_role_00001EA9": "Management", "content.dd_access_rights_by_role_00002C3D": "", "content.dd_p_access_rights_by_role_0000BBF3": "Allows full access to the Vulnerability Management views, settings, and findings
", "content.note_access_rights_by_role_0000527A": "Note: Security Administrators can create additional administrators and assign this role to users within the same organization (will be replaced by the IAM role)
", "content.dd_p_access_rights_by_role_0000690F": "Audit logs entry: vm: administrator
", "content.dt_access_rights_by_role_000086E4": "Team member", "content.dd_access_rights_by_role_0000B8D9": "Allows access to the Vulnerability Management views, settings, and findings, with no permission for managing users and the system. Audit logs entry: vm: team_member", "content.dt_access_rights_by_role_00009E01": "Read-only", "content.dd_access_rights_by_role_0000AD10": "View-only access with no permission for managing users. Audit logs entry: vm: readonly_team_member", "content.title_access_rights_by_role_0000BE4B": "Collaboration Protection", "content.dt_access_rights_by_role_0000E69D": "Admin", "content.dd_access_rights_by_role_0000137D": "", "content.dd_p_access_rights_by_role_00001187": "Allows the access to the Collaboration Protection views and edit the following protection features:
", "choice.choice_access_rights_by_role_00008767": "Handling detections", "choice.choice_access_rights_by_role_00002206": "Managing Exchange and shared files settings", "choice.choice_access_rights_by_role_0000E393": "Managing policies, quarantining files, and generating reports", "content.dd_p_access_rights_by_role_0000DB2F": "Audit logs entry: cpo365:admin
", "content.dt_access_rights_by_role_00003A0D": "Read-only", "content.dd_access_rights_by_role_0000CDB4": "Grants view-only access to the Collaboration Protection views. Audit logs entry: cpo: readonly", "content.dt_access_rights_by_role_0000CECF": "Quarantine manager", "content.dd_access_rights_by_role_0000EF2F": "Allows access to the Collaboration Protection views that are related to detections and quarantining files. Audit logs entry: cpo365:quarantine_mgr", "content.title_access_rights_by_role_00003474": "Collaboration Protection – Management", "content.dt_access_rights_by_role_0000FD21": "Admin", "content.dd_access_rights_by_role_00007BB5": "", "content.dd_p_access_rights_by_role_00003119": "Allows the access to management features, including user creation, role management, subscription details, and organization settings.
", "content.note_access_rights_by_role_00008B99": "Note: Security Administrators can create additional administrators and assign this role to users within the same organization (will be replaced by the IAM role)
", "content.dd_p_access_rights_by_role_0000B5C8": "Audit logs entry: fusion_admin
", "content.title_access_rights_by_role_0000FDA1": "Endpoint Protection", "content.dt_access_rights_by_role_0000872A": "No access", "content.dd_access_rights_by_role_0000C7F4": "", "content.dd_p_access_rights_by_role_00005FBB": "No access to Endpoint protection features including:
", "choice.choice_access_rights_by_role_0000A698": "Device management", "choice.choice_access_rights_by_role_0000A6AB": "Patch management", "choice.choice_access_rights_by_role_000049F8": "Device security posture", "choice.choice_access_rights_by_role_0000A343": "Software reputation", "choice.choice_access_rights_by_role_0000ACDE": "Security Events", "choice.choice_access_rights_by_role_0000DDAE": "Profiles", "choice.choice_access_rights_by_role_0000AF9A": "Home/Endpoint protection", "choice.choice_access_rights_by_role_00008CE7": "Reports", "content.note_access_rights_by_role_000076F5": "Note: Unless access is coming from some other role, for example Exposure.
", "content.title_access_rights_by_role_0000BD4D": "Endpoint Protection – Computers and mobiles", "content.dt_access_rights_by_role_0000DEEF": "Full editing", "content.dd_access_rights_by_role_00008B24": "", "content.dd_p_access_rights_by_role_000033DE": "Allows the access to the following features:
", "choice.choice_access_rights_by_role_00009E2B": "Security configuration/profiles", "choice.choice_access_rights_by_role_0000E367": "Security information, including device status, dashboard, security events and patch management", "choice.choice_access_rights_by_role_0000FD81": "Security operations, such as removing or isolating devices, updating profiles", "choice.choice_access_rights_by_role_0000AF5F": "Handling subscriptions", "choice.choice_access_rights_by_role_0000B010": "Managing user accounts", "choice.choice_access_rights_by_role_0000362D": "Do cloud onboarding", "content.note_access_rights_by_role_0000F0EF": "Note: The Security Administrator role, along with the \"Servers - Full editing\" role is required to create additional administrators and assign this role to users within the same organization (will be replaced by the IAM role).
", "content.dd_p_access_rights_by_role_0000341D": "Audit logs entry: epp: manage_computers_mobiles_only
", "content.dd_p_access_rights_by_role_000038BC": "or epp: manage_all
", "content.dt_access_rights_by_role_00009EF6": "Read-only", "content.p_access_rights_by_role_0000B6C7": "Audit logs entry: epp: manage_servers_only
", "content.p_access_rights_by_role_0000A8F2": "or epp: readonly", "content.title_access_rights_by_role_0000ACC6": "Endpoint Protection – Servers", "content.dt_access_rights_by_role_000065A4": "Full editing", "content.dd_access_rights_by_role_0000A885": "", "content.dd_p_access_rights_by_role_0000B80A": "Allows the access to the following features:
", "choice.choice_access_rights_by_role_00006F98": "Security configurations/profiles", "choice.choice_access_rights_by_role_00006E4C": "Security information, including device status, dashboard, security events and software updates", "choice.choice_access_rights_by_role_0000FDDC": "Security operations, such as removing or isolating devices, updating profiles", "choice.choice_access_rights_by_role_00006F92": "Handling subscriptions", "choice.choice_access_rights_by_role_00003033": "Managing user accounts", "content.note_access_rights_by_role_00001A5F": "Note: The Security Administrator role, along with the \"Computers and mobiles - Full editing\" role is required to create additional administrators and assign this role to users within the same organization (will be replaced by the IAM role).
", "content.dd_p_access_rights_by_role_000029AF": "Audit logs entry: epp: manage_servers_only
", "content.dd_p_access_rights_by_role_0000C46F": "or epp_manage_all
", "content.dt_access_rights_by_role_00007F2C": "Read-only", "content.p_access_rights_by_role_0000B75F": "Audit logs entry: epp: manage_computers_mobiles_only
", "content.p_access_rights_by_role_000077BB": "epp: readonly", "content.title_access_rights_by_role_00003502": "Extended Detection and Response – Toggle off", "content.dt_access_rights_by_role_0000DFC8": "No access", "content.dd_access_rights_by_role_00006E65": "", "content.dd_p_access_rights_by_role_000086AB": "No access rights to view Extended Detection and Response (XDR) content across the following areas:
", "choice.choice_access_rights_by_role_0000769B": "Broad Context Detections", "choice.choice_access_rights_by_role_000058A8": "Response actions", "choice.choice_access_rights_by_role_00003EF6": "Automated actions", "choice.choice_access_rights_by_role_00004BF3": "Dashboard content related to Detection and Response", "choice.choice_access_rights_by_role_0000A9F5": "Software Reputation", "choice.choice_access_rights_by_role_000068F3": "Organization Settings related to Detection and Response", "choice.choice_access_rights_by_role_0000CE8A": "Event Search pages", "choice.choice_access_rights_by_role_000018B4": "Elevate to WithSecure", "choice.choice_access_rights_by_role_0000FFA4": "Subscription view", "content.title_access_rights_by_role_0000671D": "Extended Detection and Response – Broad Context Detections", "content.dt_access_rights_by_role_00003D87": "Full editing", "content.dd_access_rights_by_role_00001CF4": "", "content.dd_p_access_rights_by_role_00006D37": "Permission to manage:
", "choice.choice_access_rights_by_role_0000F89A": "Broad Context Detections (for example, change status and close detections)", "choice.choice_access_rights_by_role_00007EC3": "My Reports", "choice.choice_access_rights_by_role_0000FA93": "Detection and Response-related content on the Dashboard", "choice.choice_access_rights_by_role_000095A6": "Software Reputation and Organization Settings related to Detection and Response", "choice.choice_access_rights_by_role_00004A44": "Elevate to WithSecure when applicable", "choice.choice_access_rights_by_role_0000A7EB": "Requests", "content.dd_p_access_rights_by_role_000062CA": "Limited access to:
", "choice.choice_access_rights_by_role_0000C72E": "Devices view", "choice.choice_access_rights_by_role_0000919E": "Cloud view", "choice.choice_access_rights_by_role_000049AB": "Subscription view", "content.dd_p_access_rights_by_role_000051EB": "Issuing Quick Actions requires additional roles, such as Execute Responses.
", "content.note_access_rights_by_role_0000C4BA": "Note: This does not grant permission to configure the Cloud Tenant. Full editing rights under Computers and Mobiles are required for that level of access.
", "content.dd_p_access_rights_by_role_00007806": "Audit logs entry: elements: xdr-incident-full
", "content.dt_access_rights_by_role_0000782D": "Read-only", "content.dd_access_rights_by_role_0000725B": "", "content.dd_p_access_rights_by_role_000008B8": "Default value when Extended Detection and Response (XDR), which allows read-only access to:
", "choice.choice_access_rights_by_role_00008CE1": "Broad Context Detections", "choice.choice_access_rights_by_role_0000FAEF": "My Reports", "choice.choice_access_rights_by_role_0000122C": "Detection and Response-related content on the Dashboard", "choice.choice_access_rights_by_role_0000C711": "Software Reputation", "choice.choice_access_rights_by_role_0000D865": "Organization Settings related to Detection and Response", "choice.choice_access_rights_by_role_00009070": "Elevate to WithSecure when applicable", "choice.choice_access_rights_by_role_000036C2": "Devices", "choice.choice_access_rights_by_role_0000593B": "Cloud views", "choice.choice_access_rights_by_role_00004C6E": "Requests", "content.dd_p_access_rights_by_role_0000FBBF": "Access to the Subscription view is limited.
", "content.dd_p_access_rights_by_role_0000106C": "Audit logs entry: elements: xdr-incident-read
", "content.title_access_rights_by_role_000024EF": "Extended Detection and Response – Response", "content.dt_access_rights_by_role_0000C22B": "Execute responses", "content.dd_access_rights_by_role_0000864D": "", "content.dd_p_access_rights_by_role_00007C0B": "Access to execute:
", "choice.choice_access_rights_by_role_00007FC9": "response actions", "choice.choice_access_rights_by_role_00003BCB": "configure Automated actions", "content.dd_p_access_rights_by_role_00004E1C": "Limited access to Cloud view.
", "content.dd_p_access_rights_by_role_000015E4": "Audit logs entry: elements: xdr-response-full
", "content.dt_access_rights_by_role_00007FB0": "List responses", "content.dd_access_rights_by_role_0000C0CB": "", "content.dd_p_access_rights_by_role_00004B16": "Access to review:
", "choice.choice_access_rights_by_role_0000A056": "executed response actions", "choice.choice_access_rights_by_role_00002414": "respective results available", "content.dd_p_access_rights_by_role_00006D48": "Limited access to:
", "choice.choice_access_rights_by_role_0000DE31": "Devices view", "choice.choice_access_rights_by_role_00000964": "Cloud view", "content.dd_p_access_rights_by_role_000019D6": "Download response results requires the Execute Responses permission.
", "content.dd_p_access_rights_by_role_00000517": "Access to the Subscription view is limited.
", "content.dd_p_access_rights_by_role_0000DB5A": "Audit logs entry: elements: xdr-response-read
", "content.dt_access_rights_by_role_0000FD0C": "No access", "content.dd_access_rights_by_role_000094F0": "", "content.dd_p_access_rights_by_role_00002F09": "No access to execute or review:
", "choice.choice_access_rights_by_role_0000352B": "Response actions", "choice.choice_access_rights_by_role_00006769": "Automated actions", "content.title_access_rights_by_role_00002E1A": "Extended Detection and Response – Event Search", "content.dt_access_rights_by_role_000015D9": "Read-only", "content.p_access_rights_by_role_00003D85": "Access to the Subscription view is limited.
", "content.p_access_rights_by_role_00009F1E": "Audit logs entry: elements: xdr-event-search", "content.dt_access_rights_by_role_0000052B": "No access", "content.dd_access_rights_by_role_0000070D": "No access to review event data.", "content.title_access_rights_by_role_0000E949": "Elements Administration", "content.dt_access_rights_by_role_000007BF": "No access", "content.dd_access_rights_by_role_000009C2": "No rights to create new users or manage other users access rights.", "content.dt_access_rights_by_role_0000B4AC": "Identity and Access Management", "content.dd_access_rights_by_role_000041F7": "Rights to create, delete and manage all Elements users.", "desc": [ "content.title_access_rights_by_role_000022C6", { "dl.dl_access_rights_by_role_000041BF": [ { "dlentry.dlentry_access_rights_by_role_0000966F": [ "content.dt_access_rights_by_role_0000CC85", "content.dd_access_rights_by_role_0000B825", "content.dd_p_access_rights_by_role_000040CB", { "choices.ul_access_rights_by_role_0000FDC3": [ "choice.choice_access_rights_by_role_00006838", "choice.choice_access_rights_by_role_000015FC", "choice.choice_access_rights_by_role_000008BF", "choice.choice_access_rights_by_role_00004E39", "choice.choice_access_rights_by_role_0000DAB4" ] }, "content.note_access_rights_by_role_0000FFDD", "content.dd_p_access_rights_by_role_0000F8A6" ] } ] }, "content.title_access_rights_by_role_00005222", { "dl.dl_access_rights_by_role_00000747": [ { "dlentry.dlentry_access_rights_by_role_0000CE9F": [ "content.dt_access_rights_by_role_00001EA9", "content.dd_access_rights_by_role_00002C3D", "content.dd_p_access_rights_by_role_0000BBF3", "content.note_access_rights_by_role_0000527A", "content.dd_p_access_rights_by_role_0000690F" ] }, { "dlentry.dlentry_access_rights_by_role_0000851B": [ "content.dt_access_rights_by_role_000086E4", "content.dd_access_rights_by_role_0000B8D9" ] }, { "dlentry.dlentry_access_rights_by_role_00005BA7": [ "content.dt_access_rights_by_role_00009E01", "content.dd_access_rights_by_role_0000AD10" ] } ] }, "content.title_access_rights_by_role_0000BE4B", { "dl.dl_access_rights_by_role_00004CCA": [ { "dlentry.dlentry_access_rights_by_role_00007A88": [ "content.dt_access_rights_by_role_0000E69D", "content.dd_access_rights_by_role_0000137D", "content.dd_p_access_rights_by_role_00001187", { "choices.ul_access_rights_by_role_000090CE": [ "choice.choice_access_rights_by_role_00008767", "choice.choice_access_rights_by_role_00002206", "choice.choice_access_rights_by_role_0000E393" ] }, "content.dd_p_access_rights_by_role_0000DB2F" ] }, { "dlentry.dlentry_access_rights_by_role_00009B4C": [ "content.dt_access_rights_by_role_00003A0D", "content.dd_access_rights_by_role_0000CDB4" ] }, { "dlentry.dlentry_access_rights_by_role_00007A32": [ "content.dt_access_rights_by_role_0000CECF", "content.dd_access_rights_by_role_0000EF2F" ] } ] }, "content.title_access_rights_by_role_00003474", { "dl.dl_access_rights_by_role_0000094E": [ { "dlentry.dlentry_access_rights_by_role_0000D39F": [ "content.dt_access_rights_by_role_0000FD21", "content.dd_access_rights_by_role_00007BB5", "content.dd_p_access_rights_by_role_00003119", "content.note_access_rights_by_role_00008B99", "content.dd_p_access_rights_by_role_0000B5C8" ] } ] }, "content.title_access_rights_by_role_0000FDA1", { "dl.dl_access_rights_by_role_00008C2D": [ { "dlentry.dlentry_access_rights_by_role_00000AA0": [ "content.dt_access_rights_by_role_0000872A", "content.dd_access_rights_by_role_0000C7F4", "content.dd_p_access_rights_by_role_00005FBB", { "choices.ul_access_rights_by_role_00005699": [ "choice.choice_access_rights_by_role_0000A698", "choice.choice_access_rights_by_role_0000A6AB", "choice.choice_access_rights_by_role_000049F8", "choice.choice_access_rights_by_role_0000A343", "choice.choice_access_rights_by_role_0000ACDE", "choice.choice_access_rights_by_role_0000DDAE", "choice.choice_access_rights_by_role_0000AF9A", "choice.choice_access_rights_by_role_00008CE7" ] }, "content.note_access_rights_by_role_000076F5" ] } ] }, "content.title_access_rights_by_role_0000BD4D", { "dl.dl_access_rights_by_role_00006FFA": [ { "dlentry.dlentry_access_rights_by_role_00003D96": [ "content.dt_access_rights_by_role_0000DEEF", "content.dd_access_rights_by_role_00008B24", "content.dd_p_access_rights_by_role_000033DE", { "choices.ul_access_rights_by_role_00002A0B": [ "choice.choice_access_rights_by_role_00009E2B", "choice.choice_access_rights_by_role_0000E367", "choice.choice_access_rights_by_role_0000FD81", "choice.choice_access_rights_by_role_0000AF5F", "choice.choice_access_rights_by_role_0000B010", "choice.choice_access_rights_by_role_0000362D" ] }, "content.note_access_rights_by_role_0000F0EF", "content.dd_p_access_rights_by_role_0000341D", "content.dd_p_access_rights_by_role_000038BC" ] }, { "dlentry.dlentry_access_rights_by_role_0000EC5A": [ "content.dt_access_rights_by_role_00009EF6", "content.p_access_rights_by_role_0000B6C7", "content.p_access_rights_by_role_0000A8F2" ] } ] }, "content.title_access_rights_by_role_0000ACC6", { "dl.dl_access_rights_by_role_0000FBF0": [ { "dlentry.dlentry_access_rights_by_role_00000BF7": [ "content.dt_access_rights_by_role_000065A4", "content.dd_access_rights_by_role_0000A885", "content.dd_p_access_rights_by_role_0000B80A", { "choices.ul_access_rights_by_role_00005CDF": [ "choice.choice_access_rights_by_role_00006F98", "choice.choice_access_rights_by_role_00006E4C", "choice.choice_access_rights_by_role_0000FDDC", "choice.choice_access_rights_by_role_00006F92", "choice.choice_access_rights_by_role_00003033" ] }, "content.note_access_rights_by_role_00001A5F", "content.dd_p_access_rights_by_role_000029AF", "content.dd_p_access_rights_by_role_0000C46F" ] }, { "dlentry.dlentry_access_rights_by_role_00008FB4": [ "content.dt_access_rights_by_role_00007F2C", "content.p_access_rights_by_role_0000B75F", "content.p_access_rights_by_role_000077BB" ] } ] }, "content.title_access_rights_by_role_00003502", { "dl.dl_access_rights_by_role_0000CA51": [ { "dlentry.dlentry_access_rights_by_role_00002465": [ "content.dt_access_rights_by_role_0000DFC8", "content.dd_access_rights_by_role_00006E65", "content.dd_p_access_rights_by_role_000086AB", { "choices.ul_access_rights_by_role_000035D7": [ "choice.choice_access_rights_by_role_0000769B", "choice.choice_access_rights_by_role_000058A8", "choice.choice_access_rights_by_role_00003EF6", "choice.choice_access_rights_by_role_00004BF3", "choice.choice_access_rights_by_role_0000A9F5", "choice.choice_access_rights_by_role_000068F3", "choice.choice_access_rights_by_role_0000CE8A", "choice.choice_access_rights_by_role_000018B4", "choice.choice_access_rights_by_role_0000FFA4" ] } ] } ] }, "content.title_access_rights_by_role_0000671D", { "dl.dl_access_rights_by_role_00000AAA": [ { "dlentry.dlentry_access_rights_by_role_000046B6": [ "content.dt_access_rights_by_role_00003D87", "content.dd_access_rights_by_role_00001CF4", "content.dd_p_access_rights_by_role_00006D37", { "choices.ul_access_rights_by_role_0000C9E8": [ "choice.choice_access_rights_by_role_0000F89A", "choice.choice_access_rights_by_role_00007EC3", "choice.choice_access_rights_by_role_0000FA93", "choice.choice_access_rights_by_role_000095A6", "choice.choice_access_rights_by_role_00004A44", "choice.choice_access_rights_by_role_0000A7EB" ] }, "content.dd_p_access_rights_by_role_000062CA", { "choices.ul_access_rights_by_role_00003DB0": [ "choice.choice_access_rights_by_role_0000C72E", "choice.choice_access_rights_by_role_0000919E", "choice.choice_access_rights_by_role_000049AB" ] }, "content.dd_p_access_rights_by_role_000051EB", "content.note_access_rights_by_role_0000C4BA", "content.dd_p_access_rights_by_role_00007806" ] }, { "dlentry.dlentry_access_rights_by_role_00000D06": [ "content.dt_access_rights_by_role_0000782D", "content.dd_access_rights_by_role_0000725B", "content.dd_p_access_rights_by_role_000008B8", { "choices.ul_access_rights_by_role_000064D5": [ "choice.choice_access_rights_by_role_00008CE1", "choice.choice_access_rights_by_role_0000FAEF", "choice.choice_access_rights_by_role_0000122C", "choice.choice_access_rights_by_role_0000C711", "choice.choice_access_rights_by_role_0000D865", "choice.choice_access_rights_by_role_00009070", "choice.choice_access_rights_by_role_000036C2", "choice.choice_access_rights_by_role_0000593B", "choice.choice_access_rights_by_role_00004C6E" ] }, "content.dd_p_access_rights_by_role_0000FBBF", "content.dd_p_access_rights_by_role_0000106C" ] } ] }, "content.title_access_rights_by_role_000024EF", { "dl.dl_access_rights_by_role_000004E8": [ { "dlentry.dlentry_access_rights_by_role_00006DED": [ "content.dt_access_rights_by_role_0000C22B", "content.dd_access_rights_by_role_0000864D", "content.dd_p_access_rights_by_role_00007C0B", { "choices.ul_access_rights_by_role_00009507": [ "choice.choice_access_rights_by_role_00007FC9", "choice.choice_access_rights_by_role_00003BCB" ] }, "content.dd_p_access_rights_by_role_00004E1C", "content.dd_p_access_rights_by_role_000015E4" ] }, { "dlentry.dlentry_access_rights_by_role_00005FA5": [ "content.dt_access_rights_by_role_00007FB0", "content.dd_access_rights_by_role_0000C0CB", "content.dd_p_access_rights_by_role_00004B16", { "choices.ul_access_rights_by_role_00008CC0": [ "choice.choice_access_rights_by_role_0000A056", "choice.choice_access_rights_by_role_00002414" ] }, "content.dd_p_access_rights_by_role_00006D48", { "choices.ul_access_rights_by_role_0000F34C": [ "choice.choice_access_rights_by_role_0000DE31", "choice.choice_access_rights_by_role_00000964" ] }, "content.dd_p_access_rights_by_role_000019D6", "content.dd_p_access_rights_by_role_00000517", "content.dd_p_access_rights_by_role_0000DB5A" ] }, { "dlentry.dlentry_access_rights_by_role_0000F0F7": [ "content.dt_access_rights_by_role_0000FD0C", "content.dd_access_rights_by_role_000094F0", "content.dd_p_access_rights_by_role_00002F09", { "choices.ul_access_rights_by_role_0000F7B0": [ "choice.choice_access_rights_by_role_0000352B", "choice.choice_access_rights_by_role_00006769" ] } ] } ] }, "content.title_access_rights_by_role_00002E1A", { "dl.dl_access_rights_by_role_00005A64": [ { "dlentry.dlentry_access_rights_by_role_0000E976": [ "content.dt_access_rights_by_role_000015D9", "content.p_access_rights_by_role_00003D85", "content.p_access_rights_by_role_00009F1E" ] }, { "dlentry.dlentry_access_rights_by_role_0000BA4D": [ "content.dt_access_rights_by_role_0000052B", "content.dd_access_rights_by_role_0000070D" ] } ] }, "content.title_access_rights_by_role_0000E949", { "dl.dl_access_rights_by_role_0000C9DA": [ { "dlentry.dlentry_access_rights_by_role_0000097D": [ "content.dt_access_rights_by_role_000007BF", "content.dd_access_rights_by_role_000009C2" ] }, { "dlentry.dlentry_access_rights_by_role_000003F2": [ "content.dt_access_rights_by_role_0000B4AC", "content.dd_access_rights_by_role_000041F7" ] } ] } ] }, "using_scope_selector-2-latest-en.json": { "title": "title_using_scope_selector_0000012A7", "title_using_scope_selector_0000012A7": "Move between the managed companies", "shortdesc": "shortdesc_using_scope_selector_00000659D", "shortdesc_using_scope_selector_00000659D": "Use the scope selector to broaden or narrow the scope of information displayed in WithSecure Elements Security Center. ", "content.p_using_scope_selector_00001FB1C": "In Elements Security Center, there are different account levels, which determine the access rights:", "step.step_using_scope_selector_00001A9BB": "Solution Providers (SoPs) manage Service Partners and groups of companies. They can access Elements Security Center to manage security and subscriptions for their directly managed companies, their Service Partners, and their Service Partners' companies.", "step.step_using_scope_selector_00001EBFD": "Service Partners (SePs) manage a group of companies. They can access Elements Security Center to manage security for their directly managed companies.", "step.step_using_scope_selector_0000156F9": "Each company manages a single company. Companies that are managed by a SoP or SeP can request access from their provider, whereas companies that manage their own security can be provided full access to Elements Security Center. Companies that are managed by a SoP or SeP or directly by WithSecure get read-only rights to Elements Security Center.", "content.p_using_scope_selector_00002D82A": "To use the scope selector to focus on a particular company:", "content.p_using_scope_selector_000022B07": "A dropdown menu is displayed, listing all the customer companies associated with your account.
", "step.step_using_scope_selector_000023B15": "Select the icon at the title bar.", "content.p_using_scope_selector_00002CF7A": "The name of the selected company is shown with a blue background color and the page is updated to show the relevant information for the selected company.", "step.step_using_scope_selector_0000261E0": "Select the desired company or write its name in the Search field, and then select Enter.", "desc": [ "content.p_using_scope_selector_00001FB1C", { "steps.ul_using_scope_selector_00001F41C": [ "step.step_using_scope_selector_00001A9BB", "step.step_using_scope_selector_00001EBFD", "step.step_using_scope_selector_0000156F9" ] }, "content.p_using_scope_selector_00002D82A", { "steps.steps_using_scope_selector_000020ACB": [ "step.step_using_scope_selector_000023B15", "content.p_using_scope_selector_000022B07", "step.step_using_scope_selector_0000261E0", "content.p_using_scope_selector_00002CF7A" ] } ] }, "identity_and_access_management_roles-latest-en.json": { "title": "title_iam_roles_000001_4DE26FEB", "title_iam_roles_000001_4DE26FEB": "Elements Identity and Access Management (IAM) role", "shortdesc": "shortdesc_iam_roles_000002_08EC97CA", "shortdesc_iam_roles_000002_08EC97CA": "The Identity and Access Management (IAM) role is authorized to grant and revoke all Elements permissions for security administrators within the IAM administrator's own organization and affiliated entities.", "content.title_iam_roles_000013_879B064C": "Overview", "content.p_iam_roles_000014_43524D14": "The IAM role is a powerful role within WithSecure Elements. It is designed to streamline and enhance the management of security capabilities and services.", "content.p_iam_roles_000016_05844C81": "IAM administrators have the authority to manage security roles within their own organization and affiliated entities. This includes granting and revoking roles for security administrators.", "content.p_iam_roles_000017_9E7D9E59": "As the Elements ecosystem expands, IAM administrators will also manage new capabilities and services, eliminating the need for a cumbersome self-registration process.", "content.p_iam_roles_000019_FAAF7210": "Security administrators access Elements Security Center using WithSecure business accounts. Their access is organized according to specific features, capabilities, and services. The IAM role simplifies the process of assigning roles across different capabilities, which was complex before.", "content.title_iam_roles_00001C_F519DFBA": "Benefits", "content.p_iam_roles_00001D_B0ED07DF": "The IAM role provides several benefits, including the following:", "step.step_iam_roles_00001F_1B15B464": "Streamlined role management across WithSecure Elements", "step.step_iam_roles_000021_E1591C08": "Enhanced security through centralized control", "step.step_iam_roles_000022_AD972C48": "Adapting to future needs with the ability to manage new capabilities and services", "content.title_iam_roles_000023_388F444E": "Claiming the IAM role", "content.p_iam_roles_000024_6EB1C7CF": "For users whose IAM role does not involve an escalation of privilege (i.e., they posses all legacy user access management roles within the organization), the Security Administrators view shows a banner offering them the opportunity to claim the new IAM administrator role. Every organization should carefully consider how they manage IAM-related privileges, as these are distinct from security administrative roles. So, fewer individuals can act as IAM administrators compared to when this option was not available.", "desc": [ "content.title_iam_roles_000013_879B064C", "content.p_iam_roles_000014_43524D14", "content.p_iam_roles_000016_05844C81", "content.p_iam_roles_000017_9E7D9E59", "content.p_iam_roles_000019_FAAF7210", "content.title_iam_roles_00001C_F519DFBA", "content.p_iam_roles_00001D_B0ED07DF", { "steps.ul_iam_roles_00001E_D3C5EECF": [ "step.step_iam_roles_00001F_1B15B464", "step.step_iam_roles_000021_E1591C08", "step.step_iam_roles_000022_AD972C48" ] }, "content.title_iam_roles_000023_388F444E", "content.p_iam_roles_000024_6EB1C7CF" ] }, "elements_iam_role_properties-latest-en.json": { "title": "title_iam_role_properties_000001E7D3", "title_iam_role_properties_000001E7D3": "Elements IAM role properties", "shortdesc": "shortdesc_iam_role_properties_000002BEB3", "shortdesc_iam_role_properties_000002BEB3": "Holders of the IAM role (also known as IAM administrators) can grant or revoke access to any other capability or service-specific role within their organization and its child organizations.", "content.p_iam_role_properties_0000127AD3": "IAM administrators can do the following:", "step.step_iam_role_properties_00001490C5": "Grant themselves any other role, so they gain access to security capabilities or services", "step.step_iam_role_properties_00001537B3": "Grant or revoke new roles introduced by WithSecure for Elements capabilities or services", "step.step_iam_role_properties_000018FF40": "Create or delete WithSecure business accounts by granting or revoking roles.", "step.step_iam_role_properties_00001A0D84": "Transfer IAM permissions to other security administrators within the same organization or its child organizations.", "content.title_iam_role_properties_00001B8C8A": "Acquiring the IAM role", "content.p_iam_role_properties_00001CC61A": "Organizations that manage their own security or provide security capabilities to others must have at least one IAM administrator. The IAM role can be acquired by one of the following ways:", "step.step_iam_role_properties_00001EE6F4": "Being granted the role by another IAM administrator within the same or a parent organization", "step.step_iam_role_properties_00001F1C46": "Self-registration with an Elements subscription issued for the company", "step.step_iam_role_properties_000021A578": "Onboarding by WithSecure for new partners or customer companies", "content.p_iam_role_properties_000023B505": "Existing capability or service-specific roles remain effective but they will eventually be managed through the IAM role. The IAM role will also safeguard access to features that are currently managed by other roles, such as configuring API keys.", "content.title_iam_role_properties_0000244C81": "Migration of IAM permissions", "content.p_iam_role_properties_000025B961": "The migration process aims to transition from legacy, capability-specific IAM roles to the new Elements IAM role, which grants higher privileges. During this process, Elements identifies eligible users and prompts them to claim the new IAM role.", "content.p_iam_role_properties_000028A66B": "Candidates for the IAM role are identified based on their possession of legacy, capability-specific IAM roles and by reviewing active company subscriptions:", "content.dt_iam_role_properties_00002B077C": "For customer companies", "content.dd_iam_role_properties_00002C6271": "Security administrators with the following identified legacy roles:", "choice.choice_iam_role_properties_00002E9B37": "Elements Exposure Management: Full editing", "choice.choice_iam_role_properties_0000302816": "Elements Collaboration Protection: Management administrator", "choice.choice_iam_role_properties_000032998F": "Elements Vulnerability Management: Administrator", "choice.choice_iam_role_properties_000034FB0C": "Elements Endpoint Protection - Computers, servers, and mobiles: Full editing", "content.dt_iam_role_properties_0000377C48": "For Solution Providers and Service Partners", "content.dd_iam_role_properties_00003826AB": "Security administrators with legacy roles for all capabilities and services used by the companies they manage", "content.note_iam_role_properties_00003976D2": "Note: The policy for partners differs from that for customer companies, making sure that only eligible administrators claim the IAM role.", "content.title_iam_role_properties_00003AF30A": "When IAM administrator candidate cannot be identified", "content.p_iam_role_properties_00003BAD2D": "In some organizations, the allocation of legacy, capability-specific roles among security administrators may result in a situation where no single user possesses the same effective access as that granted by the IAM role. This could occur, for example, if a company employs both Elements Endpoint Protection and Elements Collaboration Protection capabilities, but these capabilities are managed independently by two different individuals, with no one person overseeing both at the same time.", "desc": [ "content.p_iam_role_properties_0000127AD3", { "steps.ul_iam_role_properties_00001327A0": [ "step.step_iam_role_properties_00001490C5", "step.step_iam_role_properties_00001537B3", "step.step_iam_role_properties_000018FF40", "step.step_iam_role_properties_00001A0D84" ] }, "content.title_iam_role_properties_00001B8C8A", "content.p_iam_role_properties_00001CC61A", { "steps.ul_iam_role_properties_00001D25CB": [ "step.step_iam_role_properties_00001EE6F4", "step.step_iam_role_properties_00001F1C46", "step.step_iam_role_properties_000021A578" ] }, "content.p_iam_role_properties_000023B505", "content.title_iam_role_properties_0000244C81", "content.p_iam_role_properties_000025B961", "content.p_iam_role_properties_000028A66B", { "dl.dl_iam_role_properties_0000299550": [ { "dlentry.dlentry_iam_role_properties_00002AC0B9": [ "content.dt_iam_role_properties_00002B077C", "content.dd_iam_role_properties_00002C6271", { "choices.ul_iam_role_properties_00002DE08F": [ "choice.choice_iam_role_properties_00002E9B37", "choice.choice_iam_role_properties_0000302816", "choice.choice_iam_role_properties_000032998F", "choice.choice_iam_role_properties_000034FB0C" ] } ] }, { "dlentry.dlentry_iam_role_properties_0000364FDA": [ "content.dt_iam_role_properties_0000377C48", "content.dd_iam_role_properties_00003826AB" ] } ] }, "content.note_iam_role_properties_00003976D2", "content.title_iam_role_properties_00003AF30A", "content.p_iam_role_properties_00003BAD2D" ] }, "concept_iw3_twq_ydc-latest-en.json": { "title": "title_iam_faq_000001_F3B2B884", "title_iam_faq_000001_F3B2B884": "Frequently asked questions about IAM roles", "shortdesc": "shortdesc_iam_faq_000002_D914476F", "shortdesc_iam_faq_000002_D914476F": "Answers to frequently asked questions about IAM roles.", "cell.stentry_iam_faq_000012_B74C5100": "Question", "cell.stentry_iam_faq_000013_5A1253EC": "Answer", "cell.stentry_iam_faq_000015_AE7D775A": "Can partners (SOP/SEP) create IAM roles for all companies under them?", "cell.stentry_iam_faq_000016_2EE755F0": "Yes, IAM administrators at the partner level can fully manage their own organization and organizations under them excluding companies that have chosen to isolate their XM/CP access from SOPs.", "cell.stentry_iam_faq_000018_C9353928": "What should a company administrator do if the company misses the IAM deadline (end of April 2025)?", "cell.stentry_iam_faq_000019_25F77B9D": "The company administrator must contact their Service partner for assistance or reach out to WithSecure support.", "cell.stentry_iam_faq_00001C_43DF120B": "When creating a new user using the self-registration portal, does the first administrator get an IAM role automatically?", "cell.stentry_iam_faq_00001D_E7A4A094": "Yes, the first administrator is granted the IAM role automatically.", "cell.stentry_iam_faq_00001F_6C46222F": "What happens if someone accidentally selects Decline when claiming the highest-level administrative role?", "cell.stentry_iam_faq_000020_83A4C20F": "If a user accidentally declines the IAM role claim, any other IAM administrator can still assign them an IAM role, if necessary.", "cell.stentry_iam_faq_000022_41F8F53E": "Can an Endpoint Protection administrator user who selects Decline still add other Endpoint Protection administrator users?", "cell.stentry_iam_faq_000024_82AE189E": "Yes, for time being, this is still possible. In the future, all user management action rights will be restricted to IAM role holders only.", "cell.stentry_iam_faq_000026_5CC2F058": "Can one organization have multiple IAM administrator users?", "cell.stentry_iam_faq_000027_25B348F4": "Yes, there is no limit to the number of IAM administrators that an organization can have.", "cell.stentry_iam_faq_000029_9A3FE98E": "Why are the Claim and Decline options not displayed for some administrator users?", "cell.stentry_iam_faq_00002A_B6810BE7": "In the first stage, the IAM Claim button is shown to users who have full administrator rights on all products for which the organization has subscriptions. For example, if a company has subscriptions for Elements Endpoint Protection and Collaboration Protection, the IAM Claim button is shown to users with full administrator roles on both products.", "cell.stentry_iam_faq_00002D_7E1F0D92": "How can I identify who in my organization has claimed an IAM role?", "cell.stentry_iam_faq_00002E_963FD5D8": "The IAM role is shown, and users with the role can be filtered in a table under Management > Security Administrators.", "desc": [ { "table.table_question-answer": [ { "thead.sthead_iam_faq_000011_A75130F9": [ "cell.stentry_iam_faq_000012_B74C5100", "cell.stentry_iam_faq_000013_5A1253EC" ] }, { "row.strow_iam_faq_000014_8ADAC512": [ "cell.stentry_iam_faq_000015_AE7D775A", "cell.stentry_iam_faq_000016_2EE755F0" ] }, { "row.strow_iam_faq_000017_27FFC6E2": [ "cell.stentry_iam_faq_000018_C9353928", "cell.stentry_iam_faq_000019_25F77B9D" ] }, { "row.strow_iam_faq_00001B_3424C72C": [ "cell.stentry_iam_faq_00001C_43DF120B", "cell.stentry_iam_faq_00001D_E7A4A094" ] }, { "row.strow_iam_faq_00001E_D5651717": [ "cell.stentry_iam_faq_00001F_6C46222F", "cell.stentry_iam_faq_000020_83A4C20F" ] }, { "row.strow_iam_faq_000021_6F03503D": [ "cell.stentry_iam_faq_000022_41F8F53E", "cell.stentry_iam_faq_000024_82AE189E" ] }, { "row.strow_iam_faq_000025_6EB12FBA": [ "cell.stentry_iam_faq_000026_5CC2F058", "cell.stentry_iam_faq_000027_25B348F4" ] }, { "row.strow_iam_faq_000028_768CC468": [ "cell.stentry_iam_faq_000029_9A3FE98E", "cell.stentry_iam_faq_00002A_B6810BE7" ] }, { "row.strow_iam_faq_00002C_1AB5DEB6": [ "cell.stentry_iam_faq_00002D_7E1F0D92", "cell.stentry_iam_faq_00002E_963FD5D8" ] } ] } ] }, "add_admin_account_company-latest-en.json": { "title": "title_add_admin_account_compan_0E990", "title_add_admin_account_compan_0E990": "Add a new administrator", "shortdesc": "shortdesc_add_admin_account_compan_0EA86", "shortdesc_add_admin_account_compan_0EA86": "You can provide a designated individual, known as an administrator, with a user account with required rights in WithSecure Elements Security Center. ", "content.p_add_admin_account_compan_0E901": "You can add an administrator for the Solution Provider, Service Partner, or for a company account.", "content.p_add_admin_account_compan_02E3C": "To create an administrator account:", "content.p_add_admin_account_compan_0835D": "The Organization Settings page opens.", "step.step_add_admin_account_compan_0CE76": "Under Management, select Organization Settings on the sidebar.", "content.note_add_admin_account_compan_0A9C9": "Note: You can create an administrator account for either your Elements Security Center account or for a specific customer company", "step.step_add_admin_account_compan_0180E": "Select the Security Administrators tab.", "step.step_add_admin_account_compan_0EE89": "Using the scope selector, select the organization level on which you want to create a new administrator account.", "step.step_add_admin_account_compan_05C29": "Select Add administrator.", "content.note_add_admin_account_compan_0EBD4": "Note: The email address must be a valid one and accessible by an actual account user. Do not use shared accounts.", "substep.substep_add_admin_account_compan_03189": "Enter the email address.", "substep.substep_add_admin_account_compan_0F04E": "Select the desired language for the new administrator.", "step.step_add_admin_account_compan_05C41": "In the Add administrator screen, enter the administrator details:", "step.step_add_admin_account_compan_02638": "Select Next.", "content.note_add_admin_account_compan_044DD": "Note: If the new administrator is not allowed to have a full access in a feature-specific role, leave the default No access option as is.", "step.step_add_admin_account_compan_0132F": "In the Roles screen, select the roles that the new administrator needs to have.", "content.p_add_admin_account_compan_0D4DB": "The Summary screen opens.", "step.step_add_admin_account_compan_0748D": "Select Next.", "step.step_add_admin_account_compan_01B32": "Check that the administrator details the selected roles are correct, and then select Add to complete adding the new administrator.", "content.p_add_admin_account_compan_0CE71": "A new administrator account is created.", "content.note_add_admin_account_compan_025AE": "Note: The user receives an email with instructions on how to set up a password for the new account.", "desc": [ "content.p_add_admin_account_compan_0E901", "content.p_add_admin_account_compan_02E3C", { "steps.steps_add_admin_account_compan_04F44": [ "step.step_add_admin_account_compan_0CE76", "content.p_add_admin_account_compan_0835D", "step.step_add_admin_account_compan_0180E", "content.note_add_admin_account_compan_0A9C9", "step.step_add_admin_account_compan_0EE89", "step.step_add_admin_account_compan_05C29", "step.step_add_admin_account_compan_05C41", { "substeps.substepsalpha_addalpha_adminalpha_accountalpha_companalpha_06F63": [ "substep.substep_add_admin_account_compan_03189", "content.note_add_admin_account_compan_0EBD4", "substep.substep_add_admin_account_compan_0F04E" ] }, "step.step_add_admin_account_compan_02638", "step.step_add_admin_account_compan_0132F", "content.note_add_admin_account_compan_044DD", "step.step_add_admin_account_compan_0748D", "content.p_add_admin_account_compan_0D4DB", "step.step_add_admin_account_compan_01B32" ] }, "content.p_add_admin_account_compan_0CE71", "content.note_add_admin_account_compan_025AE" ] }, "add_sep_account-latest-en.json": { "title": "title_add_sep_account_000001_35A99CA", "title_add_sep_account_000001_35A99CA": "Add a new service partner", "shortdesc": "shortdesc_add_sep_account_000002_8FE5181", "shortdesc_add_sep_account_000002_8FE5181": "Add a service partner account to your organization in WithSecure Elements. ", "content.p_add_sep_account_000011_4784EC9": "To create a service partner account:", "content.p_add_sep_account_000017_FB6D122": "The Organization Settings page is displayed.", "step.step_add_sep_account_000013_80FBE82": "Under Management, select Organization Settings on the sidebar.", "step.step_add_sep_account_000019_E1E54B4": "Select the General tab.", "content.p_add_sep_account_000020_700323A": "The Create service partner account view opens.", "step.step_add_sep_account_00001C_78DF4D2": "Select and then select Create service partner account.", "step.step_add_sep_account_000022_E5C2FF1": "Enter a name for the organization account, and select Save.", "content.p_add_sep_account_000025_336B3B8": "The service partner account is created.", "desc": [ "content.p_add_sep_account_000011_4784EC9", { "steps.steps_add_sep_account_000012_EB09F96": [ "step.step_add_sep_account_000013_80FBE82", "content.p_add_sep_account_000017_FB6D122", "step.step_add_sep_account_000019_E1E54B4", "step.step_add_sep_account_00001C_78DF4D2", "content.p_add_sep_account_000020_700323A", "step.step_add_sep_account_000022_E5C2FF1" ] }, "content.p_add_sep_account_000025_336B3B8" ] }, "edit_admin_account-latest-en.json": { "title": "title_edit_admin_account_000001_721F", "title_edit_admin_account_000001_721F": "Edit or remove administrators", "shortdesc": "shortdesc_edit_admin_account_000002_5CE8", "shortdesc_edit_admin_account_000002_5CE8": "You can edit or remove administrators accounts. ", "content.p_edit_admin_account_000011_B5F9": "Edit an administrator's role assignments, or remove their access entirely — removing all roles automatically deletes the account.", "content.p_edit_admin_account_000017_44FB": "The Organization Settings page is displayed.", "step.step_edit_admin_account_000013_58F2": "Under Management, select Organization Settings on the sidebar.", "step.step_edit_admin_account_000019_FDB0": "Select the Security Administrators tab.", "content.p_edit_admin_account_00001F_DE47": "The Summary screen opens.", "step.step_edit_admin_account_00001C_E367": "In the Email column, select the email address of the administrator account that you want to edit or remove.", "substep.substep_edit_admin_account_000024_AAD5": "Make the needed changes to the administrator roles.", "substep.substep_edit_admin_account_000026_CD67": "Select Save.", "content.p_edit_admin_account_000029_9015": "The details of the administrator account are updated.", "step.step_edit_admin_account_000021_CD24": "To edit the details of the administrator account, do the following:", "content.note_edit_admin_account_00002E_EEB1": "Note: When you remove all the access rights from an administrator account, the account is automatically deleted when you save the changes.", "content.p_edit_admin_account_00002F_0B54": "The administrator account is deleted.", "step.step_edit_admin_account_00002A_8611": "To remove the administrator account, select Delete.", "desc": [ "content.p_edit_admin_account_000011_B5F9", { "steps.steps_edit_admin_account_000012_FF92": [ "step.step_edit_admin_account_000013_58F2", "content.p_edit_admin_account_000017_44FB", "step.step_edit_admin_account_000019_FDB0", "step.step_edit_admin_account_00001C_E367", "content.p_edit_admin_account_00001F_DE47", "step.step_edit_admin_account_000021_CD24", { "substeps.substepsalpha_editalpha_adminalpha_accountalpha_000023alpha_7A80": [ "substep.substep_edit_admin_account_000024_AAD5", "substep.substep_edit_admin_account_000026_CD67" ] }, "content.p_edit_admin_account_000029_9015", "step.step_edit_admin_account_00002A_8611", "content.note_edit_admin_account_00002E_EEB1", "content.p_edit_admin_account_00002F_0B54" ] } ] }, "managing_api_clients-latest-en.json": { "title": "title_managing_api_clients_0000002CB", "title_managing_api_clients_0000002CB": "Create an API client", "shortdesc": "shortdesc_managing_api_clients_000006942", "shortdesc_managing_api_clients_000006942": "You can create an API client to let an application use the Elements API with specific access rights.", "content.p_managing_api_clients_00001A365": "An API client provides credentials that let an application use the Elements API. An API client has either full access or is limited to read-only access, depending on whether you select the Read-only option when you create it. For the available API operations, see the Elements API reference.", "content.p_managing_api_clients_0000116B7": "To create an API client:", "content.p_managing_api_clients_000012C8E": "The Organization Settings page opens.", "step.step_managing_api_clients_00001699F": "Under Management, select Organization Settings on the sidebar.", "content.p_managing_api_clients_000029391": "The tab shows the organization's UUID and a list of existing API clients.", "step.step_managing_api_clients_00001C12B": "Select the API Clients tab.", "content.p_managing_api_clients_0000266AE": "The Add new API client dialog opens, starting with the Details step.", "step.step_managing_api_clients_00002CB09": "Select Add new.", "step.step_managing_api_clients_00002055A": "Select the organization for the API client, enter a description, and select Read-only to limit the client to read-only access.", "content.p_managing_api_clients_00002B94E": "The API client step opens, showing the generated client ID and secret.", "step.step_managing_api_clients_0000200BF": "Select Add.", "content.note_managing_api_clients_00003C43C": "Important: You cannot view or access the secret again after this step.", "step.step_managing_api_clients_00003CA09": "Copy the secret and store it in a safe place.", "content.p_managing_api_clients_00003EB1A": "The new API client appears in the list, with its client ID, access rights, and creation date.", "step.step_managing_api_clients_0000364CA": "Select I have copied and stored the secret, and then select Done.", "content.p_managing_api_clients_000033C14": "A new API client is created.", "desc": [ "content.p_managing_api_clients_00001A365", "content.p_managing_api_clients_0000116B7", { "steps.steps_managing_api_clients_0000175C0": [ "step.step_managing_api_clients_00001699F", "content.p_managing_api_clients_000012C8E", "step.step_managing_api_clients_00001C12B", "content.p_managing_api_clients_000029391", "step.step_managing_api_clients_00002CB09", "content.p_managing_api_clients_0000266AE", "step.step_managing_api_clients_00002055A", "step.step_managing_api_clients_0000200BF", "content.p_managing_api_clients_00002B94E", "step.step_managing_api_clients_00003CA09", "content.note_managing_api_clients_00003C43C", "step.step_managing_api_clients_0000364CA", "content.p_managing_api_clients_00003EB1A" ] }, "content.p_managing_api_clients_000033C14" ] }, "deleting_api_client-latest-en.json": { "title": "title_deleting_api_client_000001EC0E", "title_deleting_api_client_000001EC0E": "Delete an API client", "shortdesc": "shortdesc_deleting_api_client_0000021A5D", "shortdesc_deleting_api_client_0000021A5D": "You can delete an API client that an application no longer needs.", "content.p_deleting_api_client_00000F52EC": "When you delete an API client, any application that uses its credentials can no longer access the Elements API with them.", "content.p_deleting_api_client_000011B206": "To delete an API client:", "content.p_deleting_api_client_000017944E": "The Organization Settings page opens.", "step.step_deleting_api_client_000013AEF7": "Under Management, select Organization Settings on the sidebar.", "content.p_deleting_api_client_00001CCB5E": "The tab shows a list of the organization's API clients.", "step.step_deleting_api_client_000019C3C8": "Select the API Clients tab.", "content.p_deleting_api_client_00001FB88A": "The API client is deleted.", "step.step_deleting_api_client_00001DA45D": "In the row of the API client that you want to delete, select the trash icon, and confirm that you want to delete it.", "desc": [ "content.p_deleting_api_client_00000F52EC", "content.p_deleting_api_client_000011B206", { "steps.steps_deleting_api_client_0000125480": [ "step.step_deleting_api_client_000013AEF7", "content.p_deleting_api_client_000017944E", "step.step_deleting_api_client_000019C3C8", "content.p_deleting_api_client_00001CCB5E", "step.step_deleting_api_client_00001DA45D", "content.p_deleting_api_client_00001FB88A" ] } ] }, "recover_password-latest-en.json": { "title": "title_recover_password_000001_8110D1", "title_recover_password_000001_8110D1": "Recover your password", "shortdesc": "shortdesc_recover_password_000002_78DCA8", "shortdesc_recover_password_000002_78DCA8": "If you have forgotten your password, you can recover it through the Forgot password? link. ", "content.p_recover_password_000012_719707": "To recover your password:", "content.p_recover_password_000017_81960B": "The Reset password mail sent window opens.", "step.step_recover_password_000014_833DC0": "On the login page, select the Forgot password? link.", "step.step_recover_password_000018_88A752": "Enter your username or email address.", "step.step_recover_password_00001A_195867": "Select Send.", "content.p_recover_password_00001E_708881": "You will receive an email message with instruction on how to change your password.", "desc": [ "content.p_recover_password_000012_719707", { "steps.steps_recover_password_000013_111ADE": [ "step.step_recover_password_000014_833DC0", "content.p_recover_password_000017_81960B", "step.step_recover_password_000018_88A752", "step.step_recover_password_00001A_195867" ] }, "content.p_recover_password_00001E_708881" ] }, "task_changing_account_details-latest-en.json": { "title": "title_changing_account_details_0BE9E", "title_changing_account_details_0BE9E": "Change your account details", "shortdesc": "shortdesc_changing_account_details_0F3DF", "shortdesc_changing_account_details_0F3DF": "Change your user name in WithSecure Elements Security Center. Federated users manage their account details in their identity provider.", "content.p_changing_account_details_0BBCF": "You can change your user name in WithSecure Elements Security Center from your account settings.", "content.note_changing_account_details_0409B": "Important: If your organization uses federated sign-in (Entra ID), you cannot change your account details in WithSecure Elements Security Center. Manage your details in your identity provider instead.", "content.p_changing_account_details_0FF7F": "To change your user name:", "step.step_changing_account_details_01DA2": "Select at the top-right corner, then select My settings.", "step.step_changing_account_details_04AC8": "Under Details, enter a new user name.", "step.step_changing_account_details_0B68C": "Select Save.", "desc": [ "content.p_changing_account_details_0BBCF", "content.note_changing_account_details_0409B", "content.p_changing_account_details_0FF7F", { "steps.steps_changing_account_details_0E817": [ "step.step_changing_account_details_01DA2", "step.step_changing_account_details_04AC8", "step.step_changing_account_details_0B68C" ] } ], "related": [ "edit_admin_account-latest-en" ] }, "task_changing_view_mode-latest-en.json": { "title": "title_changing_view_mode_000001_272D", "title_changing_view_mode_000001_272D": "Change the view mode", "shortdesc": "shortdesc_changing_view_mode_000002_9DE8", "shortdesc_changing_view_mode_000002_9DE8": "Select a light, dark, or automatic view mode to customize the appearance of WithSecure Elements Security Center.", "content.p_changing_view_mode_000012_DF7F": "You can customize the appearance of Elements Security Center by selecting the view mode that best fits your preference. Dark mode is useful in low-light environments such as control rooms or during night shifts. To change the view mode:", "step.step_changing_view_mode_000015_15FF": "Select the user profile menu icon at the top-right corner of the portal.", "step.step_changing_view_mode_000017_B22B": "Select View mode.", "subchoice.choice_changing_view_mode_00001D_5F5F": "Light – a bright interface suitable for well-lit environments.", "subchoice.choice_changing_view_mode_00001F_05FA": "Dark – a darker interface that reduces eye strain in low-light conditions.", "subchoice.choice_changing_view_mode_000021_9FBB": "Automatic – matches the system settings of your device and switches between light and dark automatically.", "content.p_changing_view_mode_000023_25DD": "", "step.step_changing_view_mode_00001A_D875": "Select one of the following options:", "content.p_changing_view_mode_000026_8029": "The new view mode is applied immediately. You can change it at any time by repeating these steps.", "desc": [ "content.p_changing_view_mode_000012_DF7F", { "steps.steps_changing_view_mode_000014_3C75": [ "step.step_changing_view_mode_000015_15FF", "step.step_changing_view_mode_000017_B22B", "step.step_changing_view_mode_00001A_D875", { "subchoices.choices_changing_view_mode_00001C_0AFB": [ "subchoice.choice_changing_view_mode_00001D_5F5F", "subchoice.choice_changing_view_mode_00001F_05FA", "subchoice.choice_changing_view_mode_000021_9FBB" ] }, "content.p_changing_view_mode_000023_25DD" ] }, "content.p_changing_view_mode_000026_8029" ] }, "about_product_subscriptions-latest-en.json": { "title": "title_about_product_subscripti_0180C", "title_about_product_subscripti_0180C": "Taking Elements products into use", "shortdesc": "shortdesc_about_product_subscripti_0B7F0", "shortdesc_about_product_subscripti_0B7F0": "Taking WithSecure Elements products into use includes a number of steps.", "step.step_about_product_subscripti_041D0": "Adding a customer company, if not yet added.", "content.note_about_product_subscripti_0518F": "Note: Under Management > Subscriptions, you can view all your products, your available subscription keys, and when they expire.", "step.step_about_product_subscripti_054A3": "Getting a subscription.", "step.step_about_product_subscripti_04044": "Adding the subscription to the customer company.", "content.note_about_product_subscripti_098BB": "Note: You can find instructions for deploying Elements products in Common deployment methods.", "step.step_about_product_subscripti_0378F": "Deploying the product.", "desc": [ { "steps.ol_about_product_subscripti_0514C": [ "step.step_about_product_subscripti_041D0", "step.step_about_product_subscripti_054A3", "content.note_about_product_subscripti_0518F", "step.step_about_product_subscripti_04044", "step.step_about_product_subscripti_0378F", "content.note_about_product_subscripti_098BB" ] } ] }, "managing_company-latest-en.json": { "title": "title_managing_company_000001_924807", "title_managing_company_000001_924807": "Adding a customer company", "shortdesc": "shortdesc_managing_company_000002_300935", "shortdesc_managing_company_000002_300935": "To add a new customer company to your WithSecure Elements Security Center account, you must first add it as a new customer to your WithSecure Partner Portal account and purchase at least one WithSecure Elements product for it. ", "content.note_managing_company_000017_4D0B6B": "Note: Only Solution Provider and Service Partner users can add customer companies.", "content.p_managing_company_000018_B355F4": "If you need an administrator to manage the subscriptions and devices in the new customer company, create an administrator account through Elements Security Center.", "content.note_managing_company_00001B_FED8A7": "Note: The WithSecure Partner Portal is an online service that works with Elements Security Center. It provides tools, materials and an integrated eOrdering system to help with sales and support of WithSecure solutions.", "content.p_managing_company_000021_D5CF30": "The purchase order for the new customer must first be added successfully from your Partner Portal account. Once this happens, the customer is automatically added as a new company to your Elements Security Center account.", "content.p_managing_company_000023_B219F6": "You can then begin offering WithSecure Elements products to users in the customer company, as well as managing the subscriptions for purchased products.", "desc": [ "content.note_managing_company_000017_4D0B6B", "content.p_managing_company_000018_B355F4", "content.note_managing_company_00001B_FED8A7", "content.p_managing_company_000021_D5CF30", "content.p_managing_company_000023_B219F6" ], "related": [ "add_admin_account_company-latest-en" ] }, "adding_subscription_key-latest-en.json": { "title": "title_adding_subscription_key_00BE66", "title_adding_subscription_key_00BE66": "Assign a subscription key for a customer company", "shortdesc": "shortdesc_adding_subscription_key_003186", "shortdesc_adding_subscription_key_003186": "By assigning a subscription key for a company, you can add more computers to WithSecure Elements Security Center. ", "content.p_adding_subscription_key_002855": "You need to consider the following:", "step.step_adding_subscription_key_0011F4": "Solution Providers and Service Partners can assign subscription keys for their customer companies.", "step.step_adding_subscription_key_00B15C": "Company users can assign unused subscription keys that are provided by their partner to their own organizations.", "step.step_adding_subscription_key_002A62": "Users must be granted a full editing role in the Endpoint Protection software (applies to both computers and servers).", "content.note_adding_subscription_key_006860": "Note: Company users must request for a subscription key from their partner.", "step.step_adding_subscription_key_008A17": "The subscription must be allocated at a partner level (the subscription key must exist). The partner can find the subscription key in the Subscriptions view under Management on the sidebar.", "content.p_adding_subscription_key_004256": "To assign a subscription key:", "step.step_adding_subscription_key_00CD36": "Under Management, select Subscriptions on the sidebar.", "content.p_adding_subscription_key_00DD03": "A table opens listing the current subscriptions of the selected company.", "step.step_adding_subscription_key_006B7F": "Using the scope selector, select the company to which you want to assign the subscription key.", "content.p_adding_subscription_key_008F2A": "The Assign subscription page opens.", "step.step_adding_subscription_key_002B41": "Select Assign subscription above the filters.", "step.step_adding_subscription_key_003CD2": "Enter the new subscription key for the company, and select OK.", "content.p_adding_subscription_key_00978D": "The new subscription key is added to the company account.", "desc": [ "content.p_adding_subscription_key_002855", { "steps.ul_adding_subscription_key_0030B7": [ "step.step_adding_subscription_key_0011F4", "step.step_adding_subscription_key_00B15C", "step.step_adding_subscription_key_002A62", "step.step_adding_subscription_key_008A17", "content.note_adding_subscription_key_006860" ] }, "content.p_adding_subscription_key_004256", { "steps.steps_adding_subscription_key_00B3F3": [ "step.step_adding_subscription_key_00CD36", "step.step_adding_subscription_key_006B7F", "content.p_adding_subscription_key_00DD03", "step.step_adding_subscription_key_002B41", "content.p_adding_subscription_key_008F2A", "step.step_adding_subscription_key_003CD2" ] }, "content.p_adding_subscription_key_00978D" ] }, "ordering_products_existing_company-latest-en.json": { "title": "title_ordering_products_existi_00A31", "title_ordering_products_existi_00A31": "Order products for an existing customer company", "shortdesc": "shortdesc_ordering_products_existi_030C7", "shortdesc_ordering_products_existi_030C7": "Order WithSecure Elements products for an existing customer company via WithSecure Partner Portal.", "content.note_ordering_products_existi_0DBE3": "Note: Only Solution Providers and Service Partners can order products for customer companies.", "content.p_ordering_products_existi_0AD1C": "To order WithSecure Elements products for an existing customer company via WithSecure Partner Portal:", "content.note_ordering_products_existi_083AC": "Note: WithSecure Partner Portal requires separate login credentials from WithSecure Elements Security Center. If you do not yet have your login details, complete the Request Credentials form on the page and click Send. Allow up to 24 hours to receive your access credentials.", "content.p_ordering_products_existi_074B6": "The eOrdering page is displayed.", "step.step_ordering_products_existi_078A0": "Log in to the portal by opening the following link in your web browser: Partner Portal", "step.step_ordering_products_existi_04F16": "On the main page, select My Customers, and then select the name of the customer company for which you are ordering products.", "content.p_ordering_products_existi_0772F": "The Welcome to Ordering window opens.", "step.step_ordering_products_existi_050AD": "In the Order column, select either New SaaS Order or New Yearly Order.", "step.step_ordering_products_existi_029B5": "Under New Order, enter a reference number for your order.", "step.step_ordering_products_existi_03718": "Under Order Products, select Add Products.", "step.step_ordering_products_existi_0E3CB": "Select the required products and follow the ordering instructions.", "content.p_ordering_products_existi_0FEAB": "Once your purchase order is completed, the change in product information will be updated in your WithSecure Partner Portal and Elements Security Center accounts.", "desc": [ "content.note_ordering_products_existi_0DBE3", "content.p_ordering_products_existi_0AD1C", { "steps.steps_ordering_products_existi_02834": [ "step.step_ordering_products_existi_078A0", "content.note_ordering_products_existi_083AC", "content.p_ordering_products_existi_074B6", "step.step_ordering_products_existi_04F16", "step.step_ordering_products_existi_050AD", "content.p_ordering_products_existi_0772F", "step.step_ordering_products_existi_029B5", "step.step_ordering_products_existi_03718", "step.step_ordering_products_existi_0E3CB" ] }, "content.p_ordering_products_existi_0FEAB" ], "related": [ "adding_company-latest-en" ] }, "adding_company-latest-en.json": { "title": "title_adding_company_000001_B5EE73A4", "title_adding_company_000001_B5EE73A4": "Order products for a new customer company", "shortdesc": "shortdesc_adding_company_000002_7662FF53", "shortdesc_adding_company_000002_7662FF53": "Order WithSecure Elements products for a new customer company via WithSecure Partner Portal.", "content.note_adding_company_000014_59A01709": "Note: Only Solution Providers and Service Partners can order products for customer companies.", "content.p_adding_company_000015_1747D459": "To order WithSecure Elements products for a new customer company via WithSecure Partner Portal:", "content.note_adding_company_00001D_5BA2C18B": "Note: WithSecure Partner Portal requires separate login credentials from WithSecure Elements Security Center. If you do not yet have your login details, complete the Request Credentials form on the page and click Send. Allow up to 24 hours to receive your access credentials.", "content.p_adding_company_000022_4341A6EF": "The eOrdering page is displayed.", "step.step_adding_company_000019_B1D326CD": "Log in to the portal by opening the following link in your web browser: Partner Portal", "step.step_adding_company_000024_82597FFC": "On the main page, select New Order.", "content.p_adding_company_00002A_A82E8737": "The New Customer window opens.", "step.step_adding_company_000027_1198EC87": "Enter the name of the new customer company and select Add New.", "step.step_adding_company_00002C_35A08307": "Enter the customer details and select Save.", "step.step_adding_company_00002F_8BF9FE38": "Under New Order, enter a reference number for your order.", "step.step_adding_company_000032_15B2320F": "Under Order Products, select Add Products.", "step.step_adding_company_000036_67170DCE": "Select the required products and follow the ordering instructions.", "content.p_adding_company_000038_90B14D85": "Once your purchase order is completed, the new customer company is listed in your Partner Portal account, together with the purchased products.", "content.note_adding_company_00003A_D48CA417": "Note: It might take a while for the new customer company to show in your Elements Security Center account.", "desc": [ "content.note_adding_company_000014_59A01709", "content.p_adding_company_000015_1747D459", { "steps.steps_adding_company_000018_23CFA850": [ "step.step_adding_company_000019_B1D326CD", "content.note_adding_company_00001D_5BA2C18B", "content.p_adding_company_000022_4341A6EF", "step.step_adding_company_000024_82597FFC", "step.step_adding_company_000027_1198EC87", "content.p_adding_company_00002A_A82E8737", "step.step_adding_company_00002C_35A08307", "step.step_adding_company_00002F_8BF9FE38", "step.step_adding_company_000032_15B2320F", "step.step_adding_company_000036_67170DCE" ] }, "content.p_adding_company_000038_90B14D85", "content.note_adding_company_00003A_D48CA417" ] }, "viewing_subscriptions-latest-en.json": { "title": "title_viewing_subscriptions_00005E99", "title_viewing_subscriptions_00005E99": "View available product subscriptions", "shortdesc": "shortdesc_viewing_subscriptions_000080BE", "shortdesc_viewing_subscriptions_000080BE": "To view the available subscriptions: ", "content.p_viewing_subscriptions_0000D664": "The Subscriptions view lists every product subscription for the scope you're viewing, along with keys, status, and expiration, so you can find and manage them across your organizations.", "content.p_viewing_subscriptions_000057A1": "The Subscriptions view opens showing the subscriptions for each product, the subscriptions keys, and the organizations to which the subscriptions belong.", "content.note_viewing_subscriptions_0000D3E7": "Note: If the scope selector is set to display all the customer companies, by default, you see all the subscriptions.", "step.step_viewing_subscriptions_0000D774": "Under Management, select Subscriptions.", "cell.choptionhd_viewing_subscriptions_00000C73": "Option", "cell.chdeschd_viewing_subscriptions_0000AD4E": "Description", "cell.choption_viewing_subscriptions_000088C3": "Subscription key", "cell.chdesc_viewing_subscriptions_000092D8": "enter the relevant subscription key", "cell.choption_viewing_subscriptions_0000408E": "Product", "cell.chdesc_viewing_subscriptions_00002010": "select from a list of available products", "cell.choption_viewing_subscriptions_0000DF1D": "Expiration", "cell.chdesc_viewing_subscriptions_00006995": "select Valid to see valid subscriptions; Expiring in 14 days or Expiring in 60 days to see subscriptions that are expiring soon; or Expired to see only subscriptions that have expired", "cell.choption_viewing_subscriptions_0000C180": "Type", "cell.chdesc_viewing_subscriptions_00003E48": "you can select from the following subscription types: Commercial, Evaluation, Governmental, Educational, or Not For Resale.", "content.p_viewing_subscriptions_00003728": "To see the subscriptions for a specific customer company, use the scope selector and select the company that you wish to view.", "content.note_viewing_subscriptions_0000CE43": "Note: When you select to view a specific customer company, no filters are used.", "step.step_viewing_subscriptions_0000E59D": "You can use filtering to find the following:", "desc": [ "content.p_viewing_subscriptions_0000D664", { "steps.steps_viewing_subscriptions_00009D64": [ "step.step_viewing_subscriptions_0000D774", "content.p_viewing_subscriptions_000057A1", "content.note_viewing_subscriptions_0000D3E7", "step.step_viewing_subscriptions_0000E59D", { "table.table_viewing_subscriptions_0000AE4F": [ { "thead.chhead_viewing_subscriptions_0000CC67": [ "cell.choptionhd_viewing_subscriptions_00000C73", "cell.chdeschd_viewing_subscriptions_0000AD4E" ] }, { "row.chrow_viewing_subscriptions_00007122": [ "cell.choption_viewing_subscriptions_000088C3", "cell.chdesc_viewing_subscriptions_000092D8" ] }, { "row.chrow_viewing_subscriptions_0000FA6F": [ "cell.choption_viewing_subscriptions_0000408E", "cell.chdesc_viewing_subscriptions_00002010" ] }, { "row.chrow_viewing_subscriptions_000011DA": [ "cell.choption_viewing_subscriptions_0000DF1D", "cell.chdesc_viewing_subscriptions_00006995" ] }, { "row.chrow_viewing_subscriptions_00000AC6": [ "cell.choption_viewing_subscriptions_0000C180", "cell.chdesc_viewing_subscriptions_00003E48" ] } ] }, "content.p_viewing_subscriptions_00003728", "content.note_viewing_subscriptions_0000CE43" ] } ] }, "changing_subscription_key-latest-en.json": { "title": "title_changing_subscription_ke_061FD", "title_changing_subscription_ke_061FD": "Change the subscription key", "shortdesc": "shortdesc_changing_subscription_ke_0C3FC", "shortdesc_changing_subscription_ke_0C3FC": "Changes the subscription key for one or more devices in WithSecure Elements Security Center. ", "content.p_changing_subscription_ke_0BD38": "To change the subscription key:", "content.note_changing_subscription_ke_09E04": "Note: A subscription key cannot be changed for Elements Connector or any EPP subscription variant if the change would require downgrading to a subscription that does not include EPP.", "content.p_changing_subscription_ke_06AA1": "The Devices page opens.", "step.step_changing_subscription_ke_04FC1": "Under Environment, select Devices on the sidebar.", "content.p_changing_subscription_ke_0AEEC": "A menu is displayed at the bottom of the page.", "step.step_changing_subscription_ke_09E1E": "Select the devices for which you want to change the subscription key.", "step.step_changing_subscription_ke_018DD": "Select Change subscription.", "content.note_changing_subscription_ke_0C499": "Note: Under Management > Subscriptions, you can find the available subscription keys for the devices of the selected company.", "content.p_changing_subscription_ke_00358": "The new subscription key is applied to the selected devices.", "step.step_changing_subscription_ke_0508E": "Enter a new subscription key in the field that appears, and select Change subscription.", "desc": [ "content.p_changing_subscription_ke_0BD38", "content.note_changing_subscription_ke_09E04", { "steps.steps_changing_subscription_ke_03EF4": [ "step.step_changing_subscription_ke_04FC1", "content.p_changing_subscription_ke_06AA1", "step.step_changing_subscription_ke_09E1E", "content.p_changing_subscription_ke_0AEEC", "step.step_changing_subscription_ke_018DD", "step.step_changing_subscription_ke_0508E", "content.note_changing_subscription_ke_0C499", "content.p_changing_subscription_ke_00358" ] } ] }, "upgrade-latest-en.json": { "title": "title_upgrade_000001_10BB61D8", "title_upgrade_000001_10BB61D8": "Upgrading your subscriptions", "shortdesc": "shortdesc_upgrade_000002_C22E0742", "shortdesc_upgrade_000002_C22E0742": "Options for upgrading your WithSecure Elements subscriptions. ", "content.p_upgrade_000010_EA8DDDAD": "This chapter describes how to upgrade your WithSecure Elements subscriptions and the upgrade options that are available.", "desc": [ "content.p_upgrade_000010_EA8DDDAD" ] }, "upgrading_options-latest-en.json": { "title": "title_upgrading_options_000001_2C4C0", "title_upgrading_options_000001_2C4C0": "Upgrading your subscriptions", "shortdesc": "shortdesc_upgrading_options_000002_9F8FA", "shortdesc_upgrading_options_000002_9F8FA": "You can upgrade your subscription in two ways: ", "step.step_upgrading_options_00001A_5C4D4": "By changing the type of your subscription key (ordering a new one)", "step.step_upgrading_options_00001B_B8AF9": "By changing to another subscription key on your device", "content.p_upgrading_options_00001C_52830": "You have the following options in upgrading your subscriptions:", "step.step_upgrading_options_00001E_59FD1": "WithSecure Elements EPP for Computers to WithSecure Elements EPP for Computers Premium", "step.step_upgrading_options_000021_456DB": "WithSecure Elements EPP for Computers to WithSecure Elements EDR and EPP for Computers", "step.step_upgrading_options_000024_DBECB": "WithSecure Elements EPP for Computers to WithSecure Elements EDR and EPP for Computers Premium", "step.step_upgrading_options_000027_1CFD4": "WithSecure Elements EPP for Computers Premium to WithSecure Elements EDR and EPP for Computers Premium", "step.step_upgrading_options_00002A_51D6E": "WithSecure Elements EDR and EPP for Computers to WithSecure Elements EDR and EPP for Computers Premium", "step.step_upgrading_options_00002D_FBA2C": "WithSecure Elements EPP for Servers to WithSecure Elements EPP for Servers Premium", "step.step_upgrading_options_000030_305B8": "WithSecure Elements EPP for Servers Premium to WithSecure Elements EDR and EPP for Servers Premium", "content.note_upgrading_options_000033_48F60": "Note: You can use the same installer file for both Standard and Premium versions of WithSecure Elements EPP for Computers or WithSecure Elements EPP for Servers and any combination of WithSecure Elements EDR and EPP for Computers or WithSecure Elements EDR and EPP for Servers.", "content.p_upgrading_options_000038_D91F6": "If WithSecure Elements EDR is installed on a Windows computer, you need to reinstall it before you can upgrade to WithSecure Elements EDR for Computers or WithSecure Elements EDR for Computers Premium.", "desc": [ { "steps.ul_upgrading_options_000019_96530": [ "step.step_upgrading_options_00001A_5C4D4", "step.step_upgrading_options_00001B_B8AF9" ] }, "content.p_upgrading_options_00001C_52830", { "steps.ul_upgrading_options_00001D_44726": [ "step.step_upgrading_options_00001E_59FD1", "step.step_upgrading_options_000021_456DB", "step.step_upgrading_options_000024_DBECB", "step.step_upgrading_options_000027_1CFD4", "step.step_upgrading_options_00002A_51D6E", "step.step_upgrading_options_00002D_FBA2C", "step.step_upgrading_options_000030_305B8" ] }, "content.note_upgrading_options_000033_48F60", "content.p_upgrading_options_000038_D91F6" ] }, "federated_single_sign_on-latest-en.json": { "title": "title_federated_single_sign_on_03EAF", "title_federated_single_sign_on_03EAF": "Federated single sign-on", "shortdesc": "shortdesc_federated_single_sign_on_037DF", "shortdesc_federated_single_sign_on_037DF": "Federated single sign-on (FSSO) lets users authenticate once with an identity provider and access several applications without logging in separately.", "content.p_federated_single_sign_on_0F3F6": "Federated single sign-on (FSSO) lets users authenticate once and access several applications or services across different domains or organizations. Users do not need to log in separately for each one. When users log in, they submit their credentials, such as a username and password, to an identity provider. The identity provider then checks these credentials. After successful authentication, the identity provider generates a digitally-signed token. This token proves the user's identity. When users access other applications or services in different domains or organizations, their browser automatically uses this token. The cloud identity service checks the token and grants access without requiring the user to log in again.", "content.p_federated_single_sign_on_0DB35": "FSSO makes access across various systems simpler. It lets users authenticate once and move smoothly between different applications or services. It also improves security and user experience by removing the need for multiple logins. When a user is removed from an identity provider, they automatically lose the ability to log in to Elements Security Center. This makes managing user access easier and more secure.", "desc": [ "content.p_federated_single_sign_on_0F3F6", "content.p_federated_single_sign_on_0DB35" ] }, "federated_sso_prereqs-latest-en.json": { "title": "title_federated_sso_prereqs_0000ACF3", "title_federated_sso_prereqs_0000ACF3": "Prerequisites", "shortdesc": "shortdesc_federated_sso_prereqs_00006083", "shortdesc_federated_sso_prereqs_00006083": "To link an Entra account to a WithSecure Elements account, the Entra ID tenant account must have the email address set up and matching the email address of the corresponding Elements account.", "content.p_federated_sso_prereqs_0000BCF9": "If the email address is not set up or does not match the email address of the corresponding Elements account, the linking fails, and the user is not able to access WithSecure Elements Security Center. User email address information is visible in the Microsoft Entra Admin Center under Contact Information > Email.", "content.note_federated_sso_prereqs_00005962": "Note: All users must have an Elements account. There is no automatic user provisioning from Microsoft Entra ID.", "desc": [ "content.p_federated_sso_prereqs_0000BCF9", "content.note_federated_sso_prereqs_00005962" ] }, "sso_considerations-latest-en.json": { "title": "title_before_implementing_sso_00966A", "title_before_implementing_sso_00966A": "Before implementing single sign-on (SSO)", "shortdesc": "shortdesc_before_implementing_sso_005288", "shortdesc_before_implementing_sso_005288": "These requirements and considerations apply before you implement single sign-on (SSO).", "content.title_before_implementing_sso_00B273": "Why is plus addressing problematic?", "content.p_before_implementing_sso_007638": "Microsoft Entra ID does not support email aliases or email addresses with plus addressing for authentication. When you configure SSO and start to use it, all email aliases and Elements user accounts with plus addressing stop working.", "content.note_before_implementing_sso_00C563": "Important: Do not configure SSO using email aliases or Elements user accounts with plus addressing.", "content.title_before_implementing_sso_005A2F": "Frequently asked questions", "content.dt_before_implementing_sso_00004B": "How to avoid users losing access to remove federation?", "content.dd_before_implementing_sso_00C9B6": "When implementing federation, make sure that there is a user account without plus addressing or email alias. Otherwise, you may lose access to Elements Security Center.", "content.dt_before_implementing_sso_00256E": "How does SSO change the login process?", "content.dd_before_implementing_sso_00F4D3": "After federation, users authenticate through Microsoft Entra ID, eliminating the need for a separate login flow for Elements Security Center.", "content.dt_before_implementing_sso_0061F2": "How often do users with Elements Entra ID need to authenticate to Elements Security Center?", "content.dd_before_implementing_sso_004ADE": "If users do not have a valid federated authentication session, Elements Security Center requires them to log in and authenticate.", "content.title_before_implementing_sso_00A373": "Global impact of SSO", "content.p_before_implementing_sso_007EEA": "Implementing SSO affects all organizations and hierarchies with user accounts from federated email domain. Some users have accounts across various partner- and service partner-level hierarchies, and changes will affect all these hierarchies. For example, if Partner A has their own Solution Provider (SOP) and shares a domain with other partners' SOPs, the SSO affects the Elements level, not only the specific SOP. An email domain can only be federated once within an organization, but this will affect all user accounts associated with that domain.", "content.title_before_implementing_sso_0015A0": "Hierarchy-level considerations", "content.p_before_implementing_sso_00F91C": "Make sure to generate SSO from the appropriate hierarchy level, because it can be only modified from there.", "content.title_before_implementing_sso_0013CA": "Handling Microsoft Entra ID account removal", "content.p_before_implementing_sso_001400": "If a Microsoft Entra ID account is removed, the Elements administrator is not automatically deleted, but the account will no longer function. You need to manually delete the administrator.", "desc": [ "content.title_before_implementing_sso_00B273", "content.p_before_implementing_sso_007638", "content.note_before_implementing_sso_00C563", "content.title_before_implementing_sso_005A2F", { "dl.dl_before_implementing_sso_00D7F0": [ { "dlentry.how-to-avoid-users-losing-3BD0": [ "content.dt_before_implementing_sso_00004B", "content.dd_before_implementing_sso_00C9B6" ] }, { "dlentry.how-does-sso-change-the-lo74D6": [ "content.dt_before_implementing_sso_00256E", "content.dd_before_implementing_sso_00F4D3" ] }, { "dlentry.how-often-do-users-with-el475D": [ "content.dt_before_implementing_sso_0061F2", "content.dd_before_implementing_sso_004ADE" ] } ] }, "content.title_before_implementing_sso_00A373", "content.p_before_implementing_sso_007EEA", "content.title_before_implementing_sso_0015A0", "content.p_before_implementing_sso_00F91C", "content.title_before_implementing_sso_0013CA", "content.p_before_implementing_sso_001400" ] }, "setting_up_federated_single_sign_on-latest-en.json": { "title": "title_setting_up_federated_sin_0A06F", "title_setting_up_federated_sin_0A06F": "Set up federated single sign-on with Microsoft Entra ID", "shortdesc": "shortdesc_setting_up_federated_sin_00DF4", "shortdesc_setting_up_federated_sin_00DF4": "Sets up federated single sign-on so users can sign in with their Microsoft Entra ID credentials.", "step.step_setting_up_federated_sin_08B54": "A non-federated domain - a domain name, for example yourcompanydomain.com, that is not federated with Elements Security Center", "step.step_setting_up_federated_sin_08B43": "Elements Security Center account - an account in Elements Security Center with the assigned Endpoint Protection Full editing permission. This account is necessary for managing federated domains and later logging in to Elements Security Center using an Entra ID account.", "content.note_setting_up_federated_sin_09CC9": "Note: The user who is federating a domain must have a global administrator role in the Entra ID tenant for this scenario. Once the domain is federated, any user with an Entra account can log in, provided they also have a corresponding Elements account.", "step.step_setting_up_federated_sin_04A69": "Entra ID tenant account - an account in the Entra ID tenant that manages the domain that you want to federate. This account is essential for logging in to Elements Security Center and federating the domain.", "content.p_setting_up_federated_sin_069F8": "Set up federated single sign-on so users can sign in to Elements with their Microsoft Entra ID credentials.", "step.step_setting_up_federated_sin_03EA5": "Log in to WithSecure Elements Security Center sign-in page.", "content.p_setting_up_federated_sin_07FD0": "The Configure federated single sign-on window opens showing the status of the domain that matches your email address.", "step.step_setting_up_federated_sin_08884": "Under Management > Organization Settings > Security Administrators , select Configure federated single sign-on.", "step.step_setting_up_federated_sin_044AE": "Select Log in to Microsoft", "step.step_setting_up_federated_sin_0BEFB": "In the pop-up window that opens, enter your password for the Entra tenant, and select Sign in.", "content.p_setting_up_federated_sin_0D57F": "The Single Sign-on Access Federation window is refreshed and shows Validation successful.", "content.note_setting_up_federated_sin_0C2F8": "Note: If you select Cancel, the window shows Validation failed. Other reasons for unsuccessful validation may include the process taking too long or a lack of the Global Administrator role.", "step.step_setting_up_federated_sin_01C97": "Select Consent on behalf of your organization and then select Accept.", "content.p_setting_up_federated_sin_04406": "After you have federated the domain, its status changes to The Federated single sign-on is enabled for [domain name].", "step.step_setting_up_federated_sin_0E648": "To federate the domain, select Enable federated single sign-on.", "desc": [ { "steps.ul_setting_up_federated_sin_0A097": [ "step.step_setting_up_federated_sin_08B54", "step.step_setting_up_federated_sin_08B43", "step.step_setting_up_federated_sin_04A69", "content.note_setting_up_federated_sin_09CC9" ] }, "content.p_setting_up_federated_sin_069F8", { "steps.steps_setting_up_federated_sin_0BBBE": [ "step.step_setting_up_federated_sin_03EA5", "step.step_setting_up_federated_sin_08884", "content.p_setting_up_federated_sin_07FD0", "step.step_setting_up_federated_sin_044AE", "step.step_setting_up_federated_sin_0BEFB", "step.step_setting_up_federated_sin_01C97", "content.p_setting_up_federated_sin_0D57F", "content.note_setting_up_federated_sin_0C2F8", "step.step_setting_up_federated_sin_0E648", "content.p_setting_up_federated_sin_04406" ] } ], "related": [ "logging_in_to_a_federated_domain-latest-en" ] }, "linking_user_identities-latest-en.json": { "title": "title_linking_user_identities_00F693", "title_linking_user_identities_00F693": "Link user identities", "shortdesc": "shortdesc_linking_user_identities_008855", "shortdesc_linking_user_identities_008855": "Links user identities in Elements Security Center for federated domains.", "content.note_linking_user_identities_00D4DF": "Note: Every user with an email address in the domain only needs to link their identity once, during their initial login after the domain has been federated.", "content.p_linking_user_identities_0086F9": "Make sure you have the following:", "step.step_linking_user_identities_00D2E4": "A federated domain", "content.note_linking_user_identities_00E3E5": "Note: These accounts are manually created by other administrators. This flow occurs when the users log in for the first time.", "step.step_linking_user_identities_005FE2": "A user with an Elements account whose email address belongs to the federated domain", "step.step_linking_user_identities_00AA31": "The user must not be currently logged in", "step.step_linking_user_identities_006DB7": "The account that is used to log in to Elements Security Center should not have undergone identity linking before", "content.p_linking_user_identities_00FAF0": "To link identities:", "step.step_linking_user_identities_0003D6": "Log in to WithSecure Elements Security Center sign-in page.", "step.step_linking_user_identities_00A595": "Enter your email address and select Continue.", "content.note_linking_user_identities_00CC0B": "Note: Depending on the domain configuration, you may need to complete multi-factor authentication (MFA).", "step.step_linking_user_identities_0035C0": "If your email address is already authenticated in the domain, you are redirected to the identity linking flow; if your email address is not yet authenticated in the domain, you are asked to provide your domain password.", "step.step_linking_user_identities_00633C": "Enter your email address again, and select Continue.", "content.p_linking_user_identities_0086F2": "A window opens confirming that your business account is now going to be linked (federated) with your Entra ID account.", "step.step_linking_user_identities_00AA33": "Next, enter your Elements account password and select Continue", "step.step_linking_user_identities_007BE2": "Select Continue to proceed.", "desc": [ "content.note_linking_user_identities_00D4DF", "content.p_linking_user_identities_0086F9", { "steps.ul_linking_user_identities_001AC4": [ "step.step_linking_user_identities_00D2E4", "step.step_linking_user_identities_005FE2", "content.note_linking_user_identities_00E3E5", "step.step_linking_user_identities_00AA31", "step.step_linking_user_identities_006DB7" ] }, "content.p_linking_user_identities_00FAF0", { "steps.steps_linking_user_identities_00D573": [ "step.step_linking_user_identities_0003D6", "step.step_linking_user_identities_00A595", "step.step_linking_user_identities_0035C0", "content.note_linking_user_identities_00CC0B", "step.step_linking_user_identities_00633C", "step.step_linking_user_identities_00AA33", "content.p_linking_user_identities_0086F2", "step.step_linking_user_identities_007BE2" ] } ] }, "removing_federated_domain-latest-en.json": { "title": "title_removing_federated_domai_0DA32", "title_removing_federated_domai_0DA32": "Remove federation from a domain", "shortdesc": "shortdesc_removing_federated_domai_02FB3", "shortdesc_removing_federated_domai_02FB3": "Removes single sign-on federation from a domain.", "step.step_removing_federated_domai_03A4F": "A federated domain", "step.step_removing_federated_domai_04AA7": "An account in Elements Security Center with Endpoint Protection Full editing permission and an email address in the federated domain.", "content.note_removing_federated_domai_0234E": "Note: When federation is removed from a domain, users that have email address in that domain must use their Elements credentials to log in. However, if an Elements account was created after the domain was federated, users have not received an email with their initial password and do not know their Elements credentials. In that case, they must reset their password.", "content.p_removing_federated_domai_0199C": "To remove federation:", "step.step_removing_federated_domai_0F485": "Log in to WithSecure Elements Security Center sign-in page.", "content.p_removing_federated_domai_00F4F": "The Federated Single sign-on window opens showing the status of the domain that matches your email address.", "step.step_removing_federated_domai_03C6B": "Select SSO Access Federation.", "content.p_removing_federated_domai_0678A": "A confirmation window opens.", "step.step_removing_federated_domai_0E82A": "Select Remove Federated Single sign-on.", "content.p_removing_federated_domai_01DF6": "Single sign-on federation is removed from the domain account.", "step.step_removing_federated_domai_0C037": "Select Ok.", "desc": [ { "steps.ul_removing_federated_domai_079B2": [ "step.step_removing_federated_domai_03A4F", "step.step_removing_federated_domai_04AA7" ] }, "content.note_removing_federated_domai_0234E", "content.p_removing_federated_domai_0199C", { "steps.steps_removing_federated_domai_0A8B2": [ "step.step_removing_federated_domai_0F485", "step.step_removing_federated_domai_03C6B", "content.p_removing_federated_domai_00F4F", "step.step_removing_federated_domai_0E82A", "content.p_removing_federated_domai_0678A", "step.step_removing_federated_domai_0C037", "content.p_removing_federated_domai_01DF6" ] } ] }, "add_managing_devices_company-latest-en.json": { "title": "title_add_managing_devices_com_080D2", "title_add_managing_devices_com_080D2": "Adding devices for management", "shortdesc": "shortdesc_add_managing_devices_com_05B8C", "shortdesc_add_managing_devices_com_05B8C": "To monitor and manage the security of a computer or mobile device by using your WithSecure Elements account, you must first install an Endpoint Protection software on the computer or mobile device. ", "content.p_add_managing_devices_com_09F26": "Once the software is installed, the device will be added to your WithSecure Elements Security Center account. Through Elements Security Center, you can follow the performance of the security product, as well as manage its subscription, updates and other standard tasks.", "content.note_add_managing_devices_com_05D73": "Note: When you add a new device, the default profile is applied to it.", "content.p_add_managing_devices_com_0FA8B": "There are several ways in which you can install the Endpoint Protection software on the device that you wish to manage:", "step.step_add_managing_devices_com_06958": "Send to the device user an email with a link to the software installer and instructions on how to install and activate it.", "content.note_add_managing_devices_com_09BC5": "Note: This does not apply to WithSecure Elements Mobile Protection.", "step.step_add_managing_devices_com_097C3": "Download the software directly from Elements Security Center and transfer it to the device.", "step.step_add_managing_devices_com_000F3": "Deploy the software through GPO, images, or RMM or MDM tools.", "content.p_add_managing_devices_com_0CF35": "You can add several mobile devices at one go by importing a CSV file containing the required details for each device.", "content.note_add_managing_devices_com_05345": "Note: Before you can add a new device, you must have a subscription for an Endpoint Protection software with at least one free installation available. The number of free installations available to a company will determine the number of devices you can add to it.", "desc": [ "content.p_add_managing_devices_com_09F26", "content.note_add_managing_devices_com_05D73", "content.p_add_managing_devices_com_0FA8B", { "steps.ul_add_managing_devices_com_03644": [ "step.step_add_managing_devices_com_06958", "step.step_add_managing_devices_com_097C3", "content.note_add_managing_devices_com_09BC5", "step.step_add_managing_devices_com_000F3" ] }, "content.p_add_managing_devices_com_0CF35", "content.note_add_managing_devices_com_05345" ] }, "adding_devices-latest-en.json": { "title": "title_adding_devices_000001_2A77A8FD", "title_adding_devices_000001_2A77A8FD": "Distributing WithSecure software", "shortdesc": "shortdesc_adding_devices_000002_1E3116C2", "shortdesc_adding_devices_000002_1E3116C2": "Ways to distribute WithSecure Elements Endpoint Protection software to your devices.", "subchoice.choice_adding_devices_000018_75C69421": "WithSecure Elements EPP for Computers (Windows and Mac)", "subchoice.choice_adding_devices_000019_3832C9AF": "WithSecure Elements EDR and EPP for Computers (Windows and Mac)", "content.note_adding_devices_00001B_D9B88F20": "Note: When installing the software as a standalone, you must add an additional command-line parameter '--skip-sidegrade' to turn off automatic uninstallation of the existing Endpoint Protection software.", "subchoice.choice_adding_devices_00001A_4BA5B3B6": "WithSecure Elements EDR for Computers (Windows, Mac, and Linux)", "subchoice.choice_adding_devices_00001D_55CFD5E7": "WithSecure Elements EPP for Computers Premium (Windows only)", "subchoice.choice_adding_devices_00001E_F46CFF42": "WithSecure Elements EDR and EPP for Computers Premium (Windows only)", "subchoice.choice_adding_devices_00001F_E79DADA8": "WithSecure Elements Exposure Management (Windows only)", "step.step_adding_devices_000015_1E25A3DE": "You can install the following software using the same WithSecure Elements Agent for Computers installation package. The subscription key determines which software is installed:", "subchoice.choice_adding_devices_000025_A5ECB8D8": "WithSecure Elements EPP for Servers (Windows and Linux)", "subchoice.choice_adding_devices_000026_04340A67": "WithSecure Elements EDR for Servers (Windows only)", "subchoice.choice_adding_devices_000027_2F01EE5A": "WithSecure Elements EPP for Servers Premium (Windows only)", "subchoice.choice_adding_devices_000028_541EEE62": "WithSecure Elements EDR and EPP for Servers Premium (Windows and Linux)", "subchoice.choice_adding_devices_000029_EF8464B4": "WithSecure Elements Exposure Management (Windows only)", "step.step_adding_devices_000022_673E60D0": "You can install the following software using the same WithSecure Elements Agent for Servers installation package. The subscription key determines which software is installed:", "content.note_adding_devices_000032_5887A75A": "Note: With all the Elements software (except for the Elements Connector), you can add devices by selecting the Add new device option and then choosing to send either one invitation or importing data from a CSV file to send multiple invitations.", "subchoice.choice_adding_devices_00002F_06DFDE8E": "By sending an installation email via the WithSecure Elements EPP portal using the Add new device.", "subchoice.choice_adding_devices_000035_730CFBED": "By sending an installation email via a third-party MDM software.", "step.step_adding_devices_00002C_D16DCDAB": "You can install WithSecure Elements Mobile Protection in two ways:", "step.step_adding_devices_000037_94B1AABA": "For installing WithSecure Elements Connector, see instructions at WithSecure Elements Connector documentation.", "desc": [ { "steps.ul_adding_devices_000014_0193D12B": [ "step.step_adding_devices_000015_1E25A3DE", { "subchoices.ul_adding_devices_000017_8DC4EBC4": [ "subchoice.choice_adding_devices_000018_75C69421", "subchoice.choice_adding_devices_000019_3832C9AF", "subchoice.choice_adding_devices_00001A_4BA5B3B6", "content.note_adding_devices_00001B_D9B88F20", "subchoice.choice_adding_devices_00001D_55CFD5E7", "subchoice.choice_adding_devices_00001E_F46CFF42", "subchoice.choice_adding_devices_00001F_E79DADA8" ] } ] }, { "steps.ul_adding_devices_000021_81AEB82E": [ "step.step_adding_devices_000022_673E60D0", { "subchoices.ul_adding_devices_000024_C22A84D2": [ "subchoice.choice_adding_devices_000025_A5ECB8D8", "subchoice.choice_adding_devices_000026_04340A67", "subchoice.choice_adding_devices_000027_2F01EE5A", "subchoice.choice_adding_devices_000028_541EEE62", "subchoice.choice_adding_devices_000029_EF8464B4" ] } ] }, { "steps.ul_adding_devices_00002B_A43F4FAD": [ "step.step_adding_devices_00002C_D16DCDAB", { "subchoices.ul_adding_devices_00002E_A5D5C538": [ "subchoice.choice_adding_devices_00002F_06DFDE8E", "content.note_adding_devices_000032_5887A75A", "subchoice.choice_adding_devices_000035_730CFBED" ] } ] }, { "steps.ul_adding_devices_000036_A0DC51A7": [ "step.step_adding_devices_000037_94B1AABA" ] } ] }, "adding_device-latest-en.json": { "title": "title_adding_device_000001_20DF35FD", "title_adding_device_000001_20DF35FD": "Send an installation link via email", "shortdesc": "shortdesc_adding_device_000002_F09209C0", "shortdesc_adding_device_000002_F09209C0": "You can send company users an email with an installation link for an WithSecure Elements software. ", "content.note_adding_device_000013_FD930AE1": "Note: The installation link is valid for 30 days.", "content.p_adding_device_000014_73365A35": "Using the link, company users can install the product on one of their device at their own convenience. Once the product is installed, the device appears in your WithSecure Elements account.", "content.p_adding_device_000016_E40D2C4B": "To provide the users with the software that you want them to install:", "content.p_adding_device_00001C_FC6C9307": "The Devices page is displayed.", "step.step_adding_device_000018_5B94BE0F": "Under Environment, select Devices on the sidebar.", "content.p_adding_device_000022_FD54E6CA": "A menu is displayed.", "step.step_adding_device_00001E_CFA6CD79": "Select next to Devices.", "content.p_adding_device_000026_1FCC72F9": "The Add new device page opens.", "content.note_adding_device_000028_991D6A5C": "Note: If the scope selector is set to focus on a specific company, an Add new device button will also appear on the Home page, which you can click to go directly to the Add new device form.", "step.step_adding_device_000023_7FECE972": "From the menu, select Add new device.", "step.step_adding_device_00002C_05162A0E": "Select the product.", "step.step_adding_device_00002E_A5DA3827": "From the drop-down menu, choose the language in which you want to send the invitation.", "content.p_adding_device_000032_3CB8844B": "To send multiple invitations, under Import from CSV file, select Choose file to select a CSV file from which you want to import data. Multiple email addresses must be separated by commas.", "step.step_adding_device_000030_ECD95BC2": "Enter the email address of the recipient to whom you want to send the invitation and other, optional details.", "content.p_adding_device_000038_03602314": "The listed recipients receive an email that contains a link to the download site and instructions for downloading and installing the product that you selected.", "content.note_adding_device_000039_6F12971B": "Note: To see the pending invitations, first select
next to Devices, and then select Manage device invitations.", "step.step_adding_device_000035_72845EBB": "Select Send.", "content.note_adding_device_00003D_314D2417": "Note: The software is customized to use the subscription key that you selected on the Add new device page.", "content.p_adding_device_000040_BDB238DB": "Once the product has been installed and activated on the device, it will show on the Devices page and the invitation disappears from the managed devices invitations page.", "desc": [ "content.note_adding_device_000013_FD930AE1", "content.p_adding_device_000014_73365A35", "content.p_adding_device_000016_E40D2C4B", { "steps.steps_adding_device_000017_669B225B": [ "step.step_adding_device_000018_5B94BE0F", "content.p_adding_device_00001C_FC6C9307", "step.step_adding_device_00001E_CFA6CD79", "content.p_adding_device_000022_FD54E6CA", "step.step_adding_device_000023_7FECE972", "content.p_adding_device_000026_1FCC72F9", "content.note_adding_device_000028_991D6A5C", "step.step_adding_device_00002C_05162A0E", "step.step_adding_device_00002E_A5DA3827", "step.step_adding_device_000030_ECD95BC2", "content.p_adding_device_000032_3CB8844B", "step.step_adding_device_000035_72845EBB", "content.p_adding_device_000038_03602314", "content.note_adding_device_000039_6F12971B" ] }, "content.note_adding_device_00003D_314D2417", "content.p_adding_device_000040_BDB238DB" ], "related": [ "download_software-latest-en" ] }, "download_software-latest-en.json": { "title": "title_download_software_000001_62F01", "title_download_software_000001_62F01": "Download software from Elements Security Center", "shortdesc": "shortdesc_download_software_000002_11683", "shortdesc_download_software_000002_11683": "You can download WithSecure software installation packages through WithSecure Elements Security Center. ", "content.p_download_software_000014_8264C": "To download the software:", "step.step_download_software_000016_22FC8": "Log in to Elements Security Center.", "content.p_download_software_00001C_DEC4A": "The Downloads page opens.", "step.step_download_software_000019_76A9F": "Select Downloads on the sidebar.", "step.step_download_software_00001E_976B4": "Locate the section for your device type, for example WithSecure Elements Agent for Computers or WithSecure Elements Agent for Servers.", "subchoice.choice_download_software_000026_78974": "Windows: Download .exe or Download .msi", "subchoice.choice_download_software_000029_2222F": "Mac: Download .mpkg", "subchoice.choice_download_software_00002B_0D2F1": "Linux: Download amd64 or Download arm64", "content.p_download_software_000024_A1A21": "The available buttons depend on the operating system:", "content.p_download_software_00002E_F0838": "The software is downloaded. The subscription key associated with your account is embedded in the installer.", "step.step_download_software_000022_49DD1": "Select the download button for your operating system.", "content.p_download_software_00002F_AB884": "Once the desired software has been downloaded, you can transfer and install it on the computer or mobile device you wish to manage. The subscription key is embedded in the product.", "content.note_download_software_000031_90A6A": "Important: Do not use a subscription key for \"WithSecure Elements EDR only\" in devices that have the WithSecure Elements EDR for Computers or vice versa. It may break the software, which you then need to manually remove.", "content.p_download_software_000034_E877D": "After downloading the software, you need to deploy it.", "desc": [ "content.p_download_software_000014_8264C", { "steps.steps_download_software_000015_D7001": [ "step.step_download_software_000016_22FC8", "step.step_download_software_000019_76A9F", "content.p_download_software_00001C_DEC4A", "step.step_download_software_00001E_976B4", "step.step_download_software_000022_49DD1", "content.p_download_software_000024_A1A21", { "subchoices.ul_download_software_000025_498C8": [ "subchoice.choice_download_software_000026_78974", "subchoice.choice_download_software_000029_2222F", "subchoice.choice_download_software_00002B_0D2F1" ] }, "content.p_download_software_00002E_F0838" ] }, "content.p_download_software_00002F_AB884", "content.note_download_software_000031_90A6A", "content.p_download_software_000034_E877D" ] }, "manage_automatic_deletion-latest-en.json": { "title": "title_manage_automatic_deletio_07E0E", "title_manage_automatic_deletio_07E0E": "Manage automatic deletion of devices", "shortdesc": "shortdesc_manage_automatic_deletio_02A85", "shortdesc_manage_automatic_deletio_02A85": "You can select to automatically delete devices that have been offline for a set number of days. ", "content.note_manage_automatic_deletio_02D7A": "Note: This feature does not apply to mobile devices.", "content.note_manage_automatic_deletio_0363E": "Note: You can set the automatic removal of devices only on the Company level.", "content.p_manage_automatic_deletio_000B4": "You can define the period that a device needs to be offline before it will be deleted. If a deleted device becomes active, it is shown again in Elements Security Center if there are free seats in the subscription. If the subscription is full, the device is not shown in Elements Security Center and is not protected.", "content.p_manage_automatic_deletio_0100A": "To turn on automatic deletion of devices:", "content.p_manage_automatic_deletio_0018E": "The Devices page opens.", "step.step_manage_automatic_deletio_00E95": "Under Environment, select Devices on the sidebar.", "content.p_manage_automatic_deletio_076DB": "A menu is displayed.", "step.step_manage_automatic_deletio_05E3B": "Select next to Devices.", "content.p_manage_automatic_deletio_04D73": "The Manage automatic deletion page opens.", "step.step_manage_automatic_deletio_0BC2B": "From the menu, select Manage automatic deletion.", "step.step_manage_automatic_deletio_09E08": "Turn on Automatically delete devices....", "content.note_manage_automatic_deletio_02745": "Note: The minimum number of days is seven (7).", "step.step_manage_automatic_deletio_0C906": "In the box, enter the number of days for a device to be offline before it is deleted.", "content.note_manage_automatic_deletio_07C35": "Important: If a removed device resumes its activity after being removed, it is automatically added back to your subscription, if your subscription has free space. However, if your subscription is full, the device is not returned to the subscription and is left without protection.", "step.step_manage_automatic_deletio_0F1B7": "Select Save.", "desc": [ "content.note_manage_automatic_deletio_02D7A", "content.note_manage_automatic_deletio_0363E", "content.p_manage_automatic_deletio_000B4", "content.p_manage_automatic_deletio_0100A", { "steps.steps_manage_automatic_deletio_0B43D": [ "step.step_manage_automatic_deletio_00E95", "content.p_manage_automatic_deletio_0018E", "step.step_manage_automatic_deletio_05E3B", "content.p_manage_automatic_deletio_076DB", "step.step_manage_automatic_deletio_0BC2B", "content.p_manage_automatic_deletio_04D73", "step.step_manage_automatic_deletio_09E08", "step.step_manage_automatic_deletio_0C906", "content.note_manage_automatic_deletio_02745", "step.step_manage_automatic_deletio_0F1B7", "content.note_manage_automatic_deletio_07C35" ] } ] }, "managing_invites-latest-en.json": { "title": "title_managing_invites_000001_9B5398", "title_managing_invites_000001_9B5398": "Manage invitations", "shortdesc": "shortdesc_managing_invites_000002_58745A", "shortdesc_managing_invites_000002_58745A": "You can send an email with an installation link that allows the recipient to install the app on one device. ", "content.p_managing_invites_000011_562F7C": "To manage the invitations:", "content.p_managing_invites_000017_4B6F22": "The Devices page is displayed.", "step.step_managing_invites_000013_A73120": "Under Environment, select Devices on the sidebar.", "content.p_managing_invites_00001D_7E0B01": "The Manage device invitations page opens. The Pending tab lists those email invitations that include an installation link that has not been used yet. The Expired tab lists the expired email invitations.", "step.step_managing_invites_000019_E2EBD2": "Select Manage device invitations.", "step.step_managing_invites_000022_9D6DD6": "For the pending invitations, you can send a reminder by selecting Send reminder as long as the installation link is valid (for 30 days). After that the invitations are shown under the Expired tab.", "content.note_managing_invites_000029_272F25": "Note: If there are devices that are no longer needed, for example, the user has left the company, you can delete the expired invitations from the table by selecting Delete pending.", "step.step_managing_invites_000025_2B10EB": "For the expired invitations, you can send another invitation link by selecting Send new invitation.", "desc": [ "content.p_managing_invites_000011_562F7C", { "steps.steps_managing_invites_000012_595BB5": [ "step.step_managing_invites_000013_A73120", "content.p_managing_invites_000017_4B6F22", "step.step_managing_invites_000019_E2EBD2", "content.p_managing_invites_00001D_7E0B01", "step.step_managing_invites_000022_9D6DD6", "step.step_managing_invites_000025_2B10EB", "content.note_managing_invites_000029_272F25" ] } ] }, "enhancing_device_management_with_custom_labels-latest-en.json": { "title": "title_enhancing_device_managem_088EA", "title_enhancing_device_managem_088EA": "Enhancing device management with custom labels", "shortdesc": "shortdesc_enhancing_device_managem_09D40", "shortdesc_enhancing_device_managem_09D40": "Create and apply labels to group devices by criteria that you choose.", "content.p_enhancing_device_managem_01C29": "Adding labels allows you to group devices in any way that you prefer. They are commonly used to provide information about the region, operating system, owner, department, workstation vs. server, or any other criteria that suit your needs.", "content.p_enhancing_device_managem_0B3AF": "Labels help analysts by providing more context and they make it easier for you to manage devices within Elements Security Center.", "desc": [ "content.p_enhancing_device_managem_01C29", "content.p_enhancing_device_managem_0B3AF" ] }, "adding_device_labels-latest-en.json": { "title": "title_adding_device_labels_0000031A5", "title_adding_device_labels_0000031A5": "Add device labels", "shortdesc": "shortdesc_adding_device_labels_0000069DE", "shortdesc_adding_device_labels_0000069DE": "You can add device labels in three different ways.", "content.p_adding_device_labels_00001C2CE": "You can add device labels in the following ways.", "content.note_adding_device_labels_00001966F": "Note: In the command line, labels are called tags.", "subchoice.choice_adding_device_labels_00001479C": "Manually in the Device view: select the devices on the Device list view, or open a single device on the Device details view, then on the Actions panel select Manage labels > Add labels, select an existing label or add a new one, and select Add.", "subchoice.choice_adding_device_labels_00002D25D": "Using label-assignment rules in the Profiles section: in Elements Security Center, go to Security Configurations > Profiles > Profile assignment rules, and add labels to an Outbreak rule or Profile assignment rule so that the labels are applied automatically whenever the rule matches.", "subchoice.choice_adding_device_labels_00002779E": "During the Elements agent installation process: assign installation tags as you deploy the agent. See step 2 in Assigning a default profile and installation tags for details.", "step.step_adding_device_labels_00001BD31": "Add device labels in one of the following ways:", "desc": [ "content.p_adding_device_labels_00001C2CE", "content.note_adding_device_labels_00001966F", { "steps.steps_adding_device_labels_00001C3F9": [ "step.step_adding_device_labels_00001BD31", { "subchoices.choices_adding_device_labels_00001A57B": [ "subchoice.choice_adding_device_labels_00001479C", "subchoice.choice_adding_device_labels_00002D25D", "subchoice.choice_adding_device_labels_00002779E" ] } ] } ] }, "manage_devices_in_portal-latest-en.json": { "title": "title_manage_devices_in_portal_08053", "title_manage_devices_in_portal_08053": "Managing devices in Elements Security Center", "shortdesc": "shortdesc_manage_devices_in_portal_04D55", "shortdesc_manage_devices_in_portal_04D55": "How to manage the selected devices in WithSecure Elements Security Center ", "content.p_manage_devices_in_portal_0D2BB": "You can manage your devices in WithSecure Elements Security Center in several ways:", "step.step_manage_devices_in_portal_06E56": "Organize them into asset groups", "step.step_manage_devices_in_portal_06113": "View and customize the device list", "step.step_manage_devices_in_portal_08640": "Automatically delete inactive computers", "step.step_manage_devices_in_portal_0DDD1": "Request diagnostics", "desc": [ "content.p_manage_devices_in_portal_0D2BB", { "steps.ul_manage_devices_in_portal_0F492": [ "step.step_manage_devices_in_portal_06E56", "step.step_manage_devices_in_portal_06113", "step.step_manage_devices_in_portal_08640", "step.step_manage_devices_in_portal_0DDD1" ] } ] }, "managing_asset_groups-latest-en.json": { "title": "title_managing_asset_groups_0000FB1C", "title_managing_asset_groups_0000FB1C": "Managing asset groups", "shortdesc": "shortdesc_managing_asset_groups_00005A3E", "shortdesc_managing_asset_groups_00005A3E": "Asset groups provide a structured way to manage devices within an organization. ", "content.p_managing_asset_groups_000099F3": "You can assign devices to asset groups in two ways:", "step.step_managing_asset_groups_000014EC": "Manual assignment - assign devices to management groups from the Devices page.", "content.note_managing_asset_groups_00005C0C": "Note: A single rule can assign a device to multiple groups.", "step.step_managing_asset_groups_00004B4B": "Automatic assignment - assign devices to groups based on profile assignment rules.", "content.p_managing_asset_groups_0000EB64": "Once devices are organized into groups, you can do the following:", "step.step_managing_asset_groups_0000E711": "Filter devices by group", "step.step_managing_asset_groups_0000F49C": "Filter security events associated with a specific group", "step.step_managing_asset_groups_0000598B": "List software updates for devices within each group", "content.p_managing_asset_groups_00006330": "By using asset groups, you can enhance device visibility, streamline security event management, and prepare for advanced access control mechanisms in an organization.", "desc": [ "content.p_managing_asset_groups_000099F3", { "steps.ul_managing_asset_groups_00008981": [ "step.step_managing_asset_groups_000014EC", "step.step_managing_asset_groups_00004B4B", "content.note_managing_asset_groups_00005C0C" ] }, "content.p_managing_asset_groups_0000EB64", { "steps.ul_managing_asset_groups_0000B19C": [ "step.step_managing_asset_groups_0000E711", "step.step_managing_asset_groups_0000F49C", "step.step_managing_asset_groups_0000598B" ] }, "content.p_managing_asset_groups_00006330" ] }, "creating_asset_groups-latest-en.json": { "title": "title_creating_asset_groups_0000371A", "title_creating_asset_groups_0000371A": "Create asset groups", "shortdesc": "shortdesc_creating_asset_groups_000032E8", "shortdesc_creating_asset_groups_000032E8": "Creates an asset group at the company level.", "content.p_creating_asset_groups_00007796": "Asset groups can only be created on company level. For example, as a partner, you must first select a company from the scope selector or from the list in the General tab under Management > Organization Settings.", "step.step_creating_asset_groups_0000A205": "Under Management, select Organization Settings > General.", "content.p_creating_asset_groups_0000B651": "The Create asset group pane opens.", "step.step_creating_asset_groups_0000D989": "Select Create asset group.", "step.step_creating_asset_groups_00008213": "Enter a name for the asset group.", "step.step_creating_asset_groups_00001DCB": "(Optional) In the Description box, enter a description for the asset group.", "step.step_creating_asset_groups_00006C1E": "Select Save.", "content.p_creating_asset_groups_0000F464": "Next, go to the Devices page to add devices to the new asset group.", "desc": [ "content.p_creating_asset_groups_00007796", { "steps.steps_creating_asset_groups_00006594": [ "step.step_creating_asset_groups_0000A205", "step.step_creating_asset_groups_0000D989", "content.p_creating_asset_groups_0000B651", "step.step_creating_asset_groups_00008213", "step.step_creating_asset_groups_00001DCB", "step.step_creating_asset_groups_00006C1E" ] }, "content.p_creating_asset_groups_0000F464" ] }, "adding_devices_asset_groups-latest-en.json": { "title": "title_adding_devices_to_asset__0AB0F", "title_adding_devices_to_asset__0AB0F": "Add devices to asset groups", "shortdesc": "shortdesc_adding_devices_to_asset__03916", "shortdesc_adding_devices_to_asset__03916": "Adds devices to one or more asset groups.", "content.p_adding_devices_to_asset__0400C": "Asset groups organize devices so you can target scans, scheduling, and reporting at them.", "step.step_adding_devices_to_asset__0C82A": "Under Environment, select Devices.", "step.step_adding_devices_to_asset__05B1D": "In the Devices page, select the devices that you want to add to one or more asset groups.", "step.step_adding_devices_to_asset__076C6": "From the action menu at the bottom of the page, select Manage asset groups > Assign to asset groups.", "step.step_adding_devices_to_asset__01483": "From the drop-down menu, select one or more asset groups to which you want to add the selected devices.", "step.step_adding_devices_to_asset__02604": "Select Assign.", "desc": [ "content.p_adding_devices_to_asset__0400C", { "steps.steps_adding_devices_to_asset__00577": [ "step.step_adding_devices_to_asset__0C82A", "step.step_adding_devices_to_asset__05B1D", "step.step_adding_devices_to_asset__076C6", "step.step_adding_devices_to_asset__01483", "step.step_adding_devices_to_asset__02604" ] } ] }, "managing_devices-latest-en.json": { "title": "title_managing_devices_000001_3E7C63", "title_managing_devices_000001_3E7C63": "Remotely manage a device", "shortdesc": "shortdesc_managing_devices_000002_D29A90", "shortdesc_managing_devices_000002_D29A90": "To send a command to a selected device or manage it via WithSecure Elements Security Center: ", "content.p_managing_devices_000016_1A28A8": "To remotely manage a device:", "content.p_managing_devices_00001C_561387": "The Devices page is displayed.", "step.step_managing_devices_000018_2DD10C": "Under Environment, select Devices on the sidebar.", "subchoice.choice_managing_devices_000021_28A09B": "Computers - shows devices with WithSecure Elements EPP for Computers and WithSecure Elements EPP for Servers", "subchoice.choice_managing_devices_000025_CA436D": "Mobile devices - shows devices with WithSecure Elements Mobile Protection", "subchoice.choice_managing_devices_000028_198B5C": "Connectors - shows devices with WithSecure Elements Connector", "subchoice.choice_managing_devices_00002B_FA2315": "Unmanaged devices - shows devices in a customer Active Directory (not in EPP)", "step.step_managing_devices_00001E_58BAD7": "Select one of the following tabs:", "content.p_managing_devices_00002F_2EEAA4": "A menu is displayed at the bottom of the page.", "step.step_managing_devices_00002D_B16D87": "Select the checkbox next to the name of the device.", "content.note_managing_devices_000033_522DB0": "Note: You can find operations also on the device details page. Some of the operations are shown only there.", "content.p_managing_devices_000035_923091": "The instruction is sent to the selected device.", "step.step_managing_devices_000030_B7A3A3": "Select the desired operation from the menu.", "desc": [ "content.p_managing_devices_000016_1A28A8", { "steps.steps_managing_devices_000017_465ACD": [ "step.step_managing_devices_000018_2DD10C", "content.p_managing_devices_00001C_561387", "step.step_managing_devices_00001E_58BAD7", { "subchoices.choices_managing_devices_000020_9051EB": [ "subchoice.choice_managing_devices_000021_28A09B", "subchoice.choice_managing_devices_000025_CA436D", "subchoice.choice_managing_devices_000028_198B5C", "subchoice.choice_managing_devices_00002B_FA2315" ] }, "step.step_managing_devices_00002D_B16D87", "content.p_managing_devices_00002F_2EEAA4", "step.step_managing_devices_000030_B7A3A3", "content.note_managing_devices_000033_522DB0", "content.p_managing_devices_000035_923091" ] } ] }, "automatically_deleting_computers-latest-en.json": { "title": "title_automatically_deleting_c_0EFD8", "title_automatically_deleting_c_0EFD8": "Automatically delete devices", "shortdesc": "shortdesc_automatically_deleting_c_0A9EB", "shortdesc_automatically_deleting_c_0A9EB": "You can set WithSecure Elements Security Center to automatically delete devices that have been offline for a set number of days. ", "content.note_automatically_deleting_c_01E26": "Note: This feature does not apply to mobile devices.", "content.note_automatically_deleting_c_01763": "Note: You can set the automatic removal of devices only on the Company level.", "content.p_automatically_deleting_c_01062": "To manage automatic deletion:", "content.p_automatically_deleting_c_07BD7": "The Devices page opens.", "step.step_automatically_deleting_c_0BDD6": "Under Environment, select Devices on the sidebar.", "content.p_automatically_deleting_c_04481": "A menu is displayed.", "step.step_automatically_deleting_c_0B781": "Select next to Devices.", "content.p_automatically_deleting_c_0BEEA": "The Manage automatic deletion page opens.", "step.step_automatically_deleting_c_0F492": "Select Manage automatic deletion.", "step.step_automatically_deleting_c_04D86": "Turn on the Automatically delete device... option.", "content.note_automatically_deleting_c_08AA5": "Note: The minimum number of days is seven (7).", "step.step_automatically_deleting_c_0D72A": "In the box, enter the number of days for a device to be offline before it is deleted.", "content.note_automatically_deleting_c_0E766": "Important: If a removed device resumes its activity after being removed, it is automatically added back to your subscription, if your subscription has free space. However, if your subscription is full, the device is not returned to the subscription and is left without protection.", "step.step_automatically_deleting_c_042BC": "Select Save.", "content.p_automatically_deleting_c_0753E": "Devices that stay offline for the specified number of days are deleted automatically.", "desc": [ "content.note_automatically_deleting_c_01E26", "content.note_automatically_deleting_c_01763", "content.p_automatically_deleting_c_01062", { "steps.steps_automatically_deleting_c_07B3F": [ "step.step_automatically_deleting_c_0BDD6", "content.p_automatically_deleting_c_07BD7", "step.step_automatically_deleting_c_0B781", "content.p_automatically_deleting_c_04481", "step.step_automatically_deleting_c_0F492", "content.p_automatically_deleting_c_0BEEA", "step.step_automatically_deleting_c_04D86", "step.step_automatically_deleting_c_0D72A", "content.note_automatically_deleting_c_08AA5", "step.step_automatically_deleting_c_042BC", "content.note_automatically_deleting_c_0E766" ] }, "content.p_automatically_deleting_c_0753E" ] }, "viewing_devices_ad-latest-en.json": { "title": "title_viewing_devices_ad_000001_DF91", "title_viewing_devices_ad_000001_DF91": "View devices based on the Active Directory structure", "shortdesc": "shortdesc_viewing_devices_ad_000002_CFD2", "shortdesc_viewing_devices_ad_000002_CFD2": "You can filter devices based on the Active Directory structure of a company. ", "content.p_viewing_devices_ad_000014_1A6D": "You can use this feature to assign a different profile for the devices in different Active Directory groups, for example, to be used in different sites.", "content.p_viewing_devices_ad_000015_280D": "To view devices based on the Active Directory structure:", "content.p_viewing_devices_ad_00001B_1AB5": "The Devices page is displayed.", "step.step_viewing_devices_ad_000017_25E8": "Under Environment, select Devices on the sidebar.", "content.p_viewing_devices_ad_000020_AE51": "A drop-down menu is displayed, listing all the customer companies associated with your account.", "step.step_viewing_devices_ad_00001D_CDA9": "Select the icon at the top-left corner.", "step.step_viewing_devices_ad_000021_AA2C": "Select the desired company.", "content.note_viewing_devices_ad_000028_56DA": "Note: The drop-down menu is shown only if the company has devices belonging to an Active Directory group.", "content.p_viewing_devices_ad_000029_72CC": "A drop-down menu shows the Active Directory structure of the selected company.", "step.step_viewing_devices_ad_000023_E476": "Then, select the icon next to All devices.", "content.note_viewing_devices_ad_00002D_9116": "Note: The Active Directory structure is built based on the data that is reported by company computers, so it may not be complete. A new Active Directory domain does not show in WithSecure Elements Security Center until WithSecure Elements EPP for Computers or WithSecure Elements EPP for Servers is activated in the computers in that domain.", "step.step_viewing_devices_ad_00002A_3C96": "Select the desired Active Directory group to view all the devices in that group.", "desc": [ "content.p_viewing_devices_ad_000014_1A6D", "content.p_viewing_devices_ad_000015_280D", { "steps.steps_viewing_devices_ad_000016_E92D": [ "step.step_viewing_devices_ad_000017_25E8", "content.p_viewing_devices_ad_00001B_1AB5", "step.step_viewing_devices_ad_00001D_CDA9", "content.p_viewing_devices_ad_000020_AE51", "step.step_viewing_devices_ad_000021_AA2C", "step.step_viewing_devices_ad_000023_E476", "content.note_viewing_devices_ad_000028_56DA", "content.p_viewing_devices_ad_000029_72CC", "step.step_viewing_devices_ad_00002A_3C96", "content.note_viewing_devices_ad_00002D_9116" ] } ] }, "customizing_devices_view-latest-en.json": { "title": "title_customizing_devices_view_0B962", "title_customizing_devices_view_0B962": "Customize the Devices view", "shortdesc": "shortdesc_customizing_devices_view_0DD16", "shortdesc_customizing_devices_view_0DD16": "You can apply filters and you can select which columns you want to be visible in the Devices table. ", "content.p_customizing_devices_view_08C62": "To customize the Devices view:", "content.p_customizing_devices_view_07C2F": "The Devices page is displayed.", "step.step_customizing_devices_view_089A6": "Under Environment, select Devices on the sidebar.", "content.note_customizing_devices_view_08032": "Note: You can remove all the filters by selecting Clear all filters.", "content.p_customizing_devices_view_00CE8": "A list of the devices that match the filtering criteria that you selected is shown.", "step.step_customizing_devices_view_0D84F": "Above the table, from the drop-down menu, select the name of a column for filtering the devices and the desired value for the selected column.", "content.p_customizing_devices_view_0B2A6": "A drop-down menu opens showing the Visible columns list.", "step.step_customizing_devices_view_02481": "At the right corner above the table, select .", "content.p_customizing_devices_view_0617A": "The columns that you selected appear in the table.", "step.step_customizing_devices_view_01E27": "Select the columns that you want to be visible in the table.", "substep.substep_customizing_devices_view_040E1": "Point to the name of a column that you want to move.", "substep.substep_customizing_devices_view_0CDFA": "Depending on where you want the column to appear, drag it up or down in the list.", "step.step_customizing_devices_view_0CD85": "To change the order of the columns in the table:", "substep.substep_customizing_devices_view_0641E": "At the right corner above the table, select .", "substep.substep_customizing_devices_view_03519": "From the drop-down menu, select the desired number of rows.", "content.p_customizing_devices_view_0757C": "The number of rows changes according to your selection.", "step.step_customizing_devices_view_00ACA": "To define the number of rows shown in the table per page, do the following:", "step.step_customizing_devices_view_0DAC3": "If there are more devices than can be shown in the table per page, use the navigation arrows (, ) located above the table to go to the previous or next page.", "content.note_customizing_devices_view_03FFD": "Note: You can remove the views that you have customized by first selecting Delete views, then in the Delete views window selecting the view that you want to remove, and then selecting Delete.", "step.step_customizing_devices_view_070B4": "Select View: > Save as at the top-right corner to save the view that you have customized.", "desc": [ "content.p_customizing_devices_view_08C62", { "steps.steps_customizing_devices_view_09980": [ "step.step_customizing_devices_view_089A6", "content.p_customizing_devices_view_07C2F", "step.step_customizing_devices_view_0D84F", "content.note_customizing_devices_view_08032", "content.p_customizing_devices_view_00CE8", "step.step_customizing_devices_view_02481", "content.p_customizing_devices_view_0B2A6", "step.step_customizing_devices_view_01E27", "content.p_customizing_devices_view_0617A", "step.step_customizing_devices_view_0CD85", { "substeps.substepsalpha_customizingalpha_devicesalpha_viewalpha_051BF": [ "substep.substep_customizing_devices_view_040E1", "substep.substep_customizing_devices_view_0CDFA" ] }, "step.step_customizing_devices_view_00ACA", { "substeps.substepsalpha_customizingalpha_devicesalpha_viewalpha_0A9C9": [ "substep.substep_customizing_devices_view_0641E", "substep.substep_customizing_devices_view_03519" ] }, "content.p_customizing_devices_view_0757C", "step.step_customizing_devices_view_0DAC3", "step.step_customizing_devices_view_070B4", "content.note_customizing_devices_view_03FFD" ] } ] }, "request_diagnostics-latest-en.json": { "title": "title_request_diagnostics_000001C353", "title_request_diagnostics_000001C353": "Request diagnostic data", "shortdesc": "shortdesc_request_diagnostics_000002F991", "shortdesc_request_diagnostics_000002F991": "You can remotely request for a diagnostic file to be uploaded to a WithSecure support team. ", "content.p_request_diagnostics_000016A1ED": "If there is an issue with a device in your managed accounts, the WithSecure Elements Security Center administrator can select the device and make a request to the customer, who allows a diagnostics (WSDIAG) file to be collected and uploaded to WithSecure Elements Security Center. The diagnostics file helps determine the issue and its root cause.", "content.note_request_diagnostics_0000191DD1": "Note: This functionality is available for Elements Agent for Windows - on both servers and workstations - as well as for Elements Mobile Protection.", "content.p_request_diagnostics_00001C56B6": "To request diagnostic data:", "step.step_request_diagnostics_00001E712E": "Log in to Elements Security Center.", "step.step_request_diagnostics_000021D545": "If you are managing multiple accounts, go to the relevant customer account.", "content.p_request_diagnostics_00002826B3": "This opens up a page with device details.", "step.step_request_diagnostics_000023D711": "Once in the correct account, under Environment, select Devices, and select the link for the relevant device (the device that has the issue and for which the wsdiag file is needed).", "content.note_request_diagnostics_000030FD5D": "Note: To check that the request has been sent to the user, in the customer account, go to Environment > Devices and select the three dots icon on the right side and select Manage operations. Verify whether a WSDIAG operation appears in the list with the status Waiting for delivery to the device.", "step.step_request_diagnostics_0000294E43": "On the Actions panel at the bottom of the page, select Request diagnostic file > Request . For privacy purposes, a notification appears for the end user; this does not appear on the server side.", "step.step_request_diagnostics_000036641B": "Make sure that the user allows the diagnostic (WSDIAG) file to be collected. To do this, they must select Allow once they see the notification on their device.", "step.step_request_diagnostics_0000399920": "When the user has allowed the diagnostic (WSDIAG) file to be collected, go back to the Manage operations page in the customer account.", "step.step_request_diagnostics_00003CD10B": "Check if the status has changed to Success, operation was performed.", "step.step_request_diagnostics_00003FDDDE": "On the Manage operations page, get the reference number for the created WSDIAG file.", "content.note_request_diagnostics_0000460C90": "Note: In the support ticket, WithSecure can see the reference number and download the file for further investigation.", "step.step_request_diagnostics_0000422C8D": "Include the reference number in the support ticket to WithSecure Support.", "content.note_request_diagnostics_00004CFA11": "Note: The WSDIAG file is automatically deleted after two weeks from the portal.", "step.step_request_diagnostics_000048821D": "Optionally, download the diagnostic file by selecting the three dots icon in the Action column.", "desc": [ "content.p_request_diagnostics_000016A1ED", "content.note_request_diagnostics_0000191DD1", "content.p_request_diagnostics_00001C56B6", { "steps.steps_request_diagnostics_00001D3D53": [ "step.step_request_diagnostics_00001E712E", "step.step_request_diagnostics_000021D545", "step.step_request_diagnostics_000023D711", "content.p_request_diagnostics_00002826B3", "step.step_request_diagnostics_0000294E43", "content.note_request_diagnostics_000030FD5D", "step.step_request_diagnostics_000036641B", "step.step_request_diagnostics_0000399920", "step.step_request_diagnostics_00003CD10B", "step.step_request_diagnostics_00003FDDDE", "step.step_request_diagnostics_0000422C8D", "content.note_request_diagnostics_0000460C90", "step.step_request_diagnostics_000048821D", "content.note_request_diagnostics_00004CFA11" ] } ] }, "elements_data_recovery-latest-en.json": { "title": "title_elements_data_recovery_000A213", "title_elements_data_recovery_000A213": "Elements data recovery", "shortdesc": "shortdesc_elements_data_recovery_000BA17", "shortdesc_elements_data_recovery_000BA17": "WithSecure maintains the availability of the Elements service and takes care of the necessary backups and any needed recovery actions. ", "content.p_elements_data_recovery_000BD6E": "No actions are required from you.", "content.note_elements_data_recovery_0006C44": "Important: This backup includes only data that is directly relevant to the service provided by WithSecure. It is your responsibility to backup your own documents and other data.", "desc": [ "content.p_elements_data_recovery_000BD6E", "content.note_elements_data_recovery_0006C44" ] }, "introduction-6-latest-en.json": { "title": "title_introduction_000001_DBDC3357", "title_introduction_000001_DBDC3357": "Elements Exposure Management overview", "shortdesc": "shortdesc_introduction_000002_7F5A7DF4", "shortdesc_introduction_000002_7F5A7DF4": "WithSecure Elements Exposure Management helps you identify, assess, and reduce cyber risks across your attack surface.", "content.p_introduction_00000D_353DAFCC": "WithSecure Elements Exposure Management (XM) identifies and reduces cyber risks before attackers exploit them. It helps organizations protect assets and maintain business continuity.", "content.p_introduction_00000F_7CD0A1F3": "The solution gives you a broad view of cyber risks. Its artificial intelligence (AI)-powered recommendations show your attack surface:", "step.step_introduction_000012_C4F4C966": "External attack surface (EAS)", "step.step_introduction_000014_2205C0E9": "Cloud services", "step.step_introduction_000015_4DAE8601": "Identities", "step.step_introduction_000016_48EC2412": "Managed devices", "step.step_introduction_000017_937A4444": "Network", "content.p_introduction_000018_4A3E3807": "Use the recommendations to fix vulnerabilities with the highest risk of intrusion.", "content.p_introduction_000019_4FAD2990": "WithSecure Elements Exposure Management helps you:", "step.step_introduction_00001C_40956E86": "Find your digital perimeter and its most critical assets and identities.", "step.step_introduction_00001D_23548E65": "Get recommendations based on threat intelligence, attack paths, business context, and security findings.", "step.step_introduction_00001F_92CA3A76": "Assess potential exposures from inside out and outside in. Use the results to reduce business risk and prioritize actions that improve your security posture.", "step.step_introduction_000021_3492F3CD": "Explain exposure risks clearly to business leaders.", "desc": [ "content.p_introduction_00000D_353DAFCC", "content.p_introduction_00000F_7CD0A1F3", { "steps.ul_introduction_000011_0A38CAA0": [ "step.step_introduction_000012_C4F4C966", "step.step_introduction_000014_2205C0E9", "step.step_introduction_000015_4DAE8601", "step.step_introduction_000016_48EC2412", "step.step_introduction_000017_937A4444" ] }, "content.p_introduction_000018_4A3E3807", "content.p_introduction_000019_4FAD2990", { "steps.ul_introduction_00001B_100F43A7": [ "step.step_introduction_00001C_40956E86", "step.step_introduction_00001D_23548E65", "step.step_introduction_00001F_92CA3A76", "step.step_introduction_000021_3492F3CD" ] } ] }, "concept_nl3_hzx_51c-latest-en.json": { "title": "title_why_xm_000001_BB3F5D44", "title_why_xm_000001_BB3F5D44": "Why Exposure Management matters", "shortdesc": "shortdesc_why_xm_000002_940684A8", "shortdesc_why_xm_000002_940684A8": "Organizations face risks from vulnerabilities, setup errors, and changing threats that can expose sensitive data.", "content.p_why_xm_000010_1A234AEC": "Navigating this detailed threat landscape is critical, and increasing visibility across your digital perimeter is essential. The typical modern company information technology (IT) environment is complex. It covers identities, workstations, and cloud services among many other asset types. Every asset can be a source of exposure – including vulnerabilities and misconfigurations. Attackers can exploit any of these to target an organization's assets and business operations.", "content.p_why_xm_000011_F6772951": "Many organizations use hybrid environments without traditional perimeters. This makes it hard to see cloud and on-premises assets together. As organizations expand, their attack surface grows. New connected assets add complexity and need active management. The external threat landscape also changes as artificial intelligence (AI)-enabled cyberattacks emerge.", "content.p_why_xm_000013_6D34E840": "Threats evolve constantly, including AI-enabled cyberattacks and sophisticated malware. Shadow IT refers to systems deployed without central IT oversight. It can improve productivity but also adds business and compliance risks.", "content.p_why_xm_000015_EAE3764F": "Interconnected assets and evolving threats make security and exposure management difficult. Each vulnerability is a potential gateway to sensitive data or critical systems. Attack paths expose internal assets to cyberattacks. Attackers may use these paths to reach important company assets, for example, during a ransomware attack. Detecting and securing these paths is important.", "desc": [ "content.p_why_xm_000010_1A234AEC", "content.p_why_xm_000011_F6772951", "content.p_why_xm_000013_6D34E840", "content.p_why_xm_000015_EAE3764F" ] }, "concept_w15_vfl_51c-latest-en.json": { "title": "title_what_is_xm_000001_231468EA", "title_what_is_xm_000001_231468EA": "Understanding WithSecure Elements Exposure Management", "shortdesc": "shortdesc_what_is_xm_000002_B45754C6", "shortdesc_what_is_xm_000002_B45754C6": "WithSecure Elements Exposure Management (XM) helps you find, assess, and reduce security risks across exposed digital assets.", "content.p_what_is_xm_00000E_3F354A5C": "Exposure Management helps you:", "step.step_what_is_xm_000011_DB0F64EE": "Find attack paths to critical assets before attackers exploit them.", "step.step_what_is_xm_000013_54D87D8A": "Give security teams a full view of their digital assets.", "step.step_what_is_xm_000015_7BFC4DD4": "Continuously check an organization's digital assets.", "content.p_what_is_xm_000017_C4F8A9D9": "Security posture analysts run the 24/7 service. They investigate vulnerabilities, setup errors, and anomalies using technical indicators, industry best practices, and threat intelligence.", "content.p_what_is_xm_000018_C4413F32": "WithSecure Elements Exposure Management helps you:", "step.step_what_is_xm_00001B_A01CDC16": "Identify possible attack surfaces.", "step.step_what_is_xm_00001D_B874B948": "Get a ranked action list that helps improve your security posture and prevent serious incidents.", "step.step_what_is_xm_00001F_FF4D038C": "Reduce your attack surface by managing assets that are exposed and accessible to attackers.", "step.step_what_is_xm_000021_7F3A1E83": "Identify and address the parts of your information technology (IT) infrastructure most vulnerable to cyber threats.", "desc": [ "content.p_what_is_xm_00000E_3F354A5C", { "steps.ul_what_is_xm_000010_C374109D": [ "step.step_what_is_xm_000011_DB0F64EE", "step.step_what_is_xm_000013_54D87D8A", "step.step_what_is_xm_000015_7BFC4DD4" ] }, "content.p_what_is_xm_000017_C4F8A9D9", "content.p_what_is_xm_000018_C4413F32", { "steps.ul_what_is_xm_00001A_ABF05155": [ "step.step_what_is_xm_00001B_A01CDC16", "step.step_what_is_xm_00001D_B874B948", "step.step_what_is_xm_00001F_FF4D038C", "step.step_what_is_xm_000021_7F3A1E83" ] } ] }, "keyfeatures-2-latest-en.json": { "title": "title_keyfeatures_000001_AAA81820", "title_keyfeatures_000001_AAA81820": "Key features", "shortdesc": "shortdesc_keyfeatures_000002_DE06CE31", "shortdesc_keyfeatures_000002_DE06CE31": "In this section, we examine the key features of the WithSecure Elements Exposure Management solution. ", "content.p_keyfeatures_00000C_89849E72": "The solution comprises the following service elements:", "content.dt_keyfeatures_00000F_3D561A2C": "Exposure dashboard", "content.dd_keyfeatures_000010_7EC8B2D3": "The Exposure summary view gives you a risk-based overview of the identified weaknesses in your attack surface. Using the exposure score, you can start prioritizing the remediation from the assets that cause the most severe risk of exploitation. Our AI-powered recommendation engine gives you recommendations to help prioritize remediation.
", "content.dd_keyfeatures_000011_5D592728": "The Exposure view shows also the product's coverage of a selected organization's assets. It shows which assets - such as managed and unmanaged devices, network, identities, and cloud resources - are in use or not subscribed. Color coding helps to identify different issues: green indicates successful onboarding, orange indicates incomplete configuration or onboarding, and gray indicates that the organization lacks the required licenses for onboarding.", "content.dt_keyfeatures_000013_E40E9929": "Environment view", "content.dd_keyfeatures_000014_06FFF968": "The Environment view helps you discover and manage your assets. A single view shows you a centralized listing of assets and allows you to manage them per asset type. You can discover more assets and navigate and address risks that are related to a particular asset type.", "content.dt_keyfeatures_000016_313B621A": "Exposure risk", "content.dd_keyfeatures_000017_A3577D7D": "Exposure risk score shows you what is the exposure risk level of your company and assets. It works on three levels:", "choice.choice_keyfeatures_000019_C291683A": "The exposure risk score of a company represents relative business risk that the current state of the company's digital asset cause.", "choice.choice_keyfeatures_00001A_DC300915": "The risk level is calculated separately for each asset type to highlight where the issues are.", "choice.choice_keyfeatures_00001B_3A70A24E": "Each asset instance has an exposure risk score which is calculated from various elements, such as attack path mapping, business context, and threat intelligence.", "choice.choice_keyfeatures_00001C_EB065354": "Attack path visualization, where available, highlights the potential risks if the provided recommendations are ignored.", "content.dd_p_keyfeatures_00001D_39ECBA18": "By validating the attack path, exposure risk score ensures that you protect the path to the most critical assets. It also allows you to flexibly manage your business context values and benefit from our unique threat intelligence data.
", "desc": [ "content.p_keyfeatures_00000C_89849E72", { "dl.dl_keyfeatures_00000D_44C48771": [ { "dlentry.dlentry_keyfeatures_00000E_100F427C": [ "content.dt_keyfeatures_00000F_3D561A2C", "content.dd_keyfeatures_000010_7EC8B2D3", "content.dd_keyfeatures_000011_5D592728" ] }, { "dlentry.dlentry_keyfeatures_000012_91CE8C46": [ "content.dt_keyfeatures_000013_E40E9929", "content.dd_keyfeatures_000014_06FFF968" ] }, { "dlentry.dlentry_keyfeatures_000015_7FA6A6D9": [ "content.dt_keyfeatures_000016_313B621A", "content.dd_keyfeatures_000017_A3577D7D", { "choices.ul_keyfeatures_000018_EFA1EAAA": [ "choice.choice_keyfeatures_000019_C291683A", "choice.choice_keyfeatures_00001A_DC300915", "choice.choice_keyfeatures_00001B_3A70A24E", "choice.choice_keyfeatures_00001C_EB065354" ] }, "content.dd_p_keyfeatures_00001D_39ECBA18" ] } ] } ] }, "attack_surface_coverage-latest-en.json": { "title": "title_attack_surface_coverage_00B620", "title_attack_surface_coverage_00B620": "Attack surface coverage", "shortdesc": "shortdesc_attack_surface_coverage_0070D4", "shortdesc_attack_surface_coverage_0070D4": "Exposure Management combines multiple scanning methods to make sure that your entire attack surface is covered.", "content.p_attack_surface_coverage_003E88": "In addition, the attack path simulation technology - integrating several scanning methodologies - creates a combined scanning approach of its own. Below is a list of the data-collection and scanning types that are used in attack path modeling.", "content.title_attack_surface_coverage_0055C4": "Managed devices and network", "content.p_attack_surface_coverage_0035FF": "Elements Agent.", "step.step_attack_surface_coverage_003C8C": "Agent-based scan - automatically scan Windows workstations and servers", "step.step_attack_surface_coverage_00CAB5": "Device service data - collect system configuration and login information", "content.note_attack_surface_coverage_0084E8": "Note: This requires a license for WithSecure Elements Endpoint Protection (part of WithSecure Elements Endpoint Security).", "step.step_attack_surface_coverage_007662": "Patch management - monitor system and third-party patch status and perform automated updates via Software Updater", "content.p_attack_surface_coverage_00500C": "Local/cloud scan node.", "step.step_attack_surface_coverage_00484E": "Discover scan - identify and map all assets within your network", "step.step_attack_surface_coverage_0039F8": "System scan - scan all IP (Internet Protocol) systems for vulnerabilities and misconfigurations", "content.note_attack_surface_coverage_007C7E": "Note: Authenticated scanning is not available through a cloud scan node.", "step.step_attack_surface_coverage_007D8F": "Authenticated scan - log into systems to gather detailed vulnerability data such as system versions, missing patches, and misconfigurations", "step.step_attack_surface_coverage_00B663": "Web scan - scan and test custom web applications for vulnerabilities", "content.title_attack_surface_coverage_007C37": "External attack surface, identity, and cloud services", "content.p_attack_surface_coverage_00592B": "External attack surface.", "step.step_attack_surface_coverage_00822A": "Internet discovery - identify your organization's internet-facing systems", "step.step_attack_surface_coverage_0023C6": "External assets - evaluate the security posture of externally exposed assets", "content.p_attack_surface_coverage_00B313": "Identity integrations.", "step.step_attack_surface_coverage_009406": "Entra ID - discover potential threats associated with identities in Entra ID", "step.step_attack_surface_coverage_009943": "Account breach - identify breached account information", "content.p_attack_surface_coverage_00D91A": "Cloud integrations.", "step.step_attack_surface_coverage_00CE74": "Azure - assess the security and compliance posture of your Azure accounts", "step.step_attack_surface_coverage_005FEC": "AWS - assess the security and compliance of your AWS accounts", "content.note_attack_surface_coverage_001743": "Note: Scans for cloud integrations are included in the WithSecure Elements Exposure Management for Cloud license, while the other scan types are included in the WithSecure Elements Exposure Management for Business license.", "desc": [ "content.p_attack_surface_coverage_003E88", "content.title_attack_surface_coverage_0055C4", "content.p_attack_surface_coverage_0035FF", { "steps.ul_attack_surface_coverage_00B8CE": [ "step.step_attack_surface_coverage_003C8C", "step.step_attack_surface_coverage_00CAB5", "step.step_attack_surface_coverage_007662", "content.note_attack_surface_coverage_0084E8" ] }, "content.p_attack_surface_coverage_00500C", { "steps.ul_attack_surface_coverage_001C8A": [ "step.step_attack_surface_coverage_00484E", "step.step_attack_surface_coverage_0039F8", "step.step_attack_surface_coverage_007D8F", "content.note_attack_surface_coverage_007C7E", "step.step_attack_surface_coverage_00B663" ] }, "content.title_attack_surface_coverage_007C37", "content.p_attack_surface_coverage_00592B", { "steps.ul_attack_surface_coverage_0060E8": [ "step.step_attack_surface_coverage_00822A", "step.step_attack_surface_coverage_0023C6" ] }, "content.p_attack_surface_coverage_00B313", { "steps.ul_attack_surface_coverage_00AA5F": [ "step.step_attack_surface_coverage_009406", "step.step_attack_surface_coverage_009943" ] }, "content.p_attack_surface_coverage_00D91A", { "steps.ul_attack_surface_coverage_004408": [ "step.step_attack_surface_coverage_00CE74", "step.step_attack_surface_coverage_005FEC" ] }, "content.note_attack_surface_coverage_001743" ] }, "concept_xmgettingstarted-latest-en.json": { "title": "title_getting_started_000001_35DD8A6", "title_getting_started_000001_35DD8A6": "Getting started with WithSecure Elements Exposure Management", "shortdesc": "shortdesc_getting_started_000002_A4D2AA3", "shortdesc_getting_started_000002_A4D2AA3": "Getting started with WithSecure Elements Exposure Management covers creating a business account, logging in, and setting up administrator access. ", "content.p_getting_started_00000F_385073E": "To start using WithSecure Elements Exposure Management, create a WithSecure business account and log in to Elements Security Center. You then create administrator accounts, or grant the Exposure Management role to existing administrators, so that your team can access the service.", "desc": [ "content.p_getting_started_00000F_385073E" ] }, "quick_start_guide_for_xm-latest-en.json": { "title": "title_quick_start_guide_for_xm_0B7A1", "title_quick_start_guide_for_xm_0B7A1": "Get started with WithSecure Elements Exposure Management", "shortdesc": "shortdesc_quick_start_guide_for_xm_064FE", "shortdesc_quick_start_guide_for_xm_064FE": "Gets started with WithSecure Elements Exposure Management by creating an account, onboarding assets, and managing exposures.", "content.p_quick_start_guide_for_xm_0A5F0": "This quick start guide walks you through the three main steps to start using WithSecure Elements Exposure Management: create your account, onboard your assets, and manage your exposures in Elements Security Center.", "substep.substep_quick_start_guide_for_xm_021C0": "Create the first WithSecure Business Account, either from the email that your partner sent you or by self-registering with your subscription key. For instructions, see Creating the first WithSecure business account.", "substep.substep_quick_start_guide_for_xm_0FCDB": "Log in to Elements Security Center as described in Logging in to Elements Security Center and starting asset onboarding.", "substep.substep_quick_start_guide_for_xm_0BE6E": "Create administrator accounts for your team. For instructions, see Creating administrator accounts.", "substep.substep_quick_start_guide_for_xm_04DE3": "To let existing administrators use Exposure Management, grant them the role as described in Granting existing users the Exposure Management role.", "step.step_quick_start_guide_for_xm_0184C": "Create your WithSecure Business Account and give your team access to Elements Security Center.", "substep.substep_quick_start_guide_for_xm_03341": "Install the WithSecure Elements Agent on your Windows devices, as described in Installing new WithSecure Elements Agents.", "substep.substep_quick_start_guide_for_xm_049A8": "If you already use Elements Endpoint Protection on your Windows devices, turn on scanning for those devices under Environment > Devices > Computers instead of installing the agent again. For details, see Existing WithSecure Elements Agents.", "substep.substep_quick_start_guide_for_xm_0678D": "To scan devices that have no agent, deploy a scan node on a Windows server (Installing scan nodes on Windows server) or a Linux server (Installing scan nodes on Linux servers), or use a cloud scan node.", "substep.substep_quick_start_guide_for_xm_08038": "Onboard your cloud accounts by adding an Azure tenant (Adding an Azure tenant) or an AWS account (Adding an AWS account in Elements Security Center).", "substep.substep_quick_start_guide_for_xm_0B0D2": "Onboard your external attack surface under Security Configurations > Scans to monitor your internet-facing assets. For details, see External attack surface scans and Identifying internet-facing systems.", "step.step_quick_start_guide_for_xm_051E5": "Onboard the assets that you want WithSecure Elements Exposure Management to monitor.", "substep.substep_quick_start_guide_for_xm_026B2": "On the Home page, open the Exposure dashboard to see your organization's exposure score and top recommendations. For an overview, see Managing exposures.", "substep.substep_quick_start_guide_for_xm_0D309": "Select the highest-impact recommendation and review its affected assets, findings, and attack paths, as described in Recommendations.", "substep.substep_quick_start_guide_for_xm_0FCE7": "Apply the suggested fixes and set the status of each finding to track your progress. For details, see Findings.", "substep.substep_quick_start_guide_for_xm_08F11": "Monitor your exposure score as you remediate findings over time.", "step.step_quick_start_guide_for_xm_07961": "Review and manage your exposures from the Exposure dashboard.", "desc": [ "content.p_quick_start_guide_for_xm_0A5F0", { "steps.steps_quick_start_guide_for_xm_07A63": [ "step.step_quick_start_guide_for_xm_0184C", { "substeps.substepsalpha_quickalpha_startalpha_guidealpha_foralpha_xmalpha_07CED": [ "substep.substep_quick_start_guide_for_xm_021C0", "substep.substep_quick_start_guide_for_xm_0FCDB", "substep.substep_quick_start_guide_for_xm_0BE6E", "substep.substep_quick_start_guide_for_xm_04DE3" ] }, "step.step_quick_start_guide_for_xm_051E5", { "substeps.substepsalpha_quickalpha_startalpha_guidealpha_foralpha_xmalpha_0C4B5": [ "substep.substep_quick_start_guide_for_xm_03341", "substep.substep_quick_start_guide_for_xm_049A8", "substep.substep_quick_start_guide_for_xm_0678D", "substep.substep_quick_start_guide_for_xm_08038", "substep.substep_quick_start_guide_for_xm_0B0D2" ] }, "step.step_quick_start_guide_for_xm_07961", { "substeps.substepsalpha_quickalpha_startalpha_guidealpha_foralpha_xmalpha_0A602": [ "substep.substep_quick_start_guide_for_xm_026B2", "substep.substep_quick_start_guide_for_xm_0D309", "substep.substep_quick_start_guide_for_xm_0FCE7", "substep.substep_quick_start_guide_for_xm_08F11" ] } ] } ] }, "task_xmcreatingwsbusinessaccount-latest-en.json": { "title": "title_creating_ws_business_acc_0A60A", "title_creating_ws_business_acc_0A60A": "Create the first WithSecure business account", "shortdesc": "shortdesc_creating_ws_business_acc_03ABB", "shortdesc_creating_ws_business_acc_03ABB": "Creates the first administrator account for your organization.", "step.step_creating_ws_business_acc_07C91": "Access to the email address for the first administrator", "step.step_creating_ws_business_acc_01517": "Either a partner-provided email with a temporary password and login link, or a subscription key that you received from your WithSecure partner", "step.step_creating_ws_business_acc_04112": "Internet access", "content.p_creating_ws_business_acc_00328": "If your WithSecure partner created the business account for you, you have received an email from WithSecure containing a temporary password and a link to log in to Elements Security Center.", "content.p_creating_ws_business_acc_017C6": "If you received a subscription key but no account, follow the steps below to create the first administrator account:", "step.step_creating_ws_business_acc_07284": "Go to the WithSecure Elements self-registration page at WithSecure Elements Security Center", "content.note_creating_ws_business_acc_056C5": "Note: As a partner creating the account on behalf of a customer, use the Not-for-Resale (NFR) subscription key instead.", "step.step_creating_ws_business_acc_08F6F": "On the self-registration page, enter the email address for the first administrator and the subscription key provided by your partner.", "content.note_creating_ws_business_acc_0C117": "Note: To restrict access so that only your own administrator accounts can manage the product, turn on this option.", "step.step_creating_ws_business_acc_09379": "To allow your subscription partner to manage the product on your behalf, leave the Restrict Partner access to my organization option unchecked.", "step.step_creating_ws_business_acc_00455": "Follow the instructions on the screen to complete company registration. Choose a strong password for the administrative account when prompted and submit the form.", "content.note_creating_ws_business_acc_00042": "Note: If you used a temporary password, change it at first login to a secure permanent password.", "step.step_creating_ws_business_acc_06CA7": "Log in to Elements Security Center using the email and password that you set or the temporary password that you received from the partner email if the partner created the account for you.", "content.p_creating_ws_business_acc_001F8": "The first administrator account for your organization is created.", "content.p_creating_ws_business_acc_01A1B": "Next, log in to Elements Security Center and administer the product.", "desc": [ { "steps.ul_creating_ws_business_acc_07BE1": [ "step.step_creating_ws_business_acc_07C91", "step.step_creating_ws_business_acc_01517", "step.step_creating_ws_business_acc_04112" ] }, "content.p_creating_ws_business_acc_00328", "content.p_creating_ws_business_acc_017C6", { "steps.ol_creating_ws_business_acc_0F10F": [ "step.step_creating_ws_business_acc_07284", "step.step_creating_ws_business_acc_08F6F", "content.note_creating_ws_business_acc_056C5", "step.step_creating_ws_business_acc_09379", "content.note_creating_ws_business_acc_0C117", "step.step_creating_ws_business_acc_00455", "step.step_creating_ws_business_acc_06CA7", "content.note_creating_ws_business_acc_00042" ] }, "content.p_creating_ws_business_acc_001F8", "content.p_creating_ws_business_acc_01A1B" ], "related": [ "logging_in_to_s-latest-en" ] }, "logging_in_to_s-latest-en.json": { "title": "title_logging_in_to_esc_000001_4DEB8", "title_logging_in_to_esc_000001_4DEB8": "Log in to Elements Security Center and start asset onboarding", "shortdesc": "shortdesc_logging_in_to_esc_000002_9A064", "shortdesc_logging_in_to_esc_000002_9A064": "After creating the business account, log in to WithSecure Elements Security Center and administer the product.", "content.p_logging_in_to_esc_000013_DB7A5": "To log in to Elements Security Center:", "step.step_logging_in_to_esc_000016_3D7B3": "Go to Elements Security Center.", "step.step_logging_in_to_esc_000019_1BA17": "To log in, use your business account and the temporary password that you have received.", "substep.substep_logging_in_to_esc_00001F_510C6": "Install Elements Agent and turn on Elements Agent scanning on existing devices.", "substep.substep_logging_in_to_esc_000023_CD3A9": "Onboard the Azure tenant to integrate identity data into Elements Exposure Management.", "substep.substep_logging_in_to_esc_000026_FF0E7": "Configure Cloud Scan nodes to detect and assess internet-facing assets.", "substep.substep_logging_in_to_esc_000028_47980": "Configure External Attack Surface to detect internet-facing assets (EASM).", "substep.substep_logging_in_to_esc_00002A_604DF": "Install and configure Elements Scan nodes to scan all non-internet-facing devices.", "step.step_logging_in_to_esc_00001B_355B4": "To subscribe Exposure Management for Users, do the following:", "substep.substep_logging_in_to_esc_000030_76AF9": "Onboard the Azure tenant, if you have not done it already.", "substep.substep_logging_in_to_esc_000032_3EB57": "Onboard the AWS tenant.", "substep.substep_logging_in_to_esc_000034_C145C": "Configure and schedule cloud accounts scans.", "step.step_logging_in_to_esc_00002C_9FEA0": "To subscribe Exposure Management for Cloud, do the following:", "content.p_logging_in_to_esc_000036_322BF": "Next, create additional administrator accounts.", "desc": [ "content.p_logging_in_to_esc_000013_DB7A5", { "steps.steps_logging_in_to_esc_000015_FD235": [ "step.step_logging_in_to_esc_000016_3D7B3", "step.step_logging_in_to_esc_000019_1BA17", "step.step_logging_in_to_esc_00001B_355B4", { "substeps.substepsalpha_loggingalpha_inalpha_toalpha_escalpha_00001Ealpha_636D3": [ "substep.substep_logging_in_to_esc_00001F_510C6", "substep.substep_logging_in_to_esc_000023_CD3A9", "substep.substep_logging_in_to_esc_000026_FF0E7", "substep.substep_logging_in_to_esc_000028_47980", "substep.substep_logging_in_to_esc_00002A_604DF" ] }, "step.step_logging_in_to_esc_00002C_9FEA0", { "substeps.substepsalpha_loggingalpha_inalpha_toalpha_escalpha_00002Falpha_4573C": [ "substep.substep_logging_in_to_esc_000030_76AF9", "substep.substep_logging_in_to_esc_000032_3EB57", "substep.substep_logging_in_to_esc_000034_C145C" ] } ] }, "content.p_logging_in_to_esc_000036_322BF" ], "related": [ "concept_om4_44t_cbc-latest-en", "enabling_disabling_ea_scan_on_devices-latest-en", "adding_azure_tenant-latest-en", "scanning_cloud_accounts-latest-en", "external_attack_surface_scans-latest-en", "task_xgq_s4x_dbc-latest-en", "installation_steps_scan_nodes_linux-latest-en", "adding_azure_cloud_accounts-latest-en", "adding_aws_account-latest-en" ] }, "creating_new_admins-latest-en.json": { "title": "title_creating_new_admins_000001CB44", "title_creating_new_admins_000001CB44": "Create administrator accounts", "shortdesc": "shortdesc_creating_new_admins_0000028923", "shortdesc_creating_new_admins_0000028923": "Creates additional administrator accounts in WithSecure Elements Exposure Management.", "content.p_creating_new_admins_000011FAC1": "To add administrator accounts in WithSecure Elements Exposure Management:", "step.step_creating_new_admins_000014BDAF": "In Elements Security Center, from the sidebar, select Management > Organization settings > Security Administrators", "step.step_creating_new_admins_00001B1689": "Select Add administrator.", "step.step_creating_new_admins_00001E19DF": "Under Administrator details, enter the user's email address, select the desired language, and then select Next.", "subchoice.choice_creating_new_admins_000026D3DD": "For Exposure Management for User , under Exposure Management, select Full Editing, and then select Next.", "subchoice.choice_creating_new_admins_00002BCC17": "For Exposure Management for Cloud, under Exposure Management, select Full Editing, and select Next.", "step.step_creating_new_admins_000022A089": "Under Roles, do the following:", "content.p_creating_new_admins_0000349D61": "A new administrator account was added.", "step.step_creating_new_admins_000030328A": "Under Summary, review the information and select Add.", "step.step_creating_new_admins_000035F218": "Select Done.", "step.step_creating_new_admins_00003896C0": "Under Environment, select Devices and from the icon, select Add new device.", "step.step_creating_new_admins_00003ECA65": "Select the subscription to use and select Next.", "step.step_creating_new_admins_0000412170": "Follow the steps in the wizard and select Send to send an email invitation to one or more users with a download link to the installer.", "content.p_creating_new_admins_0000445B86": "Next, grant the Exposure Management role to an existing administrator.", "desc": [ "content.p_creating_new_admins_000011FAC1", { "steps.steps_creating_new_admins_000013C257": [ "step.step_creating_new_admins_000014BDAF", "step.step_creating_new_admins_00001B1689", "step.step_creating_new_admins_00001E19DF", "step.step_creating_new_admins_000022A089", { "subchoices.choices_creating_new_admins_0000252F7F": [ "subchoice.choice_creating_new_admins_000026D3DD", "subchoice.choice_creating_new_admins_00002BCC17" ] }, "step.step_creating_new_admins_000030328A", "content.p_creating_new_admins_0000349D61", "step.step_creating_new_admins_000035F218", "step.step_creating_new_admins_00003896C0", "step.step_creating_new_admins_00003ECA65", "step.step_creating_new_admins_0000412170" ] }, "content.p_creating_new_admins_0000445B86" ] }, "giving_exposure_management_access_role_to_existing_users-latest-en.json": { "title": "title_granting_xm_role_to_exis_06A47", "title_granting_xm_role_to_exis_06A47": "Grant existing users the Exposure Management role", "shortdesc": "shortdesc_granting_xm_role_to_exis_07C9C", "shortdesc_granting_xm_role_to_exis_07C9C": "Grant the Exposure Management role to an existing administrator in Elements Security Center.", "content.p_granting_xm_role_to_exis_0C3BD": "To grant the Exposure Management role to an existing administrator:", "step.step_granting_xm_role_to_exis_0AE9D": "In Element Security Center, from the sidebar, select Management > Organization settings > Security Administrators .", "step.step_granting_xm_role_to_exis_0717A": "Locate the administrator who needs the Exposure Management access and select their email address.", "step.step_granting_xm_role_to_exis_076DF": "In the Summary view, under Roles, select Exposure Management > Exposure > Full editing .", "step.step_granting_xm_role_to_exis_084A3": "Click Save to apply the changes.", "desc": [ "content.p_granting_xm_role_to_exis_0C3BD", { "steps.steps_granting_xm_role_to_exis_0F47A": [ "step.step_granting_xm_role_to_exis_0AE9D", "step.step_granting_xm_role_to_exis_0717A", "step.step_granting_xm_role_to_exis_076DF", "step.step_granting_xm_role_to_exis_084A3" ] } ] }, "concept_wvr_l52_cbc-latest-en.json": { "title": "title_xm_onboarding_000001_4009B71B", "title_xm_onboarding_000001_4009B71B": "Asset onboarding", "shortdesc": "shortdesc_xm_onboarding_000002_C7036554", "shortdesc_xm_onboarding_000002_C7036554": "Onboarding assets - services and technologies such as devices, cloud, and identities - increases coverage and helps you evaluate your organization's digital perimeter.", "content.p_xm_onboarding_000014_71BEC44F": "As organizations transition to cloud-based infrastructure and adopt hybrid work models, they face a critical challenge: a diminishing understanding of their digital assets and perimeter. This lack of visibility makes it harder to protect against cyber threats. Customers need new ways to protect their data and systems as threats keep evolving.", "desc": [ "content.p_xm_onboarding_000014_71BEC44F" ] }, "concept_om4_44t_cbc-latest-en.json": { "title": "title_onboarding_devices_000001_B481", "title_onboarding_devices_000001_B481": "Device onboarding ", "shortdesc": "shortdesc_onboarding_devices_000002_0121", "shortdesc_onboarding_devices_000002_0121": "Onboarding devices brings them under continuous vulnerability management by installing WithSecure Elements Agent or using scan nodes.", "content.p_onboarding_devices_00000F_B5D1": "To bring your endpoint devices under continuous vulnerability management, onboard them to Elements Exposure Management. You can install WithSecure Elements Agent on supported devices, or use scan nodes to scan devices that cannot run the agent.", "desc": [ "content.p_onboarding_devices_00000F_B5D1" ] }, "activating_scanning_in_existing_elements_installation-latest-en.json": { "title": "title_existing_elements_instal_037BF", "title_existing_elements_instal_037BF": "Existing WithSecure Elements Agents", "shortdesc": "shortdesc_existing_elements_instal_04DCD", "shortdesc_existing_elements_instal_04DCD": "If you are using Elements Endpoint Protection on Windows devices in your network, you do not need to install WithSecure Elements Agent on them. This applies if you want to run vulnerability scans on those devices.", "content.p_existing_elements_instal_0039A": "In such cases, go directly to Environment > Devices > Computers and select those devices for vulnerability scanning.", "content.note_existing_elements_instal_0812D": "Note: You only need to install the standalone WithSecure Elements Agent with Exposure Management (XM) capabilities on devices not already using Elements Agent for other services.", "desc": [ "content.p_existing_elements_instal_0039A", "content.note_existing_elements_instal_0812D" ] }, "task_vm5_svt_cbc-latest-en.json": { "title": "title_installing_agent_win_000002325", "title_installing_agent_win_000002325": "Install new WithSecure Elements Agents", "shortdesc": "shortdesc_installing_agent_win_00000E1D5", "shortdesc_installing_agent_win_00000E1D5": "Installs WithSecure Elements Agent on your devices.", "content.p_installing_agent_win_00001F48C": "WithSecure Elements Agent requirements:", "content.p_installing_agent_win_00001565F": "WithSecure Elements Agent supports the following operating system versions:", "step.step_installing_agent_win_0000184AF": "Microsoft Windows 11 (64-bit edition)", "step.step_installing_agent_win_00001BBBF": "Microsoft Windows 10 (all 32-bit and 64-bit editions), ARM-based tablets are not supported", "content.p_installing_agent_win_00001FEC7": "You can find the list of supported Windows server versions.", "content.p_installing_agent_win_000017F17": "System requirements:", "step.step_installing_agent_win_000019DFE": "Processor: Intel Pentium 4 2GHz or higher (processor must support SSE2).", "step.step_installing_agent_win_00001681D": "Memory: 1 GB on 32-bit systems / 2 GB or more on 64-bit systems", "step.step_installing_agent_win_00002DA2E": "Disk space: 2 GB free disk space", "step.step_installing_agent_win_000024DAB": "Display with a resolution of 1024 x 768 or higher", "step.step_installing_agent_win_00002A814": "Internet Connection: An Internet connection is required to confirm your subscription, receive product updates, and use the cloud-based detection", "step.step_installing_agent_win_000023408": "Javascript must be turned on in the browser settings to use active block pages", "step.step_installing_agent_win_0000217A8": "Windows Update Agent (WUA): The Windows Update service and API must be accessible and not blocked by security policies, firewalls, or third-party endpoint protection software. This is required for assessing security patch compliance. The service is enabled by default in most environments, so no action is usually needed.", "content.p_installing_agent_win_000021B6D": "Supported browsers:", "step.step_installing_agent_win_000020B6E": "Microsoft Edge (the latest versions)", "step.step_installing_agent_win_00002249F": "Google Chrome (the latest versions)", "step.step_installing_agent_win_00002F379": "Mozilla Firefox (the latest versions)", "step.step_installing_agent_win_000024C06": "Safari (the latest versions)", "content.p_installing_agent_win_000022229": "To install WithSecure Elements Agent:", "step.step_installing_agent_win_00002A9BF": "In Elements Security Center, select Management > Downloads .", "content.note_installing_agent_win_00003F986": "Note: The downloaded exe file includes the subscription key.", "content.p_installing_agent_win_00003E945": "The installation file is downloaded.", "step.step_installing_agent_win_0000340BD": "Under WithSecure Elements Agent, select Download.", "content.p_installing_agent_win_000034CD4": "To use command-line parameters, start the installation with the following command: ElementsAgentInstaller[AB12-CD34-EF56-GH78].exe", "content.note_installing_agent_win_00004D6D1": "Note: To perform a silent installation (if there is no sidegrade), add the following to the installer file name: --silent. For example, installer_AB12-CD34-EF56-GH78_.exe --silent. To do this, you must have the subscription key added to the installer file name.", "step.step_installing_agent_win_00003CA27": "Locate the downloaded installation file and double-click it to start the installation.", "step.step_installing_agent_win_00004DA39": "Select the language and restart options that you want to use for installation, and select Next.", "step.step_installing_agent_win_00004733D": "Read the license agreement. To accept the agreement and continue, click Accept.", "step.step_installing_agent_win_000041C98": "On the Subscription key screen, enter your subscription key that you can copy from under Settings > General settings > Subscription details in Elements Security Center, and select Next.", "step.step_installing_agent_win_00005A7A0": "Follow the on-screen instructions to complete the installation.", "content.p_installing_agent_win_00005341F": "The WithSecure Elements Agent is installed on the device.", "desc": [ "content.p_installing_agent_win_00001F48C", "content.p_installing_agent_win_00001565F", { "steps.ul_installing_agent_win_000012C02": [ "step.step_installing_agent_win_0000184AF", "step.step_installing_agent_win_00001BBBF" ] }, "content.p_installing_agent_win_00001FEC7", "content.p_installing_agent_win_000017F17", { "steps.ul_installing_agent_win_00001DD8D": [ "step.step_installing_agent_win_000019DFE", "step.step_installing_agent_win_00001681D", "step.step_installing_agent_win_00002DA2E", "step.step_installing_agent_win_000024DAB", "step.step_installing_agent_win_00002A814", "step.step_installing_agent_win_000023408", "step.step_installing_agent_win_0000217A8" ] }, "content.p_installing_agent_win_000021B6D", { "steps.ul_installing_agent_win_00002E1A2": [ "step.step_installing_agent_win_000020B6E", "step.step_installing_agent_win_00002249F", "step.step_installing_agent_win_00002F379", "step.step_installing_agent_win_000024C06" ] }, "content.p_installing_agent_win_000022229", { "steps.steps_installing_agent_win_00002A03D": [ "step.step_installing_agent_win_00002A9BF", "step.step_installing_agent_win_0000340BD", "content.note_installing_agent_win_00003F986", "content.p_installing_agent_win_00003E945", "step.step_installing_agent_win_00003CA27", "content.p_installing_agent_win_000034CD4", "content.note_installing_agent_win_00004D6D1", "step.step_installing_agent_win_00004DA39", "step.step_installing_agent_win_00004733D", "step.step_installing_agent_win_000041C98", "step.step_installing_agent_win_00005A7A0" ] }, "content.p_installing_agent_win_00005341F" ] }, "enabling_disabling_ea_scan_on_devices-latest-en.json": { "title": "title_turning_on_off_ea_scan_o_039B1", "title_turning_on_off_ea_scan_o_039B1": "Turn on or off WithSecure Elements Agent scanning on devices", "shortdesc": "shortdesc_turning_on_off_ea_scan_o_062F2", "shortdesc_turning_on_off_ea_scan_o_062F2": "WithSecure Elements Agent is a Windows application that offers an alternative method for conducting vulnerability scans on devices within your network.", "content.p_turning_on_off_ea_scan_o_0A9B0": "To obtain vulnerability scan results for endpoint devices in your network, you must turn on scanning on those devices.", "content.note_turning_on_off_ea_scan_o_06A3C": "Note: By default, scanning is turned on automatically after WithSecure Element Agent is installed with an Exposure Management subscription key.", "substep.substep_turning_on_off_ea_scan_o_072BF": "In Elements Security Center, under Environment, select Devices Computers to view a list of the detected devices with WithSecure Elements Agent installed.", "content.p_turning_on_off_ea_scan_o_0FC24": "This activates vulnerability management on the device and initiates the initial scan. It also generates a scanning schedule based on your organization's settings, for example, running a vulnerability scan every six hours.", "substep.substep_turning_on_off_ea_scan_o_04DCD": "Select the devices for which you want to turn on vulnerability scanning, and from the action bar that appears, select Vulnerability Management scan > Enable scanning .", "content.p_turning_on_off_ea_scan_o_0ADFE": "Initially, device details include only basic telemetry data such as IP address, hostname, and MAC address. Over time, vulnerability findings from the WithSecure Elements Agent scan begin to appear on the Vulnerabilities and findings tab of the device's Asset details page. After the initial scan, WithSecure Elements Agent runs a new scan whenever major changes are made to the software that is installed on the device.", "substep.substep_turning_on_off_ea_scan_o_0614D": "Select the Vulnerability Assets tab and verify that the activated devices are listed.", "step.step_turning_on_off_ea_scan_o_0D91A": "To turn on vulnerability scanning, do the following:", "substep.substep_turning_on_off_ea_scan_o_03644": "In Elements Security Center, under Environment, select Devices > Computers to view a list of the detected devices that have WithSecure Elements Agent installed.", "substep.substep_turning_on_off_ea_scan_o_02C1F": "Select the devices for which you want to turn off vulnerability scanning, then in the action bar that appears toggle the Enable or disable scanning switch and select Disable scanning.", "step.step_turning_on_off_ea_scan_o_01E95": "To turn off vulnerability scanning, do the following:", "desc": [ "content.p_turning_on_off_ea_scan_o_0A9B0", "content.note_turning_on_off_ea_scan_o_06A3C", { "steps.steps_turning_on_off_ea_scan_o_0B443": [ "step.step_turning_on_off_ea_scan_o_0D91A", { "substeps.substepsalpha_turningalpha_onalpha_offalpha_eaalpha_scanalpha_oalpha_08F16": [ "substep.substep_turning_on_off_ea_scan_o_072BF", "substep.substep_turning_on_off_ea_scan_o_04DCD", "content.p_turning_on_off_ea_scan_o_0FC24", "substep.substep_turning_on_off_ea_scan_o_0614D", "content.p_turning_on_off_ea_scan_o_0ADFE" ] }, "step.step_turning_on_off_ea_scan_o_01E95", { "substeps.substepsalpha_turningalpha_onalpha_offalpha_eaalpha_scanalpha_oalpha_0D074": [ "substep.substep_turning_on_off_ea_scan_o_03644", "substep.substep_turning_on_off_ea_scan_o_02C1F" ] } ] } ] }, "changing_frequency_endpoint_status_updates-latest-en.json": { "title": "title_changing_frequency_endpo_03205", "title_changing_frequency_endpo_03205": "Change the frequency for endpoint status updates", "shortdesc": "shortdesc_changing_frequency_endpo_0E797", "shortdesc_changing_frequency_endpo_0E797": "You can set how often Elements Agent sends updated status information on vulnerabilities in the devices in your network to Elements Security Center. ", "content.note_changing_frequency_endpo_09E92": "Note: In addition to the scheduled status updates, endpoints automatically send any information to Elements Security Center from scans that are triggered by changes to the installed software.", "step.step_changing_frequency_endpo_0CF19": "Under Management, select Vulnerability Settings > General settings.", "step.step_changing_frequency_endpo_07638": "Under Miscellaneous, choose the update frequency that you want in the Vulnerability data refresh schedule on endpoints drop-down field.", "step.step_changing_frequency_endpo_02DB7": "Click Save.", "desc": [ "content.note_changing_frequency_endpo_09E92", { "steps.steps_changing_frequency_endpo_05363": [ "step.step_changing_frequency_endpo_0CF19", "step.step_changing_frequency_endpo_07638", "step.step_changing_frequency_endpo_02DB7" ] } ] }, "devices_without_agent-latest-en.json": { "title": "title_devices_without_agent_0000D0C5", "title_devices_without_agent_0000D0C5": "Devices without WithSecure Elements Agent", "shortdesc": "shortdesc_devices_without_agent_00002726", "shortdesc_devices_without_agent_00002726": "Devices without WithSecure Elements Agent can be scanned with a local or cloud scan node.", "content.p_devices_without_agent_0000342A": "To discover and scan devices on a local network, you need a local Scan Node to run your scans.", "content.p_devices_without_agent_00001ABA": "We recommend installing Elements Agent for your Windows devices whenever possible. Devices with WithSecure Elements Agent installed on them have better scanning coverage. In case you cannot or do not want to install Elements Agent on your devices, you can scan them using a local scan node.", "content.p_devices_without_agent_0000DD1E": "For scanning devices that are visible on the public internet, we recommend using WithSecure cloud scan nodes.", "content.title_devices_without_agent_00008B1E": "Local scan nodes", "content.p_devices_without_agent_000024E6": "For local networks, we support scan nodes that can be installed on Windows or Linux servers. There is also a limited support (beta) for Windows 10 and Windows 11 installations.", "content.p_devices_without_agent_0000DA90": "Connectivity to operational technology and other isolated networks", "content.p_devices_without_agent_0000A4E4": "In operational technology (OT) and other isolated networks, scan nodes are deployed locally within each network segment and scan only nearby hosts. The scan nodes do not require internet access; instead, all communication with WithSecure backend services could be routed through a centrally deployed Elements Connector over ports 80/443. This approach minimizes firewall changes, preserves network isolation, and allows secure scanning of segmented and restricted environments.", "content.title_devices_without_agent_0000EE4F": "Cloud scan nodes", "content.p_devices_without_agent_0000AA7B": "For devices visible in the internet, we offer you a robust collection of scan nodes at no additional cost. Using a discovery scan, you can identify devices that are exposed to the public internet, and with a system scan, you can scan them for vulnerabilities", "content.p_devices_without_agent_00005BD2": "Security products may identify scan traffic as malicious. Add the IP addresses in 46.228.135.0/26 to the allow lists of protection mechanisms such as firewalls and intrusion prevention systems (IPS). This helps prevent false scan results.", "content.p_devices_without_agent_00008549": "Cloud scan nodes are available directly when you are configuring scans.", "desc": [ "content.p_devices_without_agent_0000342A", "content.p_devices_without_agent_00001ABA", "content.p_devices_without_agent_0000DD1E", "content.title_devices_without_agent_00008B1E", "content.p_devices_without_agent_000024E6", "content.p_devices_without_agent_0000DA90", "content.p_devices_without_agent_0000A4E4", "content.title_devices_without_agent_0000EE4F", "content.p_devices_without_agent_0000AA7B", "content.p_devices_without_agent_00005BD2", "content.p_devices_without_agent_00008549" ], "related": [ "concept_r1p_wpx_dbc-latest-en" ] }, "setting_up_labeling_for_unmanaged_devices-latest-en.json": { "title": "title_setting_up_labeling_for__0CE40", "title_setting_up_labeling_for__0CE40": "Set up labeling rules for unmanaged devices", "shortdesc": "shortdesc_setting_up_labeling_for__05950", "shortdesc_setting_up_labeling_for__05950": "You can set up automatic labeling rules for unmanaged devices to categorize network assets, such as cameras, printers, and PoS terminals based on various criteria. ", "step.step_setting_up_labeling_for__0B956": "In WithSecure Elements Center, go to Security Configurations > Profiles > Profile assignment rules .", "step.step_setting_up_labeling_for__0E646": "Scroll to Unmanaged devices labeling rules to view existing labeling rules.", "content.note_setting_up_labeling_for__0934E": "Note: You can add labeling rules only on the Company level.", "step.step_setting_up_labeling_for__00E1C": "Select Add labeling rule.", "subchoice.choice_setting_up_labeling_for__0AE56": "IPv4", "subchoice.choice_setting_up_labeling_for__0ACFC": "DNS", "subchoice.choice_setting_up_labeling_for__04F4D": "Host name", "step.step_setting_up_labeling_for__056BF": "In the Add rule pane, from the Condition drop-down menu, select one of the following:", "content.p_setting_up_labeling_for__00FFC": "For IPv4, this may be a single address or an IP range, for example, 10.0.0.0/24.", "step.step_setting_up_labeling_for__0E612": "Enter the value for the condition.", "step.step_setting_up_labeling_for__0ECB7": "The client type is automatically set to Unmanaged device.", "content.p_setting_up_labeling_for__038F3": "Labels may represent device type (camera, printer, PoS), location, or any other classification used in your environment.", "step.step_setting_up_labeling_for__00DCC": "From the Add labels drop-down menu, select one or more labels.", "step.step_setting_up_labeling_for__06DC7": "Select Add rule to save the settings.", "content.p_setting_up_labeling_for__0653F": "Devices that match the defined condition are automatically assigned the selected labels. You can use these labels to filter and organize unmanaged devices across WithSecure Elements Security Center.", "desc": [ { "steps.steps_setting_up_labeling_for__0E61A": [ "step.step_setting_up_labeling_for__0B956", "step.step_setting_up_labeling_for__0E646", "step.step_setting_up_labeling_for__00E1C", "content.note_setting_up_labeling_for__0934E", "step.step_setting_up_labeling_for__056BF", { "subchoices.choices_setting_up_labeling_for__0A17E": [ "subchoice.choice_setting_up_labeling_for__0AE56", "subchoice.choice_setting_up_labeling_for__0ACFC", "subchoice.choice_setting_up_labeling_for__04F4D" ] }, "step.step_setting_up_labeling_for__0E612", "content.p_setting_up_labeling_for__00FFC", "step.step_setting_up_labeling_for__0ECB7", "step.step_setting_up_labeling_for__00DCC", "content.p_setting_up_labeling_for__038F3", "step.step_setting_up_labeling_for__06DC7" ] }, "content.p_setting_up_labeling_for__0653F" ] }, "concept_r1p_wpx_dbc-latest-en.json": { "title": "title_installing_scan_nodes_00001C3F", "title_installing_scan_nodes_00001C3F": "Installing scan nodes on Windows server", "shortdesc": "shortdesc_installing_scan_nodes_00009DF0", "shortdesc_installing_scan_nodes_00009DF0": "Scan nodes are used to perform the actual discovery and network vulnerability scans.", "content.p_installing_scan_nodes_000085F9": "A scan node can be installed with one or more of the following scanning engines:", "step.step_installing_scan_nodes_0000C443": "Discovery scan is a network discovery and port scanning engine", "step.step_installing_scan_nodes_000086FF": "System scan is able to scan IP addresses for known vulnerabilities", "step.step_installing_scan_nodes_000007FF": "Web scan is designed to scan custom web applications for vulnerabilities", "content.title_installing_scan_nodes_0000BDFA": "Scan node requirements (Windows)", "content.p_installing_scan_nodes_00000062": "Supported operating systems.", "step.step_installing_scan_nodes_0000DF69": "Latest Windows Server (minimum: Windows Server 2019)", "content.note_installing_scan_nodes_0000F040": "Note: Note: The recommended operating system for Scan Node installation is Windows Server (2019, 2022, or 2025). Windows 11 is also supported, and no differences in performance or result accuracy are expected. However, our pre-release testing primarily targets server operating systems, so the same level of quality assurance cannot be guaranteed for Windows desktop versions.", "step.step_installing_scan_nodes_0000305E": "Windows 10/11 desktop (Beta)", "content.p_installing_scan_nodes_000098BA": "Software requirements.", "step.step_installing_scan_nodes_0000AA23": "Microsoft .NET Framework: recommended version 4.8 (minimum version: 4.7.2)", "step.step_installing_scan_nodes_00009DA6": "npcap", "step.step_installing_scan_nodes_0000605C": "Microsoft Visual C++ 2015-2022 Redistributable Package (x86)", "step.step_installing_scan_nodes_00001E2E": "User account: Local or Active Directory account with administrative rights required during installation", "content.note_installing_scan_nodes_0000E205": "Note: The installer automatically downloads and installs all required third-party components. However, Microsoft Visual C++ is included with the Windows operating system, and the version available depends on the specific Windows OS you are using.", "content.p_installing_scan_nodes_00003DDB": "Hardware requirements.", "step.step_installing_scan_nodes_000022AF": "Minimum 4 GB RAM (recommended: 8GB or more)", "step.step_installing_scan_nodes_0000846C": "Minimum 2 GHz processor", "step.step_installing_scan_nodes_0000EEEF": "Minimum 30 GB disk space", "content.p_installing_scan_nodes_0000C21C": "Network requirements - access to the following URLs:", "step.step_installing_scan_nodes_0000661D": "https://sn-api.radar-prd.fsapi.com, https://gateway.radar-prd.fsapi.com, and https://updates-api.radar-prd.fsapi.com (Elements Vulnerability Management Update Service)", "step.step_installing_scan_nodes_0000DC6F": "https://api.radar-prd.fsapi.com (Elements Vulnerability Management API)", "step.step_installing_scan_nodes_0000B8E2": "If you are using a proxy server, it must allow the following HTTP request methods: GET, HEAD, and POST towards the mentioned web services", "content.note_installing_scan_nodes_0000CE9E": "Note: Antivirus software may detect and block vulnerability scans as malicious activity. If the scan node has antivirus software, we recommend adding the entire scan node installation directory to the allow list. Scheduled antivirus scans can also interfere with Elements Vulnerability Management scans and stop them before completion.", "desc": [ "content.p_installing_scan_nodes_000085F9", { "steps.ul_installing_scan_nodes_00006BA6": [ "step.step_installing_scan_nodes_0000C443", "step.step_installing_scan_nodes_000086FF", "step.step_installing_scan_nodes_000007FF" ] }, "content.title_installing_scan_nodes_0000BDFA", "content.p_installing_scan_nodes_00000062", { "steps.ul_installing_scan_nodes_00006A55": [ "step.step_installing_scan_nodes_0000DF69", "step.step_installing_scan_nodes_0000305E", "content.note_installing_scan_nodes_0000F040" ] }, "content.p_installing_scan_nodes_000098BA", { "steps.ul_installing_scan_nodes_00009FAC": [ "step.step_installing_scan_nodes_0000AA23", "step.step_installing_scan_nodes_00009DA6", "step.step_installing_scan_nodes_0000605C", "step.step_installing_scan_nodes_00001E2E" ] }, "content.note_installing_scan_nodes_0000E205", "content.p_installing_scan_nodes_00003DDB", { "steps.ul_installing_scan_nodes_00005688": [ "step.step_installing_scan_nodes_000022AF", "step.step_installing_scan_nodes_0000846C", "step.step_installing_scan_nodes_0000EEEF" ] }, "content.p_installing_scan_nodes_0000C21C", { "steps.ul_installing_scan_nodes_000060F4": [ "step.step_installing_scan_nodes_0000661D", "step.step_installing_scan_nodes_0000DC6F", "step.step_installing_scan_nodes_0000B8E2" ] }, "content.note_installing_scan_nodes_0000CE9E" ] }, "task_xgq_s4x_dbc-latest-en.json": { "title": "title_installation_steps_scan__0B886", "title_installation_steps_scan__0B886": "Install a scan node on Windows", "shortdesc": "shortdesc_installation_steps_scan__0F457", "shortdesc_installation_steps_scan__0F457": "Download and install a scan node on Windows from Elements Security Center.", "content.p_installation_steps_scan__0FE07": "Download and install a scan node on a Windows server from the Elements Security Center.", "content.note_installation_steps_scan__02536": "Note: You can download Scan Node installers for Windows and Linux from Elements Security Center under Management > Downloads .", "substep.substep_installation_steps_scan__0F713": "In Elements Security Center, under Security Configurations, select Scans > Scan nodes and then select Add new scan node.", "substep.substep_installation_steps_scan__0BB58": "Select Request a new scan node > Next.", "substep.substep_installation_steps_scan__0B216": "Enter a name and description for the scan node, then select Request.", "content.p_installation_steps_scan__08DD1": "The resulting page includes the download link and basic instructions. The license information included in the installation package is valid for 14 days.", "step.step_installation_steps_scan__09F56": "Download the scan node installation package and the scan node license file:", "content.p_installation_steps_scan__06E6A": "The installation wizard checks that all prerequisites are installed and installs any missing software if necessary.", "step.step_installation_steps_scan__08341": "Run the scan node installer (executable) and follow the installation wizard steps.", "step.step_installation_steps_scan__0DB52": "After successful installation, verify that the scan node appears in the list of scan nodes in Elements Security Center.", "desc": [ "content.p_installation_steps_scan__0FE07", { "steps.steps_installation_steps_scan__0A949": [ "step.step_installation_steps_scan__09F56", "content.note_installation_steps_scan__02536", { "substeps.substepsalpha_installationalpha_stepsalpha_scanalpha_alpha_0992D": [ "substep.substep_installation_steps_scan__0F713", "substep.substep_installation_steps_scan__0BB58", "substep.substep_installation_steps_scan__0B216" ] }, "content.p_installation_steps_scan__08DD1", "step.step_installation_steps_scan__08341", "content.p_installation_steps_scan__06E6A", "step.step_installation_steps_scan__0DB52" ] } ], "related": [ "verify_installation_scan_nodes-latest-en" ] }, "verify_installation_scan_nodes-latest-en.json": { "title": "title_verify_installation_scan_0817E", "title_verify_installation_scan_0817E": "Verify installation", "shortdesc": "shortdesc_verify_installation_scan_07307", "shortdesc_verify_installation_scan_07307": "Verify that a new scan node runs, downloads its scan engines, and connects to Elements Security Center.", "content.p_verify_installation_scan_090F3": "After installing a scan node on Windows, verify that it started successfully and can reach Elements Security Center.", "content.p_verify_installation_scan_0414D": "You can use the Task Manager or Windows Services to verify if the service is running.", "step.step_verify_installation_scan_019B9": "Verify that the Windows Service WithSecure Radar Agent is installed and running.", "subchoice.choice_verify_installation_scan_098D4": "[drive]:\\Program Files (x86)\\F-Secure\\RadarScanAgent\\binaries_ds", "subchoice.choice_verify_installation_scan_0018C": "[drive]:\\Program Files (x86)\\F-Secure\\RadarScanAgent\\binaries_ws", "subchoice.choice_verify_installation_scan_0235A": "[drive]:\\Program Files (x86)\\F-Secure\\RadarScanAgent\\binaries_ss", "content.p_verify_installation_scan_0AF04": "After the installation, wait 5-10 minutes for the Radar.Scan.Daemon to download all the binaries. Once completed, you should see the following folders:", "content.note_verify_installation_scan_0331D": "Note: If a scan engine module is deactivated, its binaries will not be downloaded.", "step.step_verify_installation_scan_095C8": "Verify that the scanning engines and plugins can be downloaded.", "substep.substep_verify_installation_scan_0B6B3": "Log in to Elements Security Center.", "content.p_verify_installation_scan_0FD84": "It should always be less than one minute since the scan node attempted to connect to the Elements Security Center. If Last seen is longer, see the troubleshooting section.", "substep.substep_verify_installation_scan_00306": "Under Security Configurations, select Scans > Scan nodes.", "step.step_verify_installation_scan_0D5A1": "Verify that the scan node can connect to the Elements Security Center:", "step.step_verify_installation_scan_0B802": "Review the log files in [drive]:\\Program Files (x86)\\F-Secure\\RadarScanAgent\\logs for other errors.", "content.p_verify_installation_scan_05E41": "For example:", "substep.substep_verify_installation_scan_0E971": "Run a Discovery Scan using the Host Discovery mode.", "substep.substep_verify_installation_scan_0FB33": "Run a System Scan with a limited port range (e.g. TCP/80,443).", "substep.substep_verify_installation_scan_02031": "Run a Web Scan with Run attacks disabled.", "step.step_verify_installation_scan_0D101": "Run a few test scans.", "desc": [ "content.p_verify_installation_scan_090F3", { "steps.steps_verify_installation_scan_0411A": [ "step.step_verify_installation_scan_019B9", "content.p_verify_installation_scan_0414D", "step.step_verify_installation_scan_095C8", "content.p_verify_installation_scan_0AF04", { "subchoices.ul_verify_installation_scan_0EC76": [ "subchoice.choice_verify_installation_scan_098D4", "subchoice.choice_verify_installation_scan_0018C", "subchoice.choice_verify_installation_scan_0235A" ] }, "content.note_verify_installation_scan_0331D", "step.step_verify_installation_scan_0D5A1", { "substeps.substepsalpha_verifyalpha_installationalpha_scanalpha_0A51E": [ "substep.substep_verify_installation_scan_0B6B3", "substep.substep_verify_installation_scan_00306", "content.p_verify_installation_scan_0FD84" ] }, "step.step_verify_installation_scan_0B802", "step.step_verify_installation_scan_0D101", "content.p_verify_installation_scan_05E41", { "substeps.substepsalpha_verifyalpha_installationalpha_scanalpha_00608": [ "substep.substep_verify_installation_scan_0E971", "substep.substep_verify_installation_scan_0FB33", "substep.substep_verify_installation_scan_02031" ] } ] } ] }, "configuring_scan_nodes-latest-en.json": { "title": "title_configuring_scan_nodes_0003EBB", "title_configuring_scan_nodes_0003EBB": "Configure scan nodes", "shortdesc": "shortdesc_configuring_scan_nodes_000B5D3", "shortdesc_configuring_scan_nodes_000B5D3": "Configure an Elements Exposure Management scan node through the control center application to set its update interval, scan engines, and scan limits.", "content.p_configuring_scan_nodes_000669E": "Scan nodes can be configured via the control center application.", "step.step_configuring_scan_nodes_000A39C": "Find the scan node installation directory (e.g. [drive]:\\Program Files (x86)\\F-Secure\\RadarScanAgent\\).", "step.step_configuring_scan_nodes_000FBCC": "Start the control center application FSRadarAgent.Tray.exe.", "cell.entry_configuring_scan_nodes_00081A8": "ID", "cell.entry_configuring_scan_nodes_00034EF": "Name", "cell.entry_configuring_scan_nodes_00005CF": "Value (recommended)", "cell.entry_configuring_scan_nodes_0009F03": "Description", "cell.entry_configuring_scan_nodes_00011EB": "4", "cell.entry_configuring_scan_nodes_0003FB9": "SCANNODE.ModuleLoopInterval", "cell.entry_configuring_scan_nodes_0003C47": "14400000", "cell.entry_configuring_scan_nodes_000E2EB": "How often the scan node should check for updates in milliseconds. The default is every 4 hours.", "cell.entry_configuring_scan_nodes_000CD82": "10-12", "cell.entry_configuring_scan_nodes_000A8B1": "Module.{ScanEngineName}.Enabled", "cell.entry_configuring_scan_nodes_00070C7": "True", "cell.entry_configuring_scan_nodes_000ED66": "Defines which scan engines are enabled on the scan node.", "cell.entry_configuring_scan_nodes_000D22B": "13-15", "cell.entry_configuring_scan_nodes_000B8DA": "Module.{ScanEngineName}.ScanNodeId", "cell.entry_configuring_scan_nodes_00010AC": "GUID", "cell.entry_configuring_scan_nodes_0007684": "The unique identifier for each scan engine module.
The IDs are used when new scan nodes are added to Elements Security Center.", "cell.entry_configuring_scan_nodes_0001191": "19-21", "cell.entry_configuring_scan_nodes_00092AA": "Module.{ScanEngineName}.MaxSimultaneousScans", "cell.entry_configuring_scan_nodes_000E54B": "DiscoveryScan: 10 SystemScan: 30 WebScan: 5", "cell.entry_configuring_scan_nodes_0002635": "These values control the maximum number of simultaneous scans that the scan node is allowed to run.
Too high values might result in open ports being missed during port scanning.", "cell.entry_configuring_scan_nodes_000D409": "127", "cell.entry_configuring_scan_nodes_000D86E": "Communication.WebSerivce.Updates.SkipSSLCertificateValidation", "cell.entry_configuring_scan_nodes_000EE74": "False", "cell.entry_configuring_scan_nodes_0004F79": "Skip certificate validation while connecting to Elements Vulnerability Management Update Service.", "cell.entry_configuring_scan_nodes_0004BEB": "128", "cell.entry_configuring_scan_nodes_00018C8": "Communication.WebSerivce.SecurityCentre.SkipSSLCertificateValidation", "cell.entry_configuring_scan_nodes_00012C0": "False", "cell.entry_configuring_scan_nodes_0004303": "Skip certificate validation while connecting to Elements Security Center.", "content.p_configuring_scan_nodes_0007EAD": "The most important configuration options are:", "step.step_configuring_scan_nodes_0008FB9": "Go to the Settings tab and review the configuration options.", "content.title_configuring_scan_nodes_000DF5E": "Scan node configuration options", "desc": [ "content.p_configuring_scan_nodes_000669E", { "steps.steps_configuring_scan_nodes_000A2F7": [ "step.step_configuring_scan_nodes_000A39C", "step.step_configuring_scan_nodes_000FBCC", "step.step_configuring_scan_nodes_0008FB9", "content.p_configuring_scan_nodes_0007EAD", { "table.table_scan-node-configuration-op349E": [ { "thead.thead_configuring_scan_nodes_000006B": [ "cell.entry_configuring_scan_nodes_00081A8", "cell.entry_configuring_scan_nodes_00034EF", "cell.entry_configuring_scan_nodes_00005CF", "cell.entry_configuring_scan_nodes_0009F03" ] }, { "row.row_configuring_scan_nodes_0001021": [ "cell.entry_configuring_scan_nodes_00011EB", "cell.entry_configuring_scan_nodes_0003FB9", "cell.entry_configuring_scan_nodes_0003C47", "cell.entry_configuring_scan_nodes_000E2EB" ] }, { "row.row_configuring_scan_nodes_000FE9C": [ "cell.entry_configuring_scan_nodes_000CD82", "cell.entry_configuring_scan_nodes_000A8B1", "cell.entry_configuring_scan_nodes_00070C7", "cell.entry_configuring_scan_nodes_000ED66" ] }, { "row.row_configuring_scan_nodes_000F47F": [ "cell.entry_configuring_scan_nodes_000D22B", "cell.entry_configuring_scan_nodes_000B8DA", "cell.entry_configuring_scan_nodes_00010AC", "cell.entry_configuring_scan_nodes_0007684" ] }, { "row.row_configuring_scan_nodes_0006B5A": [ "cell.entry_configuring_scan_nodes_0001191", "cell.entry_configuring_scan_nodes_00092AA", "cell.entry_configuring_scan_nodes_000E54B", "cell.entry_configuring_scan_nodes_0002635" ] }, { "row.row_configuring_scan_nodes_000B15D": [ "cell.entry_configuring_scan_nodes_000D409", "cell.entry_configuring_scan_nodes_000D86E", "cell.entry_configuring_scan_nodes_000EE74", "cell.entry_configuring_scan_nodes_0004F79" ] }, { "row.row_configuring_scan_nodes_000FAEE": [ "cell.entry_configuring_scan_nodes_0004BEB", "cell.entry_configuring_scan_nodes_00018C8", "cell.entry_configuring_scan_nodes_00012C0", "cell.entry_configuring_scan_nodes_0004303" ] } ] } ] }, "content.title_configuring_scan_nodes_000DF5E" ] }, "installing_scan_nodes_linux-latest-en.json": { "title": "title_installing_scan_nodes_li_0762D", "title_installing_scan_nodes_li_0762D": "Installing scan nodes on Linux servers", "shortdesc": "shortdesc_installing_scan_nodes_li_099ED", "shortdesc_installing_scan_nodes_li_099ED": "Scan nodes are used to perform the actual discovery and network vulnerability scans. ", "content.p_installing_scan_nodes_li_0BEDD": "A scan node can be installed with one or more of the following scanning engines:", "step.step_installing_scan_nodes_li_09FFF": "Discovery scan is a network discovery and port scanning engine.", "step.step_installing_scan_nodes_li_00766": "System scan is able to scan IP addresses for known vulnerabilities.", "step.step_installing_scan_nodes_li_0AC90": "Web scan is designed to scan custom web applications for vulnerabilities.", "content.title_installing_scan_nodes_li_04772": "Scan node requirements (Linux)", "step.step_installing_scan_nodes_li_03A56": "Any stable LTS release up to Ubuntu 24.04 (64-bit only). Available for download at Ubuntu Server downloads), or", "step.step_installing_scan_nodes_li_0D6EF": "Any stable LTS release up to Debian 13 (64-bit only). Available for download at Debian downloads)", "step.step_installing_scan_nodes_li_00B9A": "SSH (GUI is not needed, the required X11 libraries are installed automatically as .deb package dependencies)", "subchoice.choice_installing_scan_nodes_li_06185": "https://sn-api.radar-prd.fsapi.com, https://gateway.radar-prd.fsapi.com and http://guts2.fsapi.com/", "subchoice.choice_installing_scan_nodes_li_0ADF4": "https://updates-api.radar-prd.fsapi.com (Elements VM Update Service API)", "step.step_installing_scan_nodes_li_0416D": "Network access to the following:", "subchoice.choice_installing_scan_nodes_li_005EA": "https://api.radar-prd.fsapi.com for accounts with a paid subscription", "subchoice.choice_installing_scan_nodes_li_0CBFD": "URI assigned during the installation process for on-site installations", "subchoice.choice_installing_scan_nodes_li_02E38": "If you are using a proxy server, it must allow the following HTTP request methods: GET, HEAD, and POST towards the mentioned web services", "step.step_installing_scan_nodes_li_02978": "Network access to Elements Vulnerability Management as follows:", "subchoice.choice_installing_scan_nodes_li_0D84F": "Minimum 4 GB RAM (recommended: 8GB)", "subchoice.choice_installing_scan_nodes_li_02D5F": "Minimum 2 GHz processor / 2 CPU in AWS", "subchoice.choice_installing_scan_nodes_li_0B985": "Minimum 30 GB disk space", "step.step_installing_scan_nodes_li_01174": "Hardware", "desc": [ "content.p_installing_scan_nodes_li_0BEDD", { "steps.ul_installing_scan_nodes_li_0C82F": [ "step.step_installing_scan_nodes_li_09FFF", "step.step_installing_scan_nodes_li_00766", "step.step_installing_scan_nodes_li_0AC90" ] }, "content.title_installing_scan_nodes_li_04772", { "steps.ul_installing_scan_nodes_li_04ED3": [ "step.step_installing_scan_nodes_li_03A56", "step.step_installing_scan_nodes_li_0D6EF", "step.step_installing_scan_nodes_li_00B9A", "step.step_installing_scan_nodes_li_0416D", { "subchoices.ul_installing_scan_nodes_li_01905": [ "subchoice.choice_installing_scan_nodes_li_06185", "subchoice.choice_installing_scan_nodes_li_0ADF4" ] }, "step.step_installing_scan_nodes_li_02978", { "subchoices.ul_installing_scan_nodes_li_0D31D": [ "subchoice.choice_installing_scan_nodes_li_005EA", "subchoice.choice_installing_scan_nodes_li_0CBFD", "subchoice.choice_installing_scan_nodes_li_02E38" ] }, "step.step_installing_scan_nodes_li_01174", { "subchoices.ul_installing_scan_nodes_li_064FE": [ "subchoice.choice_installing_scan_nodes_li_0D84F", "subchoice.choice_installing_scan_nodes_li_02D5F", "subchoice.choice_installing_scan_nodes_li_0B985" ] } ] } ] }, "installation_steps_scan_nodes_linux-latest-en.json": { "title": "title_installation_steps_scan__08B85", "title_installation_steps_scan__08B85": "Install a scan node on Linux", "shortdesc": "shortdesc_installation_steps_scan__05EA9", "shortdesc_installation_steps_scan__05EA9": "Follow these steps to install a scan node on your Linux system. ", "content.p_installation_steps_scan__08F31": "Download and install a scan node on a Linux server from the Elements Security Center.", "content.p_installation_steps_scan__016B9": "Using an installation package with automatically applied license information:", "substep.substep_installation_steps_scan__0907A": "In Elements Security Center, under Security Configurations, select Scans > Scan nodes and then select Add new scan node.", "substep.substep_installation_steps_scan__0171B": "Select Request a new scan node > Next .", "content.p_installation_steps_scan__0AA08": "The resulting page includes the download link and basic instructions. The license information included in the installation package is valid for 14 days. You do not need to apply the license manually when you use this type of installation package, although an internet connection is required during installation. If you encounter any issues when applying the license, follow the steps given for applying it manually.", "substep.substep_installation_steps_scan__07B39": "Enter a name and description for the scan node, then select Request.", "content.p_installation_steps_scan__02274": "Using an installation package for manually applied license information:", "content.p_installation_steps_scan__00ADB": "Alternatively, you can also download Scan Node installers for Windows and Linux from Elements Security Center under Management > Downloads or use the following command to download the installation package:", "content.p_installation_steps_scan__01B73": "wget -P ~ --content-disposition
https://download.withsecure.com/SNA/withsecure-xm-scannodeagent-netinstaller_amd64.deb", "substep.substep_installation_steps_scan__08EC7": "Download the scan node installation package from the Elements Security Center downloads page.", "substep.substep_installation_steps_scan__0F03B": "In Elements Security Center, under Security Configurations, select Scans > Scan nodes and then select Add new scan node.", "substep.substep_installation_steps_scan__04EA6": "Select Request a new scan node > Next .", "substep.substep_installation_steps_scan__01829": "Enter a name and description for the scan node, then select Request.", "content.p_installation_steps_scan__0A290": "The URL is valid for 14 days and should have the following format: https://updates-api.radar-prd.fsapi.com/api/2.9/organizations/productLicenses/order?token=2Ub3Tfd(....).", "substep.substep_installation_steps_scan__0DCA5": "Copy the URL under Download scan node license to the clipboard.", "content.p_installation_steps_scan__02A82": "wget -O ~/license.fsrl <URL>", "substep.substep_installation_steps_scan__0BA32": "Use the following command to download the license file to your Linux system, replacing <URL> with the URL that you copied from the Elements Security Center:", "step.step_installation_steps_scan__07BFD": "Download the scan node installation package.", "content.p_installation_steps_scan__06E7F": "These settings are used both for normal scan node operations and for maintenance purposes (installing and updating the scan node).", "content.p_installation_steps_scan__016C9": "echo \"FSECURE_HTTP_PROXY_HOST=www.proxy.example.com\" | sudo tee -a /etc/environment
echo \"FSECURE_HTTP_PROXY_PORT=8080\" | sudo tee -a /etc/environment", "substep.substep_installation_steps_scan__0C51A": "Run the following commands to set the variables using the /etc/environment file:", "substep.substep_installation_steps_scan__0BCBC": "Log out for the changes to take effect and then log in again.", "step.step_installation_steps_scan__0A4E9": "If you need to use a proxy server for communication with external networks, set the FSECURE_HTTP_PROXY_HOST and FSECURE_HTTP_PROXY_PORT environment variables.", "content.note_installation_steps_scan__05E10": "Note: In the command, replace the OS distribution name and version with the desired ones if you want to deploy the scan node on another operating system. The link in the command should refer to the appropriate *.deb file located in the following repository: Microsoft Linux package repository.", "content.p_installation_steps_scan__0CF39": "wget -q https://packages.microsoft.com/config/ubuntu/22.04/packages-microsoft-prod.deb
sudo apt install ./packages-microsoft-prod.deb
sudo apt update", "step.step_installation_steps_scan__050CB": "Run the following commands to install the prerequisites:", "content.p_installation_steps_scan__026A1": "sudo apt install ./withsecure-xm-scannodeagent-netinstaller_amd64.deb", "content.note_installation_steps_scan__04124": "Note: In the license selection screen, press Tab to move between the panes, the Up and Down arrow keys to scroll through the lists, and Space to select the file that you want to use.", "content.p_installation_steps_scan__057AE": "The installation directory is /opt/fsecure/radar-scannodeagent. The Linux daemon (service) name is f-secure-radar-scannodeagent.", "content.p_installation_steps_scan__02C7E": "If this is the very first installation, you are asked to provide a license file (.fsrl).", "step.step_installation_steps_scan__00DCA": "Run the following command to install the Scan Node Agent:", "content.p_installation_steps_scan__0CABB": "After successful installation, verify that the scan node appears in the list of scan nodes in Elements Security Center.", "desc": [ "content.p_installation_steps_scan__08F31", { "steps.steps_installation_steps_scan__0B21C": [ "step.step_installation_steps_scan__07BFD", "content.p_installation_steps_scan__016B9", { "substeps.substepsalpha_installationalpha_stepsalpha_scanalpha_alpha_0B23F": [ "substep.substep_installation_steps_scan__0907A", "substep.substep_installation_steps_scan__0171B", "substep.substep_installation_steps_scan__07B39", "content.p_installation_steps_scan__0AA08" ] }, "content.p_installation_steps_scan__02274", { "substeps.substepsalpha_installationalpha_stepsalpha_scanalpha_alpha_032B6": [ "substep.substep_installation_steps_scan__08EC7", "content.p_installation_steps_scan__00ADB", "content.p_installation_steps_scan__01B73", "substep.substep_installation_steps_scan__0F03B", "substep.substep_installation_steps_scan__04EA6", "substep.substep_installation_steps_scan__01829", "substep.substep_installation_steps_scan__0DCA5", "content.p_installation_steps_scan__0A290", "substep.substep_installation_steps_scan__0BA32", "content.p_installation_steps_scan__02A82" ] }, "step.step_installation_steps_scan__0A4E9", "content.p_installation_steps_scan__06E7F", { "substeps.substepsalpha_installationalpha_stepsalpha_scanalpha_alpha_0DEE1": [ "substep.substep_installation_steps_scan__0C51A", "content.p_installation_steps_scan__016C9", "substep.substep_installation_steps_scan__0BCBC" ] }, "step.step_installation_steps_scan__050CB", "content.note_installation_steps_scan__05E10", "content.p_installation_steps_scan__0CF39", "step.step_installation_steps_scan__00DCA", "content.p_installation_steps_scan__026A1", "content.note_installation_steps_scan__04124", "content.p_installation_steps_scan__057AE", "content.p_installation_steps_scan__02C7E" ] }, "content.p_installation_steps_scan__0CABB" ], "related": [ "verify_installation_linux_scan_nodes-latest-en" ] }, "verify_installation_linux_scan_nodes-latest-en.json": { "title": "title_verify_installation_linu_0E2C8", "title_verify_installation_linu_0E2C8": "Verify Linux scan node installation", "shortdesc": "shortdesc_verify_installation_linu_0EF06", "shortdesc_verify_installation_linu_0EF06": "After you have installed the Linux scan node, follow the steps listed here to make sure that it is installed and running successfully. ", "step.step_verify_installation_linu_096BD": "In Elements Security Center, under Security Configurations, select Scans > Scan nodes and check that your new scan node is synchronized and has received engine updates.", "step.step_verify_installation_linu_02DD5": "On the scan node, check the logs under the /opt/f-secure/radar-scannodeagent/logs/ directory.", "content.p_verify_installation_linu_0FAFD": "This directory contains the scanning engines, which are required to run scans. It should contain at least some files.", "step.step_verify_installation_linu_00162": "Check that the /opt/f-secure/radar-scannodeagent/Engines/ directory is not empty.", "content.p_verify_installation_linu_0F758": "sudo systemctl status f-secure-radar-scannodeagent", "step.step_verify_installation_linu_08733": "Run the following command to verify that the Linux daemon (service) is in active state:", "content.p_verify_installation_linu_0871C": "cd /opt/f-secure/radar-scannodeagent
sudo ./ScanNodeAgent get-config | more", "step.step_verify_installation_linu_0D4E7": "Run the following commands to check the current settings:", "content.p_verify_installation_linu_01D94": "sudo systemctl restart f-secure-radar-scannodeagent", "step.step_verify_installation_linu_03EBF": "If you applied the license file, but the scan node agent has not recognized it, run the following command to restart the service:", "desc": [ { "steps.steps_verify_installation_linu_002D5": [ "step.step_verify_installation_linu_096BD", "step.step_verify_installation_linu_02DD5", "step.step_verify_installation_linu_00162", "content.p_verify_installation_linu_0FAFD", "step.step_verify_installation_linu_08733", "content.p_verify_installation_linu_0F758", "step.step_verify_installation_linu_0D4E7", "content.p_verify_installation_linu_0871C", "step.step_verify_installation_linu_03EBF", "content.p_verify_installation_linu_01D94" ] } ] }, "linux_scan_node_paths-latest-en.json": { "title": "title_linux_scan_node_paths_0000DAF0", "title_linux_scan_node_paths_0000DAF0": "Linux scan node paths", "shortdesc": "shortdesc_linux_scan_node_paths_000055B6", "shortdesc_linux_scan_node_paths_000055B6": "The stored scan node data can provide useful information for troubleshooting and maintenance purposes. ", "content.p_linux_scan_node_paths_00004092": "Linux scan nodes use the following paths to store their operation data:", "step.step_linux_scan_node_paths_0000FB70": "/opt/f-secure/radar-scannodeagent/Scans/<scan_type>/<scan_id> contains files related to currently running scans", "step.step_linux_scan_node_paths_000075EF": "/opt/f-secure/radar-scannodeagent/Engines/ contains the scan engine binaries", "step.step_linux_scan_node_paths_0000B011": "/opt/f-secure/radar-scannodeagent/Updates/ contains temporary update files for scan engines", "step.step_linux_scan_node_paths_000020C0": "/opt/f-secure/radar-scannodeagent/logs/ contains the scan node's log files", "step.step_linux_scan_node_paths_0000ED6D": "/opt/f-secure/radar-scannodeagent/scannode.db is used for storing configuration data and information on currently running scans", "desc": [ "content.p_linux_scan_node_paths_00004092", { "steps.ul_linux_scan_node_paths_0000736A": [ "step.step_linux_scan_node_paths_0000FB70", "step.step_linux_scan_node_paths_000075EF", "step.step_linux_scan_node_paths_0000B011", "step.step_linux_scan_node_paths_000020C0", "step.step_linux_scan_node_paths_0000ED6D" ] } ] }, "editing_scan_node_configuration-latest-en.json": { "title": "title_editing_scan_node_config_09887", "title_editing_scan_node_config_09887": "Configure Linux scan nodes", "shortdesc": "shortdesc_editing_scan_node_config_0FF4B", "shortdesc_editing_scan_node_config_0FF4B": "Commands for viewing or changing Linux scan node settings after installation. ", "content.p_editing_scan_node_config_0FD42": "You have already installed the Linux scan node.", "content.p_editing_scan_node_config_0940C": "Use these commands to view or change scan node settings after installation, without reinstalling the agent.", "content.p_editing_scan_node_config_0D072": "cd /opt/f-secure/radar-scannodeagent", "step.step_editing_scan_node_config_0D83A": "Run the following command to go to the Scan Node Agent installation directory:", "content.p_editing_scan_node_config_02338": "To get all settings:", "content.p_editing_scan_node_config_076D3": "sudo ./ScanNodeAgent get-config", "content.p_editing_scan_node_config_00752": "To get a single setting, for example, to check whether the Scan Node Agent sends its private IP address to Elements Security Center:", "content.p_editing_scan_node_config_04BD8": "sudo ./ScanNodeAgent get-config HidePrivateIp", "content.p_editing_scan_node_config_05AED": "To modify multiple settings using a file, for example custom_config:", "content.p_editing_scan_node_config_06C20": "sudo ./ScanNodeAgent set-config <custom_config", "content.note_editing_scan_node_config_0DCE5": "Note: The custom_config file that you use must follow the same format as the output of the get-config command.", "content.p_editing_scan_node_config_02F29": "To modify a single setting, for example the maximum number of simultaneous system scans:", "content.p_editing_scan_node_config_084E8": "sudo ./ScanNodeAgent set-config SystemScan.MaxSimultaneousScans 12", "step.step_editing_scan_node_config_0BEF1": "Use the following commands to edit the settings:", "desc": [ "content.p_editing_scan_node_config_0FD42", "content.p_editing_scan_node_config_0940C", { "steps.steps_editing_scan_node_config_01D96": [ "step.step_editing_scan_node_config_0D83A", "content.p_editing_scan_node_config_0D072", "step.step_editing_scan_node_config_0BEF1", "content.p_editing_scan_node_config_02338", "content.p_editing_scan_node_config_076D3", "content.p_editing_scan_node_config_00752", "content.p_editing_scan_node_config_04BD8", "content.p_editing_scan_node_config_05AED", "content.p_editing_scan_node_config_06C20", "content.note_editing_scan_node_config_0DCE5", "content.p_editing_scan_node_config_02F29", "content.p_editing_scan_node_config_084E8" ] } ] }, "applying_scan_node_license_manually-latest-en.json": { "title": "title_applying_scan_node_licen_050FC", "title_applying_scan_node_licen_050FC": "Apply the scan node license manually", "shortdesc": "shortdesc_applying_scan_node_licen_0258B", "shortdesc_applying_scan_node_licen_0258B": "To apply a new .fsrl license file to an already installed WithSecure Elements VM Scan Node Agent, you need to copy the file to the installation directory. ", "content.p_applying_scan_node_licen_08CC7": "You have already installed the WithSecure Elements VM Scan Node Agent.", "content.p_applying_scan_node_licen_0045C": "Use this if you received a license file separately from the installation package, or want to apply a license for a single scanning module instead of the whole scan node.", "content.p_applying_scan_node_licen_05499": "cd /opt/f-secure/radar-scannodeagent && sudo ./ScanNodeAgent apply-license ./license.fsrl", "step.step_applying_scan_node_licen_0919D": "Run the following commands to apply the new license file:", "content.p_applying_scan_node_licen_0047B": "For example, for the system scan module, run the following commands:", "content.p_applying_scan_node_licen_03C47": "cd /opt/f-secure/radar-scannodeagent
sudo ./ScanNodeAgent set-config SystemScan.License 85f95bbf-15cf-4d06-8347-e91a1eb539b8
sudo ./ScanNodeAgent set-config SystemScan.Enabled true
sudo ./ScanNodeAgent update-engines", "content.note_applying_scan_node_licen_02F61": "Note: If the installation directory (/opt/f-secure/radar-scannodeagent) already contains a .fsrl file, the data from that license file is applied when you restart the agent, overwriting the manual changes.", "content.note_applying_scan_node_licen_01D6A": "Note: If the installation directory contains more than one .fsrl file, you can run the following command to check which one is in use: sudo ./ScanNodeAgent get-config LicenseFileName", "step.step_applying_scan_node_licen_0B527": "To apply a known WithSecure Elements VM Scan Node Agent license ID for a particular scanning module, you can apply the license ID directly to the Scan Node Agent configuration.", "desc": [ "content.p_applying_scan_node_licen_08CC7", "content.p_applying_scan_node_licen_0045C", { "steps.steps_applying_scan_node_licen_0E3A8": [ "step.step_applying_scan_node_licen_0919D", "content.p_applying_scan_node_licen_05499", "step.step_applying_scan_node_licen_0B527", "content.p_applying_scan_node_licen_0047B", "content.p_applying_scan_node_licen_03C47", "content.note_applying_scan_node_licen_02F61", "content.note_applying_scan_node_licen_01D6A" ] } ], "related": [ "installation_steps_scan_nodes_linux-latest-en" ] }, "set_up_encryption_keys_authenticated_scanning-latest-en.json": { "title": "title_set_up_encryption_keys_a_0D754", "title_set_up_encryption_keys_a_0D754": "Set up encryption keys for authenticated scanning", "shortdesc": "shortdesc_set_up_encryption_keys_a_0FC27", "shortdesc_set_up_encryption_keys_a_0FC27": "Both Windows and Linux authenticated scanning is supported on Linux scan nodes. ", "content.p_set_up_encryption_keys_a_00B8E": "Windows authenticated scanning is supported using WinRM. Select the Specify credentials explicitly option when creating the system scan template.", "content.p_set_up_encryption_keys_a_0C116": "For Linux authenticated scanning, you need to once set up the encryption keys to transfer the credentials securely.", "content.p_set_up_encryption_keys_a_0CCB8": "Apart from adding the encryption keys allowing the secure credentials flow for Linux authenticated scanning, you can also manage the already existing keys:", "content.p_set_up_encryption_keys_a_00D40": "cd /opt/f-secure/radar-scannodeagent
sudo ./ScanNodeAgent list-private-keys", "step.step_set_up_encryption_keys_a_0A987": "To list all encryption keys, run the following command:", "content.p_set_up_encryption_keys_a_0D85A": "cd /opt/f-secure/radar-scannodeagent
sudo ./ScanNodeAgent remove-private-key NameOfTheKeyPair", "step.step_set_up_encryption_keys_a_02FE8": "To remove an existing key, run the following command:", "desc": [ "content.p_set_up_encryption_keys_a_00B8E", "content.p_set_up_encryption_keys_a_0C116", "content.p_set_up_encryption_keys_a_0CCB8", { "steps.steps_set_up_encryption_keys_a_04EFD": [ "step.step_set_up_encryption_keys_a_0A987", "content.p_set_up_encryption_keys_a_00D40", "step.step_set_up_encryption_keys_a_02FE8", "content.p_set_up_encryption_keys_a_0D85A" ] } ], "related": [ "las_preparation-latest-en" ] }, "redirecting_traffic_proxy_server-latest-en.json": { "title": "title_redirecting_traffic_prox_01C30", "title_redirecting_traffic_prox_01C30": "Redirect traffic to a proxy server", "shortdesc": "shortdesc_redirecting_traffic_prox_09786", "shortdesc_redirecting_traffic_prox_09786": "As WithSecure Elements VM Scan Node Agent sends requests to the Elements Security Center and Update Service, you need to configure the appropriate proxy address to redirect the traffic. ", "content.note_redirecting_traffic_prox_0ECF8": "Note: WithSecure recommends using the Elements Connector, which is optimized for proxying traffic to WithSecure backend services. This is especially useful in isolated network environments where routing multiple scan nodes through firewalls is undesirable.", "content.p_redirecting_traffic_prox_08925": "cd /opt/f-secure/radar-scannodeagent
sudo ./ScanNodeAgent set-config SecurityCenterProxyUri http://proxy.example.com:8080
sudo ./ScanNodeAgent set-config UpdateServiceProxyUri http://proxy.example.com:8080", "content.note_redirecting_traffic_prox_0DAB5": "Note: If you used environment variables to set proxy settings (FSECURE_HTTP_PROXY_HOST and FSECURE_HTTP_PROXY_PORT) before installation, then these should be already applied automatically.", "step.step_redirecting_traffic_prox_0335E": "Run the following commands:", "content.p_redirecting_traffic_prox_0D699": "To reset the proxy setting, use the following commands to set the value to none:", "content.p_redirecting_traffic_prox_06DA3": "cd /opt/f-secure/radar-scannodeagent
sudo ./ScanNodeAgent set-config SecurityCenterProxyUri \"(none)\"
sudo ./ScanNodeAgent set-config UpdateServiceProxyUri \"(none)\"", "content.p_redirecting_traffic_prox_046ED": "To use the system proxy settings instead of setting the proxy configuration explicitly, run the following commands:", "content.p_redirecting_traffic_prox_0A521": "cd /opt/f-secure/radar-scannodeagent
sudo ./ScanNodeAgent set-config UseDefaultProxySettingsForSecurityCenter true
sudo ./ScanNodeAgent set-config UseDefaultProxySettingsForUpdateService true", "desc": [ "content.note_redirecting_traffic_prox_0ECF8", { "steps.steps_redirecting_traffic_prox_04864": [ "step.step_redirecting_traffic_prox_0335E", "content.p_redirecting_traffic_prox_08925", "content.note_redirecting_traffic_prox_0DAB5" ] }, "content.p_redirecting_traffic_prox_0D699", "content.p_redirecting_traffic_prox_06DA3", "content.p_redirecting_traffic_prox_046ED", "content.p_redirecting_traffic_prox_0A521" ] }, "disabling_ssl_cert_validation-latest-en.json": { "title": "title_disabling_ssl_cert_valid_0A791", "title_disabling_ssl_cert_valid_0A791": "Disable SSL certificate validation", "shortdesc": "shortdesc_disabling_ssl_cert_valid_034C4", "shortdesc_disabling_ssl_cert_valid_034C4": "If you use a proxy server or host your local Elements Security Center using a self-signed SSL certificate, you can disable certificate validation by setting the appropriate configuration keys. ", "content.p_disabling_ssl_cert_valid_02F69": "cd /opt/f-secure/radar-scannodeagent
sudo ./ScanNodeAgent set-config SkipSecurityCenterSslCertificateCheck true
sudo ./ScanNodeAgent set-config SkipUpdateServiceSslCertificateCheck true", "content.note_disabling_ssl_cert_valid_0413F": "Important: WithSecure recommends against disabling the SSL certificate validation check, especially for Radar Update Service communication.", "step.step_disabling_ssl_cert_valid_0BE78": "Run the following commands:", "desc": [ { "steps.steps_disabling_ssl_cert_valid_028EE": [ "step.step_disabling_ssl_cert_valid_0BE78", "content.p_disabling_ssl_cert_valid_02F69", "content.note_disabling_ssl_cert_valid_0413F" ] } ] }, "installing_local_ca_certificate-latest-en.json": { "title": "title_installing_local_ca_cert_00476", "title_installing_local_ca_cert_00476": "Install a local CA certificate", "shortdesc": "shortdesc_installing_local_ca_cert_0B6D6", "shortdesc_installing_local_ca_cert_0B6D6": "For network vulnerability scans to correctly validate SSL/TLS certificates signed by a local certification authority (CA), you have to install the root certificate on the scan node server. System scans use the same certificate store as OpenSSL. ", "content.p_installing_local_ca_cert_0E78F": "To install the rootCA.crt certificate file on Debian or Ubuntu distributions:", "content.p_installing_local_ca_cert_09C04": "sudo mkdir /usr/local/share/ca-certificates/extra", "step.step_installing_local_ca_cert_08E7D": "Run the following command to create a directory for your own trusted CA certificates:", "content.p_installing_local_ca_cert_0D528": "sudo cp rootCA.crt /usr/local/share/ca-certificates/extra/", "content.p_installing_local_ca_cert_0BDD9": "Make sure that the certificate has the .crt extension.", "step.step_installing_local_ca_cert_0628D": "Copy the root certificate to the new directory:", "content.p_installing_local_ca_cert_05027": "sudo update-ca-certificates", "step.step_installing_local_ca_cert_07FBE": "Run the following command to update the system certificates:", "desc": [ "content.p_installing_local_ca_cert_0E78F", { "steps.steps_installing_local_ca_cert_0E3A3": [ "step.step_installing_local_ca_cert_08E7D", "content.p_installing_local_ca_cert_09C04", "step.step_installing_local_ca_cert_0628D", "content.p_installing_local_ca_cert_0D528", "content.p_installing_local_ca_cert_0BDD9", "step.step_installing_local_ca_cert_07FBE", "content.p_installing_local_ca_cert_05027" ] } ] }, "limiting_simultaneous_scans-latest-en.json": { "title": "title_limiting_simultaneous_sc_0F7DE", "title_limiting_simultaneous_sc_0F7DE": "Limit the maximum number of simultaneous scans", "shortdesc": "shortdesc_limiting_simultaneous_sc_0435E", "shortdesc_limiting_simultaneous_sc_0435E": "If the default limits for simultaneous scans cause performance issues, you can customize the limits. ", "content.p_limiting_simultaneous_sc_06629": "cd /opt/f-secure/radar-scannodeagent
sudo ./ScanNodeAgent set-config DiscoveryScan.MaxSimultaneousScans 3
sudo ./ScanNodeAgent set-config SystemScan.MaxSimultaneousScans 10
sudo ./ScanNodeAgent set-config WebScan.MaxSimultaneousScans 3", "step.step_limiting_simultaneous_sc_0E85B": "Run the following commands to change the default limits:", "desc": [ { "steps.steps_limiting_simultaneous_sc_09B01": [ "step.step_limiting_simultaneous_sc_0E85B", "content.p_limiting_simultaneous_sc_06629" ] } ] }, "updating_scan_engines_manually-latest-en.json": { "title": "title_updating_scan_engines_ma_0C2CC", "title_updating_scan_engines_ma_0C2CC": "Update scan engines manually", "shortdesc": "shortdesc_updating_scan_engines_ma_0128A", "shortdesc_updating_scan_engines_ma_0128A": "By default, the scan node agent checks for engine updates automatically every 4 hours, but you can also check for updates and install them manually. ", "content.p_updating_scan_engines_ma_0EF75": "cd /opt/f-secure/radar-scannodeagent
sudo ./ScanNodeAgent update-engines", "step.step_updating_scan_engines_ma_06409": "Run the following commands to manually update the scan engines:", "desc": [ { "steps.steps_updating_scan_engines_ma_09D54": [ "step.step_updating_scan_engines_ma_06409", "content.p_updating_scan_engines_ma_0EF75" ] } ] }, "resetting_scan_engines-latest-en.json": { "title": "title_resetting_scan_engines_0007254", "title_resetting_scan_engines_0007254": "Reset scan engines", "shortdesc": "shortdesc_resetting_scan_engines_0004524", "shortdesc_resetting_scan_engines_0004524": "If there are any issues with the scan engine directory integrity, you can reset the engines to download fresh instances. ", "content.p_resetting_scan_engines_000CB79": "cd /opt/f-secure/radar-scannodeagent
sudo ./ScanNodeAgent reset-engines To reset a specific scan engine, you can use the engine type as an argument: cd /opt/f-secure/radar-scannodeagent
sudo ./ScanNodeAgent reset-engines DiscoveryScan
sudo ./ScanNodeAgent reset-engines SystemScan
sudo ./ScanNodeAgent reset-engines WebScan", "content.note_resetting_scan_engines_000E6FC": "Note: It might take a few minutes to reset the scan engines. We do not recommend using this operation to update the engines - use the sudo ./ScanNodeAgent update-engines command instead.", "step.step_resetting_scan_engines_0000671": "Run the following commands to reset the scan engines:", "desc": [ { "steps.steps_resetting_scan_engines_0002469": [ "step.step_resetting_scan_engines_0000671", "content.p_resetting_scan_engines_000CB79", "content.note_resetting_scan_engines_000E6FC" ] } ] }, "concept_hvd_jcy_bbc-latest-en.json": { "title": "title_onboarding_cloud_account_0E957", "title_onboarding_cloud_account_0E957": "Cloud account onboarding", "shortdesc": "shortdesc_onboarding_cloud_account_0E32E", "shortdesc_onboarding_cloud_account_0E32E": "Onboarding cloud accounts lets the solution scan your cloud resources for security issues and provide remediation steps.", "content.p_onboarding_cloud_account_02897": "Onboarding cloud accounts lets the solution scan your cloud resources for security issues and provide you with recommendations and remediation steps to fix them.", "content.p_onboarding_cloud_account_03B68": "Cloud accounts, or subscriptions, are used to access and manage the cloud-based resources, such as identities, virtual machines, storage, and databases. Onboarding these cloud accounts to the solution the is quick process and requires minimal permissions and configuration.", "content.note_onboarding_cloud_account_0839E": "Note: The solution supports Microsoft Azure (Azure) and Amazon Web Services (AWS) accounts.", "content.p_onboarding_cloud_account_0326B": "To use Exposure Management, you need to connect cloud accounts to the service. Once connected, the service scans your cloud assets and services for security risks, misconfigurations, and compliance violations. You can view and manage these accounts in Elements Security Center (ESC).When connecting cloud accounts, you grant the service the necessary permissions to access and scan your resources and data.", "desc": [ "content.p_onboarding_cloud_account_02897", "content.p_onboarding_cloud_account_03B68", "content.note_onboarding_cloud_account_0839E", "content.p_onboarding_cloud_account_0326B" ] }, "adding_azure_tenant-latest-en.json": { "title": "title_adding_azure_tenant_00000137BE", "title_adding_azure_tenant_00000137BE": "Add an Azure tenant", "shortdesc": "shortdesc_adding_azure_tenant_000002ABBC", "shortdesc_adding_azure_tenant_000002ABBC": "Connect an Azure tenant to WithSecure Elements Security Center.", "content.p_adding_azure_tenant_00001153BA": "To add a new Azure tenant:", "step.step_adding_azure_tenant_00001391A5": "In WithSecure Elements Security Center, go to Environment > Cloud > Microsoft Tenants and Azure Subscriptions .", "step.step_adding_azure_tenant_00001AFD79": "Select Add Azure tenant.", "subchoice.choice_adding_azure_tenant_000023F9BD": "Display name: enter the name of the new Azure tenant as it will appear in WithSecure Elements Security Center.", "subchoice.choice_adding_azure_tenant_00002657F0": "Tenant ID: paste the tenant ID from the Azure portal.", "subchoice.choice_adding_azure_tenant_000029A8A1": "Organization: select the WithSecure Elements Security Center organization for the tenant.", "content.p_adding_azure_tenant_000021DF96": "", "step.step_adding_azure_tenant_00001D4798": "On the Tenant information page, enter the following details and select Next:", "subchoice.choice_adding_azure_tenant_0000317B8D": "Importance: set the importance of the cloud account. The importance is used in risk evaluations.", "subchoice.choice_adding_azure_tenant_0000335E03": "Business context: provide the business context for the tenant.", "content.p_adding_azure_tenant_00002FF0A1": "", "content.p_adding_azure_tenant_0000359BBC": "The tenant is added and the Connect Identity Inventory capability page opens.", "step.step_adding_azure_tenant_00002C0CCC": "On the next page, enter the following details and select Next:", "content.note_adding_azure_tenant_0000370CC2": "Important: You must configure the Identity Inventory capability before you add any other capabilities. See Connecting Identity Inventory for a tenant.", "desc": [ "content.p_adding_azure_tenant_00001153BA", { "steps.steps_adding_azure_tenant_000012FE03": [ "step.step_adding_azure_tenant_00001391A5", "step.step_adding_azure_tenant_00001AFD79", "step.step_adding_azure_tenant_00001D4798", "content.p_adding_azure_tenant_000021DF96", { "subchoices.ul_adding_azure_tenant_000022BDEF": [ "subchoice.choice_adding_azure_tenant_000023F9BD", "subchoice.choice_adding_azure_tenant_00002657F0", "subchoice.choice_adding_azure_tenant_000029A8A1" ] }, "step.step_adding_azure_tenant_00002C0CCC", "content.p_adding_azure_tenant_00002FF0A1", { "subchoices.ul_adding_azure_tenant_000030E42C": [ "subchoice.choice_adding_azure_tenant_0000317B8D", "subchoice.choice_adding_azure_tenant_0000335E03" ] }, "content.p_adding_azure_tenant_0000359BBC" ] }, "content.note_adding_azure_tenant_0000370CC2" ], "related": [ "task_tl1_x5n_g3c-latest-en", "task_connecting_identity_inventory_for_tenants-latest-en" ] }, "task_connecting_identity_inventory_for_tenants-latest-en.json": { "title": "title_connecting_identity_inve_0663F", "title_connecting_identity_inve_0663F": "Connect Identity Inventory for a tenant", "shortdesc": "shortdesc_connecting_identity_inve_0BD80", "shortdesc_connecting_identity_inve_0BD80": "Connect the Identity Inventory capability for an Azure tenant.", "content.note_connecting_identity_inve_0F3E0": "Important: You must configure Identity Inventory before you add any other capabilities to the tenant.", "content.p_connecting_identity_inve_0A330": "To connect Identity Inventory:", "step.step_connecting_identity_inve_05F07": "Under Security capabilities, select Identity Inventory.", "step.step_connecting_identity_inve_09B80": "Select Connect now.", "step.step_connecting_identity_inve_0AC17": "Read the introduction and instructions, select the checkbox to confirm, and select Start.", "subchoice.choice_connecting_identity_inve_077C3": "If you are the Azure tenant administrator, select Accept Permissions, then approve the required permissions.", "subchoice.choice_connecting_identity_inve_0D8C0": "If you cannot grant permissions, select Copy URL to copy the URL and send it to your Azure administrator.", "step.step_connecting_identity_inve_09C6C": "Grant the required permissions for the Identity Inventory capability.", "desc": [ "content.note_connecting_identity_inve_0F3E0", "content.p_connecting_identity_inve_0A330", { "steps.steps_connecting_identity_inve_04A89": [ "step.step_connecting_identity_inve_05F07", "step.step_connecting_identity_inve_09B80", "step.step_connecting_identity_inve_0AC17", "step.step_connecting_identity_inve_09C6C", { "subchoices.choices_connecting_identity_inve_0C3F8": [ "subchoice.choice_connecting_identity_inve_077C3", "subchoice.choice_connecting_identity_inve_0D8C0" ] } ] } ] }, "adding_azure_cloud_accounts-latest-en.json": { "title": "title_adding_azure_subscriptio_041B1", "title_adding_azure_subscriptio_041B1": "Adding Azure subscriptions", "shortdesc": "shortdesc_adding_azure_subscriptio_05227", "shortdesc_adding_azure_subscriptio_05227": "You can connect one or more Azure subscriptions to the service.", "content.p_adding_azure_subscriptio_0CC85": "Each company can have multiple Azure tenants, and each tenant can include Azure subscriptions with different resources. When you add an Azure subscription, you typically need to onboard the corresponding Azure tenant to link the subscription.", "content.note_adding_azure_subscriptio_0A321": "Note: Azure tenant accounts are created only once. If you are onboarding an Azure subscription and a connection to the corresponding tenant already exists, only a subscription account is added. If no connection exists, both tenant and subscription accounts need to be created.", "desc": [ "content.p_adding_azure_subscriptio_0CC85", "content.note_adding_azure_subscriptio_0A321" ], "related": [ "adding_azure_tenant-latest-en" ] }, "azure_prerequisites-latest-en.json": { "title": "title_azure_prerequisites_000001B891", "title_azure_prerequisites_000001B891": "Azure prerequisites", "shortdesc": "shortdesc_azure_prerequisites_00000293F0", "shortdesc_azure_prerequisites_00000293F0": "Before creating the first Azure cloud connections for Exposure Management, you must make sure that the following prerequisites are met.", "step.step_azure_prerequisites_00000F5609": "You have signed in as a Global Administrator on the Azure account to run the script in Azure Cloud Shell", "step.step_azure_prerequisites_000010B129": "You have your Azure subscription IDs, tenant IDs, or both ready. For instructions, see Get subscription and tenant IDs in the Azure portal.", "content.p_azure_prerequisites_000012B96A": "You can add multiple cloud connections at once or a single one using the wizard. If you are adding multiple Azure subscriptions, you must prepare a CSV file.", "desc": [ { "steps.ul_azure_prerequisites_00000EEB2E": [ "step.step_azure_prerequisites_00000F5609", "step.step_azure_prerequisites_000010B129" ] }, "content.p_azure_prerequisites_000012B96A" ] }, "task_tl1_x5n_g3c-latest-en.json": { "title": "title_connecting_cspm_for_tena_0D5D4", "title_connecting_cspm_for_tena_0D5D4": "Connect and activate Cloud Security Posture Management for a tenant", "shortdesc": "shortdesc_connecting_cspm_for_tena_0D962", "shortdesc_connecting_cspm_for_tena_0D962": "Connects and activates Cloud Security Posture Management for a tenant.", "content.p_connecting_cspm_for_tena_04D1B": "To connect and active Cloud Security Posture Management:", "step.step_connecting_cspm_for_tena_01427": "Under Environment, select Cloud > Microsoft Tenants and Azure Subscriptions .", "step.step_connecting_cspm_for_tena_08ABD": "From the Display name list, select a tenant.", "step.step_connecting_cspm_for_tena_0AC1C": "On the tenant details page, under Cloud Security Posture Management, select Connect now.", "step.step_connecting_cspm_for_tena_0651C": "Review the instructions and select I have read the instructions and I am ready to proceed to confirm.", "subchoice.choice_connecting_cspm_for_tena_0BC36": "If you are a Microsoft Tenant administrator, select Accept Permissions, then approve the required permissions.", "content.note_connecting_cspm_for_tena_015AA": "Note: You can send the URL to your Azure administrator via email along with a link to this guide.", "subsubstep.step_connecting_cspm_for_tena_0B965": "Select Copy URL to copy the URL to your clipboard.", "subsubsubchoice.choice_connecting_cspm_for_tena_0BF1E": "Accept the permissions for the WithSecure Enterprise application WithSecure-CSPM-Scanner-MTA.", "subsubsubchoice.choice_connecting_cspm_for_tena_05C8F": "Assign the User administrator role to the corresponding application registration.", "subsubstep.step_connecting_cspm_for_tena_0FD9E": "Request that the Azure administrator does the following:", "subsubstep.step_connecting_cspm_for_tena_0CFB3": "After the Azure administrator confirms that Cloud Security Posture has been enabled, verify that the Cloud Security Posture status shows Active (green).", "subchoice.choice_connecting_cspm_for_tena_0F67E": "If you are not a Microsoft Tenant administrator, follow these steps:", "content.p_connecting_cspm_for_tena_0F1C0": "", "step.step_connecting_cspm_for_tena_07219": "Grant the required permissions for the Cloud Security Posture capability.", "desc": [ "content.p_connecting_cspm_for_tena_04D1B", { "steps.steps_connecting_cspm_for_tena_03EDE": [ "step.step_connecting_cspm_for_tena_01427", "step.step_connecting_cspm_for_tena_08ABD", "step.step_connecting_cspm_for_tena_0AC1C", "step.step_connecting_cspm_for_tena_0651C", "step.step_connecting_cspm_for_tena_07219", "content.p_connecting_cspm_for_tena_0F1C0", { "subchoices.ul_connecting_cspm_for_tena_09E32": [ "subchoice.choice_connecting_cspm_for_tena_0BC36", "subchoice.choice_connecting_cspm_for_tena_0F67E", { "subsubsteps.ol_connecting_cspm_for_tena_0A106": [ "subsubstep.step_connecting_cspm_for_tena_0B965", "content.note_connecting_cspm_for_tena_015AA", "subsubstep.step_connecting_cspm_for_tena_0FD9E", { "subsubsubchoices.ul_connecting_cspm_for_tena_0B599": [ "subsubsubchoice.choice_connecting_cspm_for_tena_0BF1E", "subsubsubchoice.choice_connecting_cspm_for_tena_05C8F" ] }, "subsubstep.step_connecting_cspm_for_tena_0CFB3" ] } ] } ] } ] }, "onboarding_azure_cloud_account-latest-en.json": { "title": "title_onboarding_azure_cloud_a_0D612", "title_onboarding_azure_cloud_a_0D612": "Add an Azure subscription in Elements Security Center", "shortdesc": "shortdesc_onboarding_azure_cloud_a_0E49B", "shortdesc_onboarding_azure_cloud_a_0E49B": "Onboards an Azure subscription in Elements Security Center.", "content.p_onboarding_azure_cloud_a_04BBB": "To onboard an Azure subscription:", "step.step_onboarding_azure_cloud_a_0A6E0": "Open Elements Security Center at WithSecure Elements Security Center.", "content.p_onboarding_azure_cloud_a_01C08": "", "content.note_onboarding_azure_cloud_a_00414": "Note: Adding subscriptions is only available on company level.", "step.step_onboarding_azure_cloud_a_0A135": "Use the scope selector to select the organization to which you want to add a new subscription.", "step.step_onboarding_azure_cloud_a_0E1B3": "Under Environment, select Cloud > Microsoft Tenants and Azure Subscriptions .", "content.p_onboarding_azure_cloud_a_00A91": "The Add new Azure subscription wizard opens.", "step.step_onboarding_azure_cloud_a_095BB": "Select Add Azure subscription.", "substep.substep_onboarding_azure_cloud_a_0D596": "Enter a name for the subscription.", "substep.substep_onboarding_azure_cloud_a_05F7C": "Select the tenant ID that the subscription belongs to.", "substep.substep_onboarding_azure_cloud_a_00FFC": "Select Next.", "content.note_onboarding_azure_cloud_a_0D150": "Note: If Cloud Security Posture Management has not yet been connected for the selected tenant a warning message appears. You can still create the subscription, but you are not able to activate Cloud Security Posture Management for that subscription until Cloud Security Posture Management is active for the corresponding tenant.", "step.step_onboarding_azure_cloud_a_0DC1B": "In the Subscription information screen, do the following:", "step.step_onboarding_azure_cloud_a_0270C": "In the Subscription importance screen, enter information about the importance and business context of the account.", "content.note_onboarding_azure_cloud_a_059AB": "Note: If the Connect now button is grayed out, it means that the Cloud Security Posture Management for tenant has not yet been connected.", "substep.substep_onboarding_azure_cloud_a_07A17": "On the Security Capabilities page that opens, under Cloud Security Posture Management Subscription, select Connect now.", "content.p_onboarding_azure_cloud_a_041B1": "The Connect Cloud Security Posture Management window opens explaining the next steps, including how to download and run the script on Azure to activate the connection.", "substep.substep_onboarding_azure_cloud_a_09CE8": "In the window that opens, review the user agreement, check the agreement box, and select Enable now.", "substep.substep_onboarding_azure_cloud_a_044A0": "Select Finish on the view to return to the Cloud Security Posture Management Subscription view.", "step.step_onboarding_azure_cloud_a_0C89C": "Select Next, and then do the following:", "step.step_onboarding_azure_cloud_a_02BA4": "Under Onboarding files, select Download onboarding files (powershell_[UUID].ps1).", "content.note_onboarding_azure_cloud_a_01AAE": "Note: The scope selector is visible only at the Solution Provider (SOP) and Service Partner (SEP) levels. If your Elements Security Center (ESC) account only has company level access, you do not see a scope selector.", "content.p_onboarding_azure_cloud_a_0C63D": "The Azure subscription is added and the onboarding files are downloaded.", "content.p_onboarding_azure_cloud_a_0F0B0": "Next, run the downloaded onboarding script in the Azure portal.", "desc": [ "content.p_onboarding_azure_cloud_a_04BBB", { "steps.steps_onboarding_azure_cloud_a_0CB07": [ "step.step_onboarding_azure_cloud_a_0A6E0", "step.step_onboarding_azure_cloud_a_0A135", "content.p_onboarding_azure_cloud_a_01C08", "content.note_onboarding_azure_cloud_a_00414", "step.step_onboarding_azure_cloud_a_0E1B3", "step.step_onboarding_azure_cloud_a_095BB", "content.p_onboarding_azure_cloud_a_00A91", "step.step_onboarding_azure_cloud_a_0DC1B", { "substeps.substepsalpha_onboardingalpha_azurealpha_cloudalpha_aalpha_098C4": [ "substep.substep_onboarding_azure_cloud_a_0D596", "substep.substep_onboarding_azure_cloud_a_05F7C", "substep.substep_onboarding_azure_cloud_a_00FFC" ] }, "content.note_onboarding_azure_cloud_a_0D150", "step.step_onboarding_azure_cloud_a_0270C", "step.step_onboarding_azure_cloud_a_0C89C", { "substeps.substepsalpha_onboardingalpha_azurealpha_cloudalpha_aalpha_0F5E7": [ "substep.substep_onboarding_azure_cloud_a_07A17", "content.note_onboarding_azure_cloud_a_059AB", "substep.substep_onboarding_azure_cloud_a_09CE8", "content.p_onboarding_azure_cloud_a_041B1", "substep.substep_onboarding_azure_cloud_a_044A0" ] }, "step.step_onboarding_azure_cloud_a_02BA4" ] }, "content.note_onboarding_azure_cloud_a_01AAE", "content.p_onboarding_azure_cloud_a_0C63D", "content.p_onboarding_azure_cloud_a_0F0B0" ], "related": [ "running_azure_onboarding_script-latest-en", "task_tl1_x5n_g3c-latest-en" ] }, "running_azure_onboarding_script-latest-en.json": { "title": "title_running_azure_onboarding_04AE7", "title_running_azure_onboarding_04AE7": "Run the Azure onboarding script", "shortdesc": "shortdesc_running_azure_onboarding_09DA5", "shortdesc_running_azure_onboarding_09DA5": "Run the onboarding PowerShell script from Elements Security Center in the Azure portal to complete the subscription onboarding.", "content.p_running_azure_onboarding_0565A": "You have added the Azure subscription in Elements Security Center and downloaded the onboarding files.", "content.p_running_azure_onboarding_09E1A": "Run the PowerShell script in the Azure portal:", "step.step_running_azure_onboarding_0F748": "Select Go to Azure portal or navigate to Azure portal and sign in to the portal.", "step.step_running_azure_onboarding_0F8E0": "Launch Azure Cloud Shell from the top navigation of the Azure portal. For instructions, see Getting started with Azure Cloud Shell.", "content.p_running_azure_onboarding_0C13C": "A File Explorer window opens in which you can select a file for uploading to the current Cloud Shell session. The file is uploaded to the current working directory.", "step.step_running_azure_onboarding_0CAD6": "Select Manage files > Upload at the top of the shell screen to upload the PowerShell script file that you already downloaded and extracted from the zip file.", "content.note_running_azure_onboarding_0173B": "Note: You can also double-click the file from File Explorer. The Azure portal notifies you with a 'Successfully uploaded a file' message.", "step.step_running_azure_onboarding_0C870": "Select the PowerShell script that you downloaded earlier and select Open.", "content.p_running_azure_onboarding_0A350": "./powershell_[UUID].ps1", "content.p_running_azure_onboarding_0CCB2": "The script requests you to authenticate at the Microsoft device login page with the code that is displayed in the shell. After successful authentication, the script completes the deployment.", "step.step_running_azure_onboarding_0789C": "Run the uploaded script by entering the following command:", "content.p_running_azure_onboarding_0AC64": "The Azure subscription is onboarded.", "desc": [ "content.p_running_azure_onboarding_0565A", "content.p_running_azure_onboarding_09E1A", { "steps.steps_running_azure_onboarding_02190": [ "step.step_running_azure_onboarding_0F748", "step.step_running_azure_onboarding_0F8E0", "step.step_running_azure_onboarding_0CAD6", "content.p_running_azure_onboarding_0C13C", "step.step_running_azure_onboarding_0C870", "content.note_running_azure_onboarding_0173B", "step.step_running_azure_onboarding_0789C", "content.p_running_azure_onboarding_0A350", "content.p_running_azure_onboarding_0CCB2" ] }, "content.p_running_azure_onboarding_0AC64" ], "related": [ "validating_cloud_account_status-latest-en" ] }, "adding_aws_account-latest-en.json": { "title": "title_adding_aws_account_000001_D101", "title_adding_aws_account_000001_D101": "Add an AWS account in Elements Security Center", "shortdesc": "shortdesc_adding_aws_account_000002_C9FC", "shortdesc_adding_aws_account_000002_C9FC": "Connects an AWS cloud account with the service. ", "content.note_adding_aws_account_00000F_9B45": "Note: For a video on how to connect Elements Security Center to your AWS account, watch the AWS connection video.", "step.step_adding_aws_account_000013_C06C": "Open Elements Security Center.", "step.step_adding_aws_account_000016_058D": "Under Environment, select Cloud.", "content.p_adding_aws_account_00001D_5F6F": "The Add a new cloud account wizard opens.", "step.step_adding_aws_account_00001A_153A": "Select Add accounts.", "content.note_adding_aws_account_000027_7D24": "Note: The scope selector is visible only at the Solution Provider and Service Partner levels.", "substep.substep_adding_aws_account_000024_2B8C": "Select the organization where to add the new account.", "substep.substep_adding_aws_account_000028_071E": "Select AWS as the cloud provider.", "substep.substep_adding_aws_account_00002B_7B6C": "Choose whether you want to add a single account or multiple accounts at the same time.", "step.step_adding_aws_account_000020_7975": "On the Primary account information page, enter the following details.", "step.step_adding_aws_account_00002D_289D": "Select Next.", "content.p_adding_aws_account_000032_1DFC": "If you are adding multiple accounts, upload the CSV file with the account information.", "content.note_adding_aws_account_000034_5BBC": "Note: You can add multiple accounts only if you selected the option to add multiple accounts at the same time.", "content.p_adding_aws_account_000035_5B92": "The CSV file should use the following format: name,account id;importance,business context.", "content.note_adding_aws_account_000038_BC78": "Note: The name field is optional.", "substep.substep_adding_aws_account_00003B_0549": "Open the AWS Management Console.", "content.p_adding_aws_account_00003F_2E97": "The drop-down menu shows the Account ID.", "substep.substep_adding_aws_account_00003D_B62F": "Select your role name at the top right of the management console.", "step.step_adding_aws_account_000030_AF48": "Add your AWS account name and copy the account ID from the AWS portal.", "step.step_adding_aws_account_000040_DE93": "Select Next.", "step.step_adding_aws_account_000043_40E2": "On the Summary page, make sure that the information you have added is correct and select Add.", "step.step_adding_aws_account_000047_B26B": "On the Result page, select Download Cloud Formation template to download the file that you use to deploy the service to the AWS account.", "content.p_adding_aws_account_00004B_799E": "The AWS account is added and the CloudFormation template is downloaded.", "content.p_adding_aws_account_00004D_1A5B": "Next, deploy the downloaded CloudFormation template to link the IAM role to your AWS account.", "desc": [ "content.note_adding_aws_account_00000F_9B45", { "steps.steps_adding_aws_account_000012_9310": [ "step.step_adding_aws_account_000013_C06C", "step.step_adding_aws_account_000016_058D", "step.step_adding_aws_account_00001A_153A", "content.p_adding_aws_account_00001D_5F6F", "step.step_adding_aws_account_000020_7975", { "substeps.substepsalpha_addingalpha_awsalpha_accountalpha_000023alpha_8467": [ "substep.substep_adding_aws_account_000024_2B8C", "content.note_adding_aws_account_000027_7D24", "substep.substep_adding_aws_account_000028_071E", "substep.substep_adding_aws_account_00002B_7B6C" ] }, "step.step_adding_aws_account_00002D_289D", "step.step_adding_aws_account_000030_AF48", "content.p_adding_aws_account_000032_1DFC", "content.note_adding_aws_account_000034_5BBC", "content.p_adding_aws_account_000035_5B92", "content.note_adding_aws_account_000038_BC78", { "substeps.substepsalpha_addingalpha_awsalpha_accountalpha_00003Aalpha_AA30": [ "substep.substep_adding_aws_account_00003B_0549", "substep.substep_adding_aws_account_00003D_B62F", "content.p_adding_aws_account_00003F_2E97" ] }, "step.step_adding_aws_account_000040_DE93", "step.step_adding_aws_account_000043_40E2", "step.step_adding_aws_account_000047_B26B" ] }, "content.p_adding_aws_account_00004B_799E", "content.p_adding_aws_account_00004D_1A5B" ], "related": [ "deploying_aws_iam_role-latest-en" ] }, "deploying_aws_iam_role-latest-en.json": { "title": "title_deploying_aws_iam_role_0006452", "title_deploying_aws_iam_role_0006452": "Deploy the IAM role to AWS", "shortdesc": "shortdesc_deploying_aws_iam_role_000FEF7", "shortdesc_deploying_aws_iam_role_000FEF7": "Use the CloudFormation template from Elements Security Center to deploy the IAM role that links the AWS account to the service.", "content.p_deploying_aws_iam_role_000A2EE": "You have added the AWS account in Elements Security Center and downloaded the CloudFormation template.", "content.p_deploying_aws_iam_role_000E689": "Deploy the IAM role for the service to the AWS account.", "step.step_deploying_aws_iam_role_000FC63": "Open the AWS Management Console with root user privileges.", "step.step_deploying_aws_iam_role_000189D": "Go to the CloudFormation service.", "step.step_deploying_aws_iam_role_0008B9A": "Select Create Stack.", "step.step_deploying_aws_iam_role_00091B2": "In the Create stack wizard, upload the Cloud Formation template file that you downloaded from Elements Security Center.", "step.step_deploying_aws_iam_role_0005001": "Select the uploaded template file.", "step.step_deploying_aws_iam_role_000BFC0": "Select Next.", "step.step_deploying_aws_iam_role_000BABD": "Enter a name for the stack, and select Next.", "step.step_deploying_aws_iam_role_000013D": "Review and confirm the stack settings.", "step.step_deploying_aws_iam_role_0003215": "Select Create stack to start the process.", "content.p_deploying_aws_iam_role_000E7D0": "The AWS account is linked to the service.", "content.note_deploying_aws_iam_role_000D71A": "Note: For configuring multiple accounts at once, use the CloudFormation template and apply it to your Terraform configuration structure.", "desc": [ "content.p_deploying_aws_iam_role_000A2EE", "content.p_deploying_aws_iam_role_000E689", { "steps.steps_deploying_aws_iam_role_000485C": [ "step.step_deploying_aws_iam_role_000FC63", "step.step_deploying_aws_iam_role_000189D", "step.step_deploying_aws_iam_role_0008B9A", "step.step_deploying_aws_iam_role_00091B2", "step.step_deploying_aws_iam_role_0005001", "step.step_deploying_aws_iam_role_000BFC0", "step.step_deploying_aws_iam_role_000BABD", "step.step_deploying_aws_iam_role_000013D", "step.step_deploying_aws_iam_role_0003215" ] }, "content.p_deploying_aws_iam_role_000E7D0", "content.note_deploying_aws_iam_role_000D71A" ], "related": [ "validating_cloud_account_status-latest-en" ] }, "validating_cloud_account_status-latest-en.json": { "title": "title_validating_cloud_account_0B488", "title_validating_cloud_account_0B488": "Validate cloud account status", "shortdesc": "shortdesc_validating_cloud_account_01BA4", "shortdesc_validating_cloud_account_01BA4": "Validates that a cloud account's connection status shows as active.", "content.p_validating_cloud_account_0AD59": "To validate the cloud account status:", "step.step_validating_cloud_account_096DC": "Wait up to a minute and then select Validate status in the Actions section of the cloud account details to see the connection status change to Active (green check mark).", "step.step_validating_cloud_account_0A78B": "Under Environment > Cloud > AWS Accounts and Security Posture , select the associated cloud account name and then follow the same steps to validate its status.", "content.p_validating_cloud_account_0091B": "The cloud account status shows as Active (green check mark).", "desc": [ "content.p_validating_cloud_account_0AD59", { "steps.steps_validating_cloud_account_0A8B7": [ "step.step_validating_cloud_account_096DC", "step.step_validating_cloud_account_0A78B" ] }, "content.p_validating_cloud_account_0091B" ] }, "concept_py4_312_2bc-latest-en.json": { "title": "title_onboarding_networks_0000015402", "title_onboarding_networks_0000015402": "Network asset onboarding", "shortdesc": "shortdesc_onboarding_networks_000002CF9D", "shortdesc_onboarding_networks_000002CF9D": "By onboarding network assets (external assets), you get an understanding what an attacker sees when targeting your organization from the outside.", "content.p_onboarding_networks_00000E61F6": "Our scanners enumerate and discover more assets relating to your organization, which improves your visibility across all areas. The core asset types discovered are domains, subdomains, IPv4 addresses, and CIDR blocks. Ownership of new assets is confirmed through other data points, such as certificates and registration details stored within WHOIS. Therefore, this requires minimal configuration.", "desc": [ "content.p_onboarding_networks_00000E61F6" ] }, "task_ecw_jr2_2bc-latest-en.json": { "title": "title_adding_network_000001_2936D606", "title_adding_network_000001_2936D606": "Add a new network asset", "shortdesc": "shortdesc_adding_network_000002_86B298E5", "shortdesc_adding_network_000002_86B298E5": "Adds a network asset to Elements Exposure Management by internet discovery or CSV import.", "content.p_adding_network_00000F_D70F591C": "You can add network assets to External assets either by internet discovery or by importing asset data from a CSV file.", "step.step_adding_network_000012_DB3791D4": "Open the WithSecure Security Center.", "step.step_adding_network_000015_D02295FD": "Under Environment, select Network > Add new asset.", "content.note_adding_network_00001E_5C9EA81E": "Note: The data in the file must be comma separated on separate lines, for example, <asset_name>, <asset_type>, <asset_importance>, <business_context>. The asset name must clearly identify the selected asset. Asset types are case sensitive. They can be as follows: Domain, Subdomain, Ipv4Address, or CIDR. Asset importance can be Low, Medium, or High. Importance is optional with the default value of Medium. Business context is an optional text property that is limited to 256 characters. It can be used to describe the asset or to provide extra context to the importance rating. For example:", "step.step_adding_network_00001B_1A44F1D9": "Select the CSV file that contains the asset data that you want to add.", "desc": [ "content.p_adding_network_00000F_D70F591C", { "steps.steps_adding_network_000011_6898C13C": [ "step.step_adding_network_000012_DB3791D4", "step.step_adding_network_000015_D02295FD", "step.step_adding_network_00001B_1A44F1D9", "content.note_adding_network_00001E_5C9EA81E" ] } ], "related": [ "finding_internet_facing_systems-latest-en", "viewing_assets-latest-en" ] }, "concept_qzk_jby_dbc-latest-en.json": { "title": "title_onboarding_identities_0000AD8D", "title_onboarding_identities_0000AD8D": "Identity onboarding", "shortdesc": "shortdesc_onboarding_identities_00007193", "shortdesc_onboarding_identities_00007193": "Onboard identity assets to find identity-related risks, such as missing multifactor authentication (MFA) and leaked credentials.", "content.p_onboarding_identities_00008CAA": "Microsoft Entra ID is currently supported. Onboard Microsoft Entra ID identities from Identity inventory. Identity-related scans start immediately after onboarding.", "content.note_onboarding_identities_00005F64": "Note: For newly onboarded companies, identities and associated breach data appear within minutes. The exact time depends on the scanning and processing queues. For companies already onboarded, new identities, Microsoft Entra ID updates, and breach data can take up to 36 hours to appear.", "desc": [ "content.p_onboarding_identities_00008CAA", "content.note_onboarding_identities_00005F64" ] }, "scanning-latest-en.json": { "title": "title_scanning_000001_A232A0E4", "title_scanning_000001_A232A0E4": "Managing scans", "shortdesc": "shortdesc_scanning_000002_90E01EEA", "shortdesc_scanning_000002_90E01EEA": "Scanning your devices, cloud accounts, networks, and identities with Elements Exposure Management to find vulnerabilities and exposures. ", "content.p_scanning_00000C_28F30995": "Elements Exposure Management scans your environment to find vulnerabilities and exposures. You can scan devices, cloud accounts, networks, and identities.", "desc": [ "content.p_scanning_00000C_28F30995" ] }, "scanning_devices-latest-en.json": { "title": "title_scanning_devices_000001_8FDA8E", "title_scanning_devices_000001_8FDA8E": "Device scans", "shortdesc": "shortdesc_scanning_devices_000002_EB883D", "shortdesc_scanning_devices_000002_EB883D": "Elements Agent-based, discovery, and system scans for devices.", "content.title_scanning_devices_000011_9A3E48": "The scanning process", "content.p_scanning_devices_000012_E26163": "First, the discovery scan uses automatic device discovery to map the available network. It shows the active hosts, ports, and services that are available for further scanning and helps you choose which components to include.", "content.p_scanning_devices_000013_4AF956": "Later, all selected hosts, ports and services are scanned for vulnerabilities with the system scan and web scan, before presenting the data in Elements Security Center. The reporting tool will take you from complete overview to extreme technical detail, giving you all the information you need for the remediation phase, where you assign and manage your security issues.", "content.p_scanning_devices_000015_794359": "Verification scans confirm that issues have been handled. Point-and-click controls and benchmarking history help you verify the results.", "content.title_scanning_devices_000016_C40FD3": "Detailed descriptions", "content.p_scanning_devices_000017_A5FD62": "A security audit usually starts by identifying the assets to scan for vulnerabilities. Discovery scan maps the devices and services in the target network.", "content.p_scanning_devices_000019_47ADC8": "In WithSecure Elements Exposure Management, all system scan and web scan targets are stored in logical containers called scan groups. The scan groups serve multiple purposes:", "content.dt_scanning_devices_000021_70E2C0": "Organize your assets", "content.dd_scanning_devices_000022_A04328": "For example, you can organize your assets based on your network ranges, physical locations, or by system owners.", "content.dt_scanning_devices_000024_2108EC": "Apply scan templates", "content.dd_scanning_devices_000025_8AD816": "to assets within the scan group.", "content.dt_scanning_devices_000027_6DE3FD": "Apply scheduling", "content.dd_scanning_devices_000028_43148B": "to assets within the scan group.", "content.dt_scanning_devices_00002A_CF20EC": "Select scan nodes", "content.dd_scanning_devices_00002B_755E1F": "used to perform the network vulnerability scans.", "content.dt_scanning_devices_00002D_6EB2A8": "Control email notifications", "content.dd_scanning_devices_00002E_53B795": "for the entire scan group.", "desc": [ "content.title_scanning_devices_000011_9A3E48", "content.p_scanning_devices_000012_E26163", "content.p_scanning_devices_000013_4AF956", "content.p_scanning_devices_000015_794359", "content.title_scanning_devices_000016_C40FD3", "content.p_scanning_devices_000017_A5FD62", "content.p_scanning_devices_000019_47ADC8", { "dl.dl_scanning_devices_00001F_C50DCB": [ { "dlentry.dlentry_scanning_devices_000020_2A2D93": [ "content.dt_scanning_devices_000021_70E2C0", "content.dd_scanning_devices_000022_A04328" ] }, { "dlentry.dlentry_scanning_devices_000023_C3B4E2": [ "content.dt_scanning_devices_000024_2108EC", "content.dd_scanning_devices_000025_8AD816" ] }, { "dlentry.dlentry_scanning_devices_000026_5E6B65": [ "content.dt_scanning_devices_000027_6DE3FD", "content.dd_scanning_devices_000028_43148B" ] }, { "dlentry.dlentry_scanning_devices_000029_33B000": [ "content.dt_scanning_devices_00002A_CF20EC", "content.dd_scanning_devices_00002B_755E1F" ] }, { "dlentry.dlentry_scanning_devices_00002C_B045C1": [ "content.dt_scanning_devices_00002D_6EB2A8", "content.dd_scanning_devices_00002E_53B795" ] } ] } ] }, "discovery_scan-latest-en.json": { "title": "title_discovery_scan_000001_1F5E06D7", "title_discovery_scan_000001_1F5E06D7": "Discovery scans", "shortdesc": "shortdesc_discovery_scan_000002_9E4396ED", "shortdesc_discovery_scan_000002_9E4396ED": "Discovery scans help you to identify all systems and their exposed ports (services) within your network. They give you a quick overview of the items that you may want to include in the network vulnerability scan.", "content.p_discovery_scan_00000E_D263AAE7": "A discovery scan identifies the systems and exposed ports on your network, giving you a quick overview of the items to include in a network vulnerability scan. You add, configure, run, and review discovery scans.", "desc": [ "content.p_discovery_scan_00000E_D263AAE7" ] }, "adding_discovery_scan-latest-en.json": { "title": "title_adding_discovery_scan_00002CBC", "title_adding_discovery_scan_00002CBC": "Add discovery scans", "shortdesc": "shortdesc_adding_discovery_scan_00004F5C", "shortdesc_adding_discovery_scan_00004F5C": "You can add a new discovery scan on the Discovery scans page. ", "content.p_adding_discovery_scan_0000A37D": "To add a new discovery scan:", "step.step_adding_discovery_scan_000027EC": "Under Security Configurations, select Scans > Discovery scans.", "step.step_adding_discovery_scan_0000014A": "Select , and then select Add discovery scan.", "subchoice.choice_adding_discovery_scan_00001D8E": "Host discovery identifies if hosts are online or offline. The scan procedures include ARP resolution (in local segments), ICMP PING, and a limited scan for default SSH, HTTP, and HTTPS ports, as well as for Remote Desktop services.", "subchoice.choice_adding_discovery_scan_00008CF9": "Port scan finds the open ports on the hosts and reports the services (for example, database and web services) that are running on each one.", "step.step_adding_discovery_scan_00000224": "Select either the Host discovery or Port scan mode.", "subchoice.choice_adding_discovery_scan_0000E281": "Enter a name for each IP range that you enter. Click Add to add more IP ranges to the same scan.", "subchoice.choice_adding_discovery_scan_0000E4DF": "You can exclude an IP range within the included range by adding it to the Excluded IP ranges field.", "content.p_adding_discovery_scan_000096BF": "", "content.p_adding_discovery_scan_00005C54": "For example: 192.168.1.0/24", "step.step_adding_discovery_scan_0000F5A1": "Enter the IP ranges to include in the scan or select Upload targets from file to upload targets in CSV format.", "step.step_adding_discovery_scan_00006316": "Select the Scan node to use for the scan.", "step.step_adding_discovery_scan_00001359": "Click Next.", "step.step_adding_discovery_scan_000074A3": "Select the template to use for the scan.", "step.step_adding_discovery_scan_0000D9D6": "Define the scan scheduling if you want the scan to run automatically, for example once a month.", "step.step_adding_discovery_scan_000012D3": "Configure the email notifications if you want to receive alerts on certain events.", "step.step_adding_discovery_scan_0000128C": "Click Finish.", "desc": [ "content.p_adding_discovery_scan_0000A37D", { "steps.steps_adding_discovery_scan_0000BC87": [ "step.step_adding_discovery_scan_000027EC", "step.step_adding_discovery_scan_0000014A", "step.step_adding_discovery_scan_00000224", { "subchoices.choices_adding_discovery_scan_000031FF": [ "subchoice.choice_adding_discovery_scan_00001D8E", "subchoice.choice_adding_discovery_scan_00008CF9" ] }, "step.step_adding_discovery_scan_0000F5A1", "content.p_adding_discovery_scan_000096BF", { "subchoices.ul_adding_discovery_scan_0000031F": [ "subchoice.choice_adding_discovery_scan_0000E281", "subchoice.choice_adding_discovery_scan_0000E4DF" ] }, "content.p_adding_discovery_scan_00005C54", "step.step_adding_discovery_scan_00006316", "step.step_adding_discovery_scan_00001359", "step.step_adding_discovery_scan_000074A3", "step.step_adding_discovery_scan_0000D9D6", "step.step_adding_discovery_scan_000012D3", "step.step_adding_discovery_scan_0000128C" ] } ] }, "configuring_discovery_scan_template-latest-en.json": { "title": "title_configuring_discovery_sc_03FB9", "title_configuring_discovery_sc_03FB9": "Configure discovery scan templates", "shortdesc": "shortdesc_configuring_discovery_sc_0AE68", "shortdesc_configuring_discovery_sc_0AE68": "Scan templates store a set of options that you want to use across several discovery scans. ", "step.step_configuring_discovery_sc_02BE1": "Under Security Configurations, select Scan templates.", "step.step_configuring_discovery_sc_0EF6F": "Select Add discovery scan template.", "step.step_configuring_discovery_sc_0946F": "Enter a name and a description for the template.", "step.step_configuring_discovery_sc_0FB95": "Select Next.", "subchoice.choice_configuring_discovery_sc_0BCA8": "Host discovery mode is extremely fast at identifying hosts on a network. It is mainly used on internal networks where all hosts reply to an ICMP ping. The host discovery mode is fast because its only purpose is to identify hosts on the network. It does not care about how many open ports a given system has.", "subchoice.choice_configuring_discovery_sc_093BD": "Port scan mode will attempt to detect hosts on a network and their open ports within the specified port range. Port scan is mainly used to identify hosts and services on Internet-facing systems.", "subsubchoice.choice_configuring_discovery_sc_08990": "Top 100 scans each IP for the 100 most common open ports.", "subsubchoice.choice_configuring_discovery_sc_017C9": "Top 1000 scans each IP for the 1000 most common open ports.", "subsubchoice.choice_configuring_discovery_sc_04A8C": "Full range scans the full TCP and UDP range from 0 to 65535.", "subsubchoice.choice_configuring_discovery_sc_0B269": "Custom allows you to select your own range. For example, TCP 0 - 10000 and UDP 0 - 5000.", "content.p_configuring_discovery_sc_00C85": "", "substep.substep_configuring_discovery_sc_05D33": "To select Port scan, select the port range to scan:", "substep.substep_configuring_discovery_sc_0204B": "Select Detect operating system to attempt to detect the operating system based on the information gathered during the port scan.", "substep.substep_configuring_discovery_sc_023EA": "Select Proceed if no PING to force the discovery scan to port scan an IP even if it does not reply to PING. If this option is disabled, the port scan might go faster, but some open ports might not be detected.", "step.step_configuring_discovery_sc_03FBC": "Define settings for the template. Choose a scan mode between host discovery or one of the port scan options:", "content.p_configuring_discovery_sc_09F03": "This setting controls the timeout, which means how long the discovery scan should wait for a reply before it moves on to the next port number. Note that aggressive settings may cause a Denial of Service condition on the target host itself or the intermediate network equipment, such as a firewall.", "step.step_configuring_discovery_sc_02E1C": "Select the Scanning performance.", "content.p_configuring_discovery_sc_0C3D4": "This setting defines how much resources are used to scan a single IP address. A higher amount of threads increases the overall scan speed, but it should be used carefully - especially if the scanning performance settings are above normal. Such optimized configuration might decrease the scan precision.", "step.step_configuring_discovery_sc_0E5B3": "Select the Number of threads.", "content.p_configuring_discovery_sc_07E20": "This setting forces the discovery scan to scan each port twice. Use this option when scan accuracy is more important than scan speed, or if the network is slow or unstable.", "step.step_configuring_discovery_sc_05788": "Turn Double check on or off.", "content.p_configuring_discovery_sc_0E9AA": "The fragmented scan mode can be used to fragment IP packets in an attempt to bypass low-quality or misconfigured firewalls.", "step.step_configuring_discovery_sc_05DCD": "Turn Fragmented scan on or off.", "step.step_configuring_discovery_sc_062B4": "Click Finish to save the template.", "content.p_configuring_discovery_sc_0261C": "The discovery scan template is saved and available for use in scan groups.", "desc": [ { "steps.steps_configuring_discovery_sc_0F315": [ "step.step_configuring_discovery_sc_02BE1", "step.step_configuring_discovery_sc_0EF6F", "step.step_configuring_discovery_sc_0946F", "step.step_configuring_discovery_sc_0FB95", "step.step_configuring_discovery_sc_03FBC", { "subchoices.choices_configuring_discovery_sc_01AA6": [ "subchoice.choice_configuring_discovery_sc_0BCA8", "subchoice.choice_configuring_discovery_sc_093BD" ] }, { "substeps.substepsalpha_configuringalpha_discoveryalpha_scalpha_01F4F": [ "substep.substep_configuring_discovery_sc_05D33", "content.p_configuring_discovery_sc_00C85", { "subsubchoices.ul_configuring_discovery_sc_07F76": [ "subsubchoice.choice_configuring_discovery_sc_08990", "subsubchoice.choice_configuring_discovery_sc_017C9", "subsubchoice.choice_configuring_discovery_sc_04A8C", "subsubchoice.choice_configuring_discovery_sc_0B269" ] }, "substep.substep_configuring_discovery_sc_0204B", "substep.substep_configuring_discovery_sc_023EA" ] }, "step.step_configuring_discovery_sc_02E1C", "content.p_configuring_discovery_sc_09F03", "step.step_configuring_discovery_sc_0E5B3", "content.p_configuring_discovery_sc_0C3D4", "step.step_configuring_discovery_sc_05788", "content.p_configuring_discovery_sc_07E20", "step.step_configuring_discovery_sc_05DCD", "content.p_configuring_discovery_sc_0E9AA", "step.step_configuring_discovery_sc_062B4" ] }, "content.p_configuring_discovery_sc_0261C" ] }, "running_discovery_scan-latest-en.json": { "title": "title_running_discovery_scan_0004691", "title_running_discovery_scan_0004691": "Run discovery scans", "shortdesc": "shortdesc_running_discovery_scan_000B0A8", "shortdesc_running_discovery_scan_000B0A8": "You can run any of your available discovery scans on the Discovery scans page. ", "content.p_running_discovery_scan_0006C98": "To run a discovery scan:", "content.p_running_discovery_scan_0009A48": "The action bar appears at the bottom of the page.", "step.step_running_discovery_scan_0008B8D": "Select the checkboxes of the scans that you want to run.", "content.note_running_discovery_scan_0009992": "Tip: You can click the Play button in the Status column to run a single scan.", "step.step_running_discovery_scan_00031F2": "Select Start scanning from the action bar.", "subchoice.choice_running_discovery_scan_000CB53": "Idle - the scan has never been started before.", "subchoice.choice_running_discovery_scan_000B5E5": "Initialized - the scan has been accepted by the scan node and will start shortly.", "subchoice.choice_running_discovery_scan_00076C0": "Queued - the scan is waiting for an available slot on the scan node.", "subchoice.choice_running_discovery_scan_00032D6": "Running - the scan is in progress on the scan node, and you can move your cursor over the progress bar to see more detailed information.", "subchoice.choice_running_discovery_scan_000F01C": "Completed - the scan has finished.", "content.p_running_discovery_scan_000AA31": "A scan can have one of the following statuses:", "step.step_running_discovery_scan_00069D5": "While the scan is running, you can follow its progress by checking the Status column.", "step.step_running_discovery_scan_0004FDC": "When the scan is completed, click the name of the scan to view the results.", "desc": [ "content.p_running_discovery_scan_0006C98", { "steps.steps_running_discovery_scan_000F603": [ "step.step_running_discovery_scan_0008B8D", "content.p_running_discovery_scan_0009A48", "step.step_running_discovery_scan_00031F2", "content.note_running_discovery_scan_0009992", "step.step_running_discovery_scan_00069D5", "content.p_running_discovery_scan_000AA31", { "subchoices.ul_running_discovery_scan_000FA53": [ "subchoice.choice_running_discovery_scan_000CB53", "subchoice.choice_running_discovery_scan_000B5E5", "subchoice.choice_running_discovery_scan_00076C0", "subchoice.choice_running_discovery_scan_00032D6", "subchoice.choice_running_discovery_scan_000F01C" ] }, "step.step_running_discovery_scan_0004FDC" ] } ] }, "viewing_discovery_scan_results-latest-en.json": { "title": "title_viewing_discovery_scan_r_0E240", "title_viewing_discovery_scan_r_0E240": "View the discovery scan results", "shortdesc": "shortdesc_viewing_discovery_scan_r_02EEB", "shortdesc_viewing_discovery_scan_r_02EEB": "The discovery scan results page contains a summary of the scan details, such as scan time and overall statistics, as well as a list of the identified hosts. ", "content.p_viewing_discovery_scan_r_064B3": "The discovery scan results page summarizes the scan and lists the assets it found.", "content.p_viewing_discovery_scan_r_067A7": "This opens the report for the selected scan. The actual scan results are listed below the filter and scan summary. This list contains detailed information about each IP, such as its MAC address, reverse DNS hostname, the potential operating system, and the open ports found. Some IPs are marked with a green checkmark icon while others are not. Hosts that are already added to a system scan for network vulnerability scanning are marked with a green checkmark icon.", "step.step_viewing_discovery_scan_r_08F64": "On the Discovery scans page, click the name of the scan that you want to view.", "content.p_viewing_discovery_scan_r_00F48": "This helps you remove irrelevant hosts if the scan covered a wide IP range and a large number of hosts were discovered, as the full list of hosts can be overwhelming.", "substep.substep_viewing_discovery_scan_r_0DB47": "Click Filter.", "substep.substep_viewing_discovery_scan_r_0D589": "Specify the filtering parameters that you want to apply.", "substep.substep_viewing_discovery_scan_r_00093": "Click Apply.", "step.step_viewing_discovery_scan_r_0DCA9": "If you want to narrow down the list of hosts displayed:", "substep.substep_viewing_discovery_scan_r_0CF75": "Select the hosts that you want.", "substep.substep_viewing_discovery_scan_r_0B5AF": "Click Add to network vulnerability scan group at the bottom of the page.", "substep.substep_viewing_discovery_scan_r_06DAA": "Select the target network scan groups.", "substep.substep_viewing_discovery_scan_r_013AF": "Click Finish.", "content.note_viewing_discovery_scan_r_09E92": "Note: You can also add the discovery scan as a source for a scan group, after which new hosts are automatically added to the scan group.", "step.step_viewing_discovery_scan_r_03DA9": "To add listed hosts to a scan group:", "desc": [ "content.p_viewing_discovery_scan_r_064B3", { "steps.steps_viewing_discovery_scan_r_091A8": [ "step.step_viewing_discovery_scan_r_08F64", "content.p_viewing_discovery_scan_r_067A7", "step.step_viewing_discovery_scan_r_0DCA9", { "substeps.substepsalpha_viewingalpha_discoveryalpha_scanalpha_ralpha_038FE": [ "substep.substep_viewing_discovery_scan_r_0DB47", "content.p_viewing_discovery_scan_r_00F48", "substep.substep_viewing_discovery_scan_r_0D589", "substep.substep_viewing_discovery_scan_r_00093" ] }, "step.step_viewing_discovery_scan_r_03DA9", { "substeps.substepsalpha_viewingalpha_discoveryalpha_scanalpha_ralpha_04D75": [ "substep.substep_viewing_discovery_scan_r_0CF75", "substep.substep_viewing_discovery_scan_r_0B5AF", "substep.substep_viewing_discovery_scan_r_06DAA", "substep.substep_viewing_discovery_scan_r_013AF" ] }, "content.note_viewing_discovery_scan_r_09E92" ] } ] }, "system_scan-latest-en.json": { "title": "title_system_scan_000001_45209B80", "title_system_scan_000001_45209B80": "System scans", "shortdesc": "shortdesc_system_scan_000002_12F9FFBB", "shortdesc_system_scan_000002_12F9FFBB": "System scan is a network-based vulnerability scanner that can scan any system with an IP for common vulnerabilities. ", "content.p_system_scan_00000F_4F75DB01": "System scan's vulnerability detection is based on both active and passive vulnerability checks. For example, it will attempt to identify the service (product) and its version number. Once that is identified, the system scan checks if that particular software has any known vulnerabilities. In addition to passive scanning based on banner grabbing, system scans also run active checks in an attempt to confirm the existence of certain vulnerabilities or system misconfigurations. It can also identify missing security patches and outdated software if authenticated scanning has been enabled.", "content.note_system_scan_000010_DBC9B2A7": "Note: System scan is non-disruptive and designed not to cause Denial of Service conditions on your systems.", "content.p_system_scan_000011_DCADC89D": "When you start a system scan, it first performs a port scan of the target and once all the open ports (services) have been identified, they will be assessed for vulnerabilities. Examples of systems that can be scanned by the system scan include:", "step.step_system_scan_000015_1E11B965": "Web servers", "step.step_system_scan_000016_C1DD610C": "Firewalls", "step.step_system_scan_000017_9C16D87C": "Email servers and gateways", "step.step_system_scan_000018_979CF52E": "Routers and switches", "step.step_system_scan_000019_A30D526A": "Domain controllers", "step.step_system_scan_00001A_7AFA0DAC": "DNS servers", "step.step_system_scan_00001B_9BC0446D": "Antivirus gateways", "step.step_system_scan_00001C_5E866169": "Workstations", "content.p_system_scan_00001D_0CF58CBD": "The checks that the scanner runs include the following:", "step.step_system_scan_00001F_231D22A5": "Detect services and operating systems discovery (UDP / TCP / ICMP)", "step.step_system_scan_000020_78EFFA1F": "Testing for vulnerabilities and misconfigurations in services", "step.step_system_scan_000021_399A143C": "Testing for vulnerabilities and misconfigurations in operating systems", "step.step_system_scan_000022_504727E9": "Testing for vulnerabilities and misconfigurations in network devices", "step.step_system_scan_000023_95F40B18": "Secure configuration testing (SSL / SSH)", "step.step_system_scan_000024_3195716F": "Default passwords discovery (operating systems / services / network devices)", "content.p_system_scan_000025_8EEE0687": "All vulnerabilities are reported with a CVSSv2 score, CVE, BID, BugTraq, and other references when available.", "desc": [ "content.p_system_scan_00000F_4F75DB01", "content.note_system_scan_000010_DBC9B2A7", "content.p_system_scan_000011_DCADC89D", { "steps.ul_system_scan_000014_B7916CF2": [ "step.step_system_scan_000015_1E11B965", "step.step_system_scan_000016_C1DD610C", "step.step_system_scan_000017_9C16D87C", "step.step_system_scan_000018_979CF52E", "step.step_system_scan_000019_A30D526A", "step.step_system_scan_00001A_7AFA0DAC", "step.step_system_scan_00001B_9BC0446D", "step.step_system_scan_00001C_5E866169" ] }, "content.p_system_scan_00001D_0CF58CBD", { "steps.ul_system_scan_00001E_C7530E8C": [ "step.step_system_scan_00001F_231D22A5", "step.step_system_scan_000020_78EFFA1F", "step.step_system_scan_000021_399A143C", "step.step_system_scan_000022_504727E9", "step.step_system_scan_000023_95F40B18", "step.step_system_scan_000024_3195716F" ] }, "content.p_system_scan_000025_8EEE0687" ] }, "adding_system_scan-latest-en.json": { "title": "title_adding_system_scan_000001_E8BE", "title_adding_system_scan_000001_E8BE": "Add system scans", "shortdesc": "shortdesc_adding_system_scan_000002_DDF1", "shortdesc_adding_system_scan_000002_DDF1": "We recommend that you add a new system scan by adding hosts to a scan group based on the results of a discovery scan, but you can also add a new system scan to the scan group separately. ", "content.p_adding_system_scan_000012_8295": "If you need to add a new system scan manually:", "step.step_adding_system_scan_000015_23DA": "Under Security Configurations, select Scans > Network scans.", "content.p_adding_system_scan_00001F_BC2F": "The Scan targets window opens.", "step.step_adding_system_scan_00001B_5E67": "Select and then select Add system scans.", "content.note_adding_system_scan_000025_0140": "Tip: If you have a large list of scan targets, click Upload targets from file to upload a plain-text file in CSV format. Separate hostname or IP address, name, and virtual hostname in three different columns in the file.", "step.step_adding_system_scan_000021_CE3B": "In IP range, enter the list of scan targets.", "step.step_adding_system_scan_000027_DED3": "Click Finish.", "desc": [ "content.p_adding_system_scan_000012_8295", { "steps.steps_adding_system_scan_000014_D553": [ "step.step_adding_system_scan_000015_23DA", "step.step_adding_system_scan_00001B_5E67", "content.p_adding_system_scan_00001F_BC2F", "step.step_adding_system_scan_000021_CE3B", "content.note_adding_system_scan_000025_0140", "step.step_adding_system_scan_000027_DED3" ] } ] }, "configuring_system_scan_template-latest-en.json": { "title": "title_configuring_system_scan__06659", "title_configuring_system_scan__06659": "Configure system scans", "shortdesc": "shortdesc_configuring_system_scan__05E77", "shortdesc_configuring_system_scan__05E77": "You can use templates to configure multiple system scans at a time (recommended), or you can configure individual scans. ", "content.p_configuring_system_scan__095A7": "A scan template is assigned to a scan group and the template is applied to all hosts within that group.", "content.p_configuring_system_scan__067CE": "To configure system scans, define the desired port range to scan and if needed, modify the performance settings.", "content.note_configuring_system_scan__02E0B": "Tip: We recommend that you use the default settings.", "content.p_configuring_system_scan__0B5D8": "To configure a system scan:", "substep.substep_configuring_system_scan__00ABA": "Under Security Configurations, select Scans > Network scans.", "substep.substep_configuring_system_scan__0BC15": "Select and then select Add system scans.", "substep.substep_configuring_system_scan__08D59": "Define the TCP/UDP Port range to scan. Keep the default Scanning performance setting unless your environment requires a change.", "substep.substep_configuring_system_scan__05697": "Click Finish.", "step.step_configuring_system_scan__03E5A": "To configure a single system scan:", "substep.substep_configuring_system_scan__043AC": "Under Security Configurations, select Scan Templates.", "content.note_configuring_system_scan__04FDD": "Note: Elements Exposure Management has some built-in templates that cannot be edited.", "substep.substep_configuring_system_scan__004E6": "On the Network scan templates tab, select Add system scan template or select the menu icon in the actions column and select Create a new template based on this to edit an existing template.", "substep.substep_configuring_system_scan__090E4": "Define the TCP/UDP Port range for the template. Keep the default Scanning performance setting unless your environment requires a change, then save the template.", "substep.substep_configuring_system_scan__0439D": "On the Network scans tab, select Group view.", "substep.substep_configuring_system_scan__08A99": "Select the menu icon next to the group name and select Edit scan group.", "substep.substep_configuring_system_scan__05F23": "Select Next to go to the System scans page.", "substep.substep_configuring_system_scan__065A7": "Select the template that you created or edited, and decide if you want to overwrite the existing scan configuration.", "substep.substep_configuring_system_scan__0095B": "Select Next until you reach the Summary page, then select Finish to save your changes.", "step.step_configuring_system_scan__0EC3E": "To configure a system scan template:", "content.p_configuring_system_scan__0C33E": "The system scan configuration is saved and applied to the scan group.", "desc": [ "content.p_configuring_system_scan__095A7", "content.p_configuring_system_scan__067CE", "content.note_configuring_system_scan__02E0B", "content.p_configuring_system_scan__0B5D8", { "steps.steps_configuring_system_scan__0D7F1": [ "step.step_configuring_system_scan__03E5A", { "substeps.substepsalpha_configuringalpha_systemalpha_scanalpha_alpha_01582": [ "substep.substep_configuring_system_scan__00ABA", "substep.substep_configuring_system_scan__0BC15", "substep.substep_configuring_system_scan__08D59", "substep.substep_configuring_system_scan__05697" ] }, "step.step_configuring_system_scan__0EC3E", { "substeps.substepsalpha_configuringalpha_systemalpha_scanalpha_alpha_04F8E": [ "substep.substep_configuring_system_scan__043AC", "substep.substep_configuring_system_scan__004E6", "content.note_configuring_system_scan__04FDD", "substep.substep_configuring_system_scan__090E4", "substep.substep_configuring_system_scan__0439D", "substep.substep_configuring_system_scan__08A99", "substep.substep_configuring_system_scan__05F23", "substep.substep_configuring_system_scan__065A7", "substep.substep_configuring_system_scan__0095B" ] } ] }, "content.p_configuring_system_scan__0C33E" ] }, "system_scan_config_options-latest-en.json": { "title": "title_system_scan_config_optio_01186", "title_system_scan_config_optio_01186": "System scan configuration options", "shortdesc": "shortdesc_system_scan_config_optio_00733", "shortdesc_system_scan_config_optio_00733": "You can use the tooltips next to any of the options in the UI to see more information about them. ", "content.dt_system_scan_config_optio_0625E": "General", "content.dd_system_scan_config_optio_0D48E": "", "choice.choice_system_scan_config_optio_0730B": "Define a Template name. We recommend that you make this as descriptive as possible.", "choice.choice_system_scan_config_optio_0B18E": "Define the TCP/UDP Port range that you want to scan. We recommend that you perform a full TCP/UDP port scan to ensure full coverage.", "choice.choice_system_scan_config_optio_0AF20": "Scanning performance decides the delay between packets sent (during the port scan).", "content.note_system_scan_config_optio_0D23D": "Note: Backporting is the action of taking parts from a newer version of software and porting them to an older version of the same software. When this approach is used for applying security patches on Linux distributions like Red Hat, Ubuntu, Debian and others, the software's version number does not change. System scans will therefore continue to see the software as outdated and report false positives. The best way to avoid such false positives is to configure authenticated scanning, which will enable system scans to verify the actual patch level on the system being scanned. Unfortunately, it is not always possible to run authenticated scans, which is why you can use the Skip backported software setting. This allows you to decide if system scans should report vulnerabilities in backported software or not.", "choice.choice_system_scan_config_optio_01240": "Skip backported software decides if the system scan should skip reporting certain vulnerabilities on operating systems that support backported software.", "choice.choice_system_scan_config_optio_0F3F8": "Extended scan log. Only enable this option if you need to debug a scan.", "content.dt_system_scan_config_optio_07F57": "Plugin selection", "content.dd_system_scan_config_optio_03A5C": "", "content.dd_p_system_scan_config_optio_09805": "You can choose specific plugins that you want to scan for. You can define a scan configuration that will either exclude or include the scanning of certain plugins. The most common scenario is when new critical vulnerabilities are announced to the public and you would like to scan for that specific vulnerability. For example, you can create a scan template that will only scan for the \"Heartbleed\" vulnerability.
", "content.dd_p_system_scan_config_optio_07BD9": "For inspiration, go to Templates > Network scan templates to view some of the built-in scan templates.
", "content.note_system_scan_config_optio_0C077": "Note: It is recommended that you always scan with a complete set of plugins. A scan that covers a limited number of plugins gives a false security status of the scanned system and may affect the vulnerability remediation status known to Elements Vulnerability Management. For example, already detected vulnerabilities can disappear on the latest report and be considered fixed.
", "content.p_system_scan_config_optio_0CF6C": "", "content.dt_system_scan_config_optio_0701A": "Authentication", "content.dd_system_scan_config_optio_0A086": "In addition to regular network-based scanning, where the host's ports are scanned and the exposed services are reviewed for flaws, you can also run a system scan in authenticated mode, which enables it to authenticate the target host. Authenticated scanning helps the scanner eliminate potential false positives and check patch levels and other misconfigurations.", "desc": [ { "dl.dl_system_scan_config_optio_0020A": [ { "dlentry.general": [ "content.dt_system_scan_config_optio_0625E", "content.dd_system_scan_config_optio_0D48E", { "choices.ul_system_scan_config_optio_043D4": [ "choice.choice_system_scan_config_optio_0730B", "choice.choice_system_scan_config_optio_0B18E", "choice.choice_system_scan_config_optio_0AF20", "choice.choice_system_scan_config_optio_01240", "content.note_system_scan_config_optio_0D23D", "choice.choice_system_scan_config_optio_0F3F8" ] } ] }, { "dlentry.plugin-selection": [ "content.dt_system_scan_config_optio_07F57", "content.dd_system_scan_config_optio_03A5C", "content.dd_p_system_scan_config_optio_09805", "content.dd_p_system_scan_config_optio_07BD9", "content.note_system_scan_config_optio_0C077", "content.p_system_scan_config_optio_0CF6C" ] }, { "dlentry.authentication": [ "content.dt_system_scan_config_optio_0701A", "content.dd_system_scan_config_optio_0A086" ] } ] } ], "related": [ "authenticated_scanning-latest-en" ] }, "scanning_cloud_accounts-latest-en.json": { "title": "title_scanning_cloud_accounts_00C3EF", "title_scanning_cloud_accounts_00C3EF": "Cloud account scans", "shortdesc": "shortdesc_scanning_cloud_accounts_00CF51", "shortdesc_scanning_cloud_accounts_00CF51": "WithSecure Elements Exposure Management scans allow you to assess the security and compliance posture of your cloud accounts.", "content.p_scanning_cloud_accounts_006B05": "Scans check your cloud assets and services for potential risks, such as misconfigurations, vulnerabilities, or violations of best practices and regulatory standards. By using scans, you can gain visibility into your cloud security posture, identify and prioritize findings, and take remediation actions. Scans also help you to show the compliance of your cloud accounts with various frameworks and standards.", "content.p_scanning_cloud_accounts_00120B": "Scans are run periodically and can be run on demand.", "desc": [ "content.p_scanning_cloud_accounts_006B05", "content.p_scanning_cloud_accounts_00120B" ] }, "adding_new_scan-latest-en.json": { "title": "title_adding_new_scan_000001_AC85520", "title_adding_new_scan_000001_AC85520": "Add cloud account scans", "shortdesc": "shortdesc_adding_new_scan_000002_807654E", "shortdesc_adding_new_scan_000002_807654E": "Adds a new cloud account scan that checks selected accounts against a rule group on a recurring schedule. ", "content.p_adding_new_scan_00000C_BDF3E20": "A cloud account scan checks the accounts you select against a rule group on a recurring schedule and reports compliance findings.", "step.step_adding_new_scan_00000E_F4F6ACF": "Under Security Configurations, select Scans > Cloud scans .", "content.dt_adding_new_scan_00001B_CF4ED7F": "Name ", "content.dd_adding_new_scan_00001C_89EA4C3": "The name of the scan. Click the name to edit it.", "content.dt_adding_new_scan_00001E_AC12B7F": "Latest scan status ", "content.dd_adding_new_scan_00001F_C68A6DC": "The status of the most recent scan.", "content.dt_adding_new_scan_000021_AE99795": "Scan results ", "content.dd_adding_new_scan_000022_4BE5848": "The number of findings that were detected by the scan, divided by their severity level. The severity level indicates how critical the finding is and how urgently it should be resolved.", "content.dt_adding_new_scan_000024_57BFF88": "Cloud accounts ", "content.dd_adding_new_scan_000025_EF8BB2F": "The number of cloud accounts that are included in this scan.", "content.dt_adding_new_scan_000027_D6D76A4": "Followed findings ", "content.dd_adding_new_scan_000028_C9241C3": "The number of findings that you have marked as Prioritized for this scan. Followed findings are the ones that you want to track and resolve.", "content.dt_adding_new_scan_00002B_57CF8D8": "Rule group ", "content.dd_adding_new_scan_00002C_60C5073": "The name of the rule group for which this scan belongs. Click the name to edit the rule group.", "content.dt_adding_new_scan_00002E_D4B4CA4": "Scan frequency ", "content.dd_adding_new_scan_00002F_AD380D1": "The frequency at which this scan is performed automatically.", "content.dt_adding_new_scan_000031_9DDA0B6": "Next scheduled scan ", "content.dd_adding_new_scan_000032_78306AF": "The date and time of the next scan that will be performed automatically based on the scan frequency.", "content.p_adding_new_scan_000017_3DEC3D6": "The Scans view shows the list of scans that you have configured for your cloud accounts. Each scan checks your cloud resources for compliance with the rules that you have selected for that scan.", "step.step_adding_new_scan_000014_7B78FE3": "Go to the Scans view.", "content.p_adding_new_scan_000036_CBE9B3B": "The Add new scan wizard opens.", "step.step_adding_new_scan_000033_C5A566D": "Select Add scan.", "content.dt_adding_new_scan_00003D_8E2E51F": "Name ", "content.dd_adding_new_scan_00003E_7710A03": "Enter the descriptive name for the new scan.", "content.dt_adding_new_scan_000040_978106B": "Organization ", "content.dd_adding_new_scan_000041_CF17A73": "Select the organization the scan is linked to.", "content.dt_adding_new_scan_000043_AFA2960": "Rule group ", "content.dd_adding_new_scan_000044_4EB13AA": "Select the rule group that contains rules and compliance frameworks that you want to scan.", "content.dt_adding_new_scan_000046_7D88229": "Scan frequency ", "content.dd_adding_new_scan_000047_B20C2D3": "Select when and how often the scan runs based on your security and operational needs. Scans can be set to run daily, weekly, or monthly at specific times.", "content.p_adding_new_scan_00003A_F05A3E7": "", "step.step_adding_new_scan_000038_09DF471": "On the Scan information page, choose the rule group and the scan frequency.", "content.p_adding_new_scan_00004B_FD72BD3": "The Cloud accounts page opens.", "step.step_adding_new_scan_000048_C2A402C": "Select Next.", "step.step_adding_new_scan_00004D_466EDA7": "Select cloud accounts which are scanned when the scan is run.", "content.p_adding_new_scan_000052_0518A72": "The Summary page opens.", "step.step_adding_new_scan_00004F_8A3BD17": "Select Next.", "step.step_adding_new_scan_000054_2E8114B": "Review the scan details on the summary page. Select Next when you are ready to finish.", "step.step_adding_new_scan_000057_311BF68": "Select Done.", "content.p_adding_new_scan_00005A_FAC18F9": "The scan runs automatically the next scheduled time.", "desc": [ "content.p_adding_new_scan_00000C_BDF3E20", { "steps.steps_adding_new_scan_00000D_C2BA2ED": [ "step.step_adding_new_scan_00000E_F4F6ACF", "step.step_adding_new_scan_000014_7B78FE3", "content.p_adding_new_scan_000017_3DEC3D6", { "dl.dl_adding_new_scan_000019_9CA0FD4": [ { "dlentry.dlentry_adding_new_scan_00001A_8C55939": [ "content.dt_adding_new_scan_00001B_CF4ED7F", "content.dd_adding_new_scan_00001C_89EA4C3" ] }, { "dlentry.dlentry_adding_new_scan_00001D_BF6AFBD": [ "content.dt_adding_new_scan_00001E_AC12B7F", "content.dd_adding_new_scan_00001F_C68A6DC" ] }, { "dlentry.dlentry_adding_new_scan_000020_5A770B3": [ "content.dt_adding_new_scan_000021_AE99795", "content.dd_adding_new_scan_000022_4BE5848" ] }, { "dlentry.dlentry_adding_new_scan_000023_ABBF740": [ "content.dt_adding_new_scan_000024_57BFF88", "content.dd_adding_new_scan_000025_EF8BB2F" ] }, { "dlentry.dlentry_adding_new_scan_000026_3B21F7B": [ "content.dt_adding_new_scan_000027_D6D76A4", "content.dd_adding_new_scan_000028_C9241C3" ] }, { "dlentry.dlentry_adding_new_scan_00002A_4E7F2A3": [ "content.dt_adding_new_scan_00002B_57CF8D8", "content.dd_adding_new_scan_00002C_60C5073" ] }, { "dlentry.dlentry_adding_new_scan_00002D_0C834A9": [ "content.dt_adding_new_scan_00002E_D4B4CA4", "content.dd_adding_new_scan_00002F_AD380D1" ] }, { "dlentry.dlentry_adding_new_scan_000030_8E21465": [ "content.dt_adding_new_scan_000031_9DDA0B6", "content.dd_adding_new_scan_000032_78306AF" ] } ] }, "step.step_adding_new_scan_000033_C5A566D", "content.p_adding_new_scan_000036_CBE9B3B", "step.step_adding_new_scan_000038_09DF471", "content.p_adding_new_scan_00003A_F05A3E7", { "dl.dl_adding_new_scan_00003B_6F67379": [ { "dlentry.dlentry_adding_new_scan_00003C_6AF2A19": [ "content.dt_adding_new_scan_00003D_8E2E51F", "content.dd_adding_new_scan_00003E_7710A03" ] }, { "dlentry.dlentry_adding_new_scan_00003F_A2E575D": [ "content.dt_adding_new_scan_000040_978106B", "content.dd_adding_new_scan_000041_CF17A73" ] }, { "dlentry.dlentry_adding_new_scan_000042_A679904": [ "content.dt_adding_new_scan_000043_AFA2960", "content.dd_adding_new_scan_000044_4EB13AA" ] }, { "dlentry.dlentry_adding_new_scan_000045_47197A6": [ "content.dt_adding_new_scan_000046_7D88229", "content.dd_adding_new_scan_000047_B20C2D3" ] } ] }, "step.step_adding_new_scan_000048_C2A402C", "content.p_adding_new_scan_00004B_FD72BD3", "step.step_adding_new_scan_00004D_466EDA7", "step.step_adding_new_scan_00004F_8A3BD17", "content.p_adding_new_scan_000052_0518A72", "step.step_adding_new_scan_000054_2E8114B", "step.step_adding_new_scan_000057_311BF68" ] }, "content.p_adding_new_scan_00005A_FAC18F9" ] }, "creating_rule_group-latest-en.json": { "title": "title_creating_rule_group_000001AF15", "title_creating_rule_group_000001AF15": "Create a new rule group", "shortdesc": "shortdesc_creating_rule_group_00000271F2", "shortdesc_creating_rule_group_00000271F2": "A rule group is a collection of rules that define the security posture for a specific need or purpose. You can use rule groups to customize the scope and criteria of your scans. ", "content.p_creating_rule_group_00000FBDF3": "You can add either predefined or custom rules to the new rule group. Predefined compliance framework rules cover different sets of rules, which you can also customize or you can create completely new custom rule groups by selecting the rules that you want to include from the Rule list.", "content.note_creating_rule_group_0000117693": "Tip: When you are creating a new rule group, we recommend that you group rules by similar characteristics.", "content.p_creating_rule_group_000012862C": "Create a rule group as follows:", "step.step_creating_rule_group_000014F998": "Go to the Scans view.", "content.p_creating_rule_group_00001ABC58": "The Rule group settings wizard opens.", "step.step_creating_rule_group_000017954B": "Select Add rule group.", "step.step_creating_rule_group_00001CFB80": "Type a descriptive name for the new rule group to identify it.", "content.p_creating_rule_group_000020B768": "Compliance frameworks provide guidelines and best practices for organizations to meet certain regulatory requirements: Toggling these frameworks on or off selects or deselects the rules that are associated with each compliance framework in your rule group.", "step.step_creating_rule_group_00001E4D94": "Select compliance frameworks and rules that apply to this rule group.", "step.step_creating_rule_group_000022BC0B": "Select Save to finish editing the rule group and save your changes.", "content.p_creating_rule_group_000025EBB0": "The new rule group is created and available for use in a scan.", "content.p_creating_rule_group_0000271DB2": "Add a new scan to take the new rule group into use.", "desc": [ "content.p_creating_rule_group_00000FBDF3", "content.note_creating_rule_group_0000117693", "content.p_creating_rule_group_000012862C", { "steps.steps_creating_rule_group_000013EC07": [ "step.step_creating_rule_group_000014F998", "step.step_creating_rule_group_000017954B", "content.p_creating_rule_group_00001ABC58", "step.step_creating_rule_group_00001CFB80", "step.step_creating_rule_group_00001E4D94", "content.p_creating_rule_group_000020B768", "step.step_creating_rule_group_000022BC0B" ] }, "content.p_creating_rule_group_000025EBB0", "content.p_creating_rule_group_0000271DB2" ] }, "running_scan-latest-en.json": { "title": "title_running_scan_000001_2C52FC7B", "title_running_scan_000001_2C52FC7B": "Scan cloud accounts", "shortdesc": "shortdesc_running_scan_000002_42E5A301", "shortdesc_running_scan_000002_42E5A301": "Typically all scans are run at scheduled times. To get scan results immediately, you can run a scan manually. ", "content.p_running_scan_00000D_BDC554A8": "Manual scans use the same scan configuration as the scheduled scans. Running a scan manually does not affect the schedule of the automatic scans. For example, if you run a manual scan on a weekly scan configuration, the next automatic scan will still run on the preferred day and time that you have scheduled.", "content.p_running_scan_00000E_301D75CA": "You can start multiple manual scans at the same time.", "step.step_running_scan_000010_9DFE05EE": "Under Security Configurations, select Scans > Cloud scans.", "content.p_running_scan_000018_98EB16E4": "The action panel opens.", "step.step_running_scan_000016_868AB89F": "Select the scan that you want to run.", "step.step_running_scan_000019_53ED9D22": "Select Start scan.", "content.p_running_scan_00001D_72CFD648": "You can see the status of all your manual and scheduled scans in the Cloud scans tab in the Scans view.", "desc": [ "content.p_running_scan_00000D_BDC554A8", "content.p_running_scan_00000E_301D75CA", { "steps.steps_running_scan_00000F_428CF7F8": [ "step.step_running_scan_000010_9DFE05EE", "step.step_running_scan_000016_868AB89F", "content.p_running_scan_000018_98EB16E4", "step.step_running_scan_000019_53ED9D22" ] }, "content.p_running_scan_00001D_72CFD648" ] }, "scanning_networks-latest-en.json": { "title": "title_scanning_networks_000001_852BA", "title_scanning_networks_000001_852BA": "Network asset scans", "shortdesc": "shortdesc_scanning_networks_000002_3AF24", "shortdesc_scanning_networks_000002_3AF24": "With the network assets, you get an understanding what an attacker sees when targeting your organization from the outside.", "content.p_scanning_networks_00000C_61AF5": "Network asset scans reveal your external attack surface: the internet-facing systems and services that an attacker can see when targeting your organization from outside.", "desc": [ "content.p_scanning_networks_00000C_61AF5" ] }, "finding_internet_facing_systems-latest-en.json": { "title": "title_finding_internet_facing__0E054", "title_finding_internet_facing__0E054": "Identify internet-facing systems", "shortdesc": "shortdesc_finding_internet_facing__00697", "shortdesc_finding_internet_facing__00697": "You can find your organization's internet-facing systems in Elements Exposure Management with internet discovery. ", "content.p_finding_internet_facing__0B95B": "The internet discover feature uses the Shodan.io search engine API, which employs crawling and port mapping to allow you to collect data on public systems. You can search for data based on location, top-level domain, pay-level domain, keywords, hostname, and IP address.", "content.p_finding_internet_facing__0D6D1": "You can add the discovered hosts to a scan group for network vulnerability scanning using either passive or active scanning. Passive scans check for vulnerabilities without connecting to the target host. Active scanning runs a regular system scan on the host. You can also add hosts to be scanned as part of External attack surface (EAS) scans.", "step.step_finding_internet_facing__00A8C": "Go to the Internet discovery page.", "step.step_finding_internet_facing__0E272": "Open Filter.", "subchoice.choice_finding_internet_facing__06B84": "Use country:<country code> to search for hosts in a specific country", "subchoice.choice_finding_internet_facing__034FF": "Use tld:<top-level domain> to search for hosts using a specific top-level domain", "subchoice.choice_finding_internet_facing__0923E": "Use pld:<domain> to search for hosts within a specific pay-level domain", "subchoice.choice_finding_internet_facing__0F7DB": "Use host:<search string> to search for hostnames that contain a specific string", "subchoice.choice_finding_internet_facing__03847": "Use keyword:<search string> to search for hosts that contain a specific keyword", "subchoice.choice_finding_internet_facing__09479": "Use ip:<IP address> to search for hosts that use a specific IP address.", "step.step_finding_internet_facing__0D136": "Enter your search query using the following format:", "step.step_finding_internet_facing__08CCB": "Click Apply.", "subchoice.choice_finding_internet_facing__00E17": "Select the hosts that you want to add and then select Add to scan group.", "subchoice.choice_finding_internet_facing__0D970": "Choose the type of scan that you want to run, select the scan groups for the hosts, and then select Add > Add to External assets. The host is now set to be scanned by the External Attack surface (EAS) scan.", "step.step_finding_internet_facing__07C72": "Do one of the following:", "desc": [ "content.p_finding_internet_facing__0B95B", "content.p_finding_internet_facing__0D6D1", { "steps.steps_finding_internet_facing__09534": [ "step.step_finding_internet_facing__00A8C", "step.step_finding_internet_facing__0E272", "step.step_finding_internet_facing__0D136", { "subchoices.choices_finding_internet_facing__02668": [ "subchoice.choice_finding_internet_facing__06B84", "subchoice.choice_finding_internet_facing__034FF", "subchoice.choice_finding_internet_facing__0923E", "subchoice.choice_finding_internet_facing__0F7DB", "subchoice.choice_finding_internet_facing__03847", "subchoice.choice_finding_internet_facing__09479" ] }, "step.step_finding_internet_facing__08CCB", "step.step_finding_internet_facing__07C72", { "subchoices.choices_finding_internet_facing__0E639": [ "subchoice.choice_finding_internet_facing__00E17" ] }, { "subchoices.choices_finding_internet_facing__0C420": [ "subchoice.choice_finding_internet_facing__0D970" ] } ] } ] }, "external_attack_surface_scans-latest-en.json": { "title": "title_external_attack_surface__0D036", "title_external_attack_surface__0D036": "External attack surface scans", "shortdesc": "shortdesc_external_attack_surface__012BB", "shortdesc_external_attack_surface__012BB": "External attack surface (EAS) scans monitor your internet-facing assets that have been onboarded for known EASM risks, such as the risk of sub-domain takeover. ", "content.p_external_attack_surface__08A52": "The initial scan starts within a few minutes after you add a seed assets that are known to be owned by you such as domain or subdomain names. Subsequent scans will follow on frequent basis.", "desc": [ "content.p_external_attack_surface__08A52" ] }, "cloud_scan_nodes-latest-en.json": { "title": "title_cloud_scan_nodes_000001_FFED61", "title_cloud_scan_nodes_000001_FFED61": "Cloud scan nodes", "shortdesc": "shortdesc_cloud_scan_nodes_000002_380942", "shortdesc_cloud_scan_nodes_000002_380942": "While Cloud Scan Nodes are part of device scans, they can also discover and scan externally visible network assets, that is, the external attack surface.", "content.p_cloud_scan_nodes_00000E_6973AD": "Cloud scan nodes are scan nodes hosted by WithSecure. In addition to taking part in device scans, they can discover and scan your externally visible network assets, that is, your external attack surface, without you having to deploy your own scan node.", "desc": [ "content.p_cloud_scan_nodes_00000E_6973AD" ], "related": [ "devices_without_agent-latest-en" ] }, "scanning_identities-latest-en.json": { "title": "title_scanning_identities_0000014702", "title_scanning_identities_0000014702": "Identity scans", "shortdesc": "shortdesc_scanning_identities_00000298CD", "shortdesc_scanning_identities_00000298CD": "Identity scans are essential for identifying risk of unauthorized access to sensitive information and systems.", "content.p_scanning_identities_00000FC3CA": "WithSecure Elements Exposure Management currently includes two types of identity scans which produce findings and recommendations:", "subchoice.choice_scanning_identities_0000149941": "Missing Multifactor Authentication (MFA)", "subchoice.choice_scanning_identities_000015D0EC": "Old password", "subchoice.choice_scanning_identities_0000162A0F": "EntraID risky users", "step.step_scanning_identities_000012262D": "EntraID scans", "subchoice.choice_scanning_identities_000019DDF7": "Leaked credentials", "step.step_scanning_identities_000017EE30": "Leaked scans", "content.p_scanning_identities_00001AC477": "In addition, the scans populate the Identities page under Environment in Elements Security Center with following the details:", "step.step_scanning_identities_00001FF098": "Personal information that is sourced from EntraID, including names, email addresses, and locations", "step.step_scanning_identities_0000209226": "Account details such as UPN (User Principal Name), time of the last password change, M365 license plan, and multi-factor authentication (MFA) status", "step.step_scanning_identities_00002188FD": "Security findings, including detected leaked credentials", "step.step_scanning_identities_000022C570": "Assessment of identity risks based on exposure findings from multiple sources", "step.step_scanning_identities_000023A6C5": "Last login device information with timestamp and device status, if you have onboarded the Elements Endpoint Protection solution", "desc": [ "content.p_scanning_identities_00000FC3CA", { "steps.ul_scanning_identities_000011896C": [ "step.step_scanning_identities_000012262D", { "subchoices.ul_scanning_identities_0000139173": [ "subchoice.choice_scanning_identities_0000149941", "subchoice.choice_scanning_identities_000015D0EC", "subchoice.choice_scanning_identities_0000162A0F" ] }, "step.step_scanning_identities_000017EE30", { "subchoices.ul_scanning_identities_0000189347": [ "subchoice.choice_scanning_identities_000019DDF7" ] } ] }, "content.p_scanning_identities_00001AC477", { "steps.ul_scanning_identities_00001E2959": [ "step.step_scanning_identities_00001FF098", "step.step_scanning_identities_0000209226", "step.step_scanning_identities_00002188FD", "step.step_scanning_identities_000022C570", "step.step_scanning_identities_000023A6C5" ] } ] }, "taking_xm_into_use-latest-en.json": { "title": "title_exposure_management_000001EA96", "title_exposure_management_000001EA96": "Managing exposures", "shortdesc": "shortdesc_exposure_management_000002C047", "shortdesc_exposure_management_000002C047": "The following describes the WithSecure Elements Exposure Management workflow.", "content.note_exposure_management_00000E3DBD": "Note: Descriptions for Exposure recommendations are now generated by a large language model (LLM). By default, these recommendations are generic and identical across all organizations, and no organization‑specific data is sent to the LLM. Organizations that choose to opt in to sharing their data with the LLM receive recommendation descriptions that are tailored to their specific environment rather than the generic LLM‑generated version.", "content.p_exposure_management_00000F5D01": "Managing exposures typically includes the following steps:", "step.step_exposure_management_00001112ED": "Review the dashboard at Home > Exposure. It highlights the areas that need your immediate attention.", "step.step_exposure_management_0000156D79": "Select the top recommendation from the Highest impact recommendations list to view the details.", "subchoice.choice_exposure_management_00001867B1": "Assets - affected resources", "subchoice.choice_exposure_management_0000197577": "Findings - identified issues", "subchoice.choice_exposure_management_00001A8977": "Attack path visualization - how an attack could progress", "subchoice.choice_exposure_management_00001B0A03": "Required actions - steps to address the issues", "step.step_exposure_management_000016F38F": "Review the recommendation details. Each recommendation shows the following:", "subchoice.choice_exposure_management_00001E1E02": "Look for patches: Search for and install the required updates through the Elements Security Center", "subchoice.choice_exposure_management_0000208664": "Elevate to WithSecure: Ask the WithSecure team for help", "subchoice.choice_exposure_management_00002331ED": "Copy instructions: Copy the steps and share them with the team handling the issue", "step.step_exposure_management_00001C8F14": "Recommendations contain remediation instructions that you can apply. When applicable, you can also:", "step.step_exposure_management_000024E80B": "After you apply the recommended actions and the related scan finishes, the dashboard shows the updated recommendation status and exposure score.", "desc": [ "content.note_exposure_management_00000E3DBD", "content.p_exposure_management_00000F5D01", { "steps.ol_exposure_management_0000106573": [ "step.step_exposure_management_00001112ED", "step.step_exposure_management_0000156D79", "step.step_exposure_management_000016F38F", { "subchoices.ul_exposure_management_0000178438": [ "subchoice.choice_exposure_management_00001867B1", "subchoice.choice_exposure_management_0000197577", "subchoice.choice_exposure_management_00001A8977", "subchoice.choice_exposure_management_00001B0A03" ] }, "step.step_exposure_management_00001C8F14", { "subchoices.ul_exposure_management_00001DD5BB": [ "subchoice.choice_exposure_management_00001E1E02", "subchoice.choice_exposure_management_0000208664", "subchoice.choice_exposure_management_00002331ED" ] }, "step.step_exposure_management_000024E80B" ] } ] }, "exposude_dashboard-latest-en.json": { "title": "title_exposure_dashboard_000001_3A16", "title_exposure_dashboard_000001_3A16": "Exposure dashboard", "shortdesc": "shortdesc_exposure_dashboard_000002_685F", "shortdesc_exposure_dashboard_000002_685F": "The Exposure Dashboard serves as the entry point for reviewing Exposure Management. It highlights areas that require immediate attention.", "content.p_exposure_dashboard_00000E_2347": "The Exposure Dashboard is composed of multiple sections, each presenting a different aspect of exposure data.", "content.title_exposure_dashboard_00000F_5497": "Coverage", "content.p_exposure_dashboard_000010_9BF2": "The Coverage widget displays the organization's threat exposure management status across various asset groups: Unmanaged Devices, Managed Devices, Network, Identities, AWS Cloud, and Azure Cloud. Each asset group includes a state indicator that reflects its onboarding and licensing status:", "step.step_exposure_dashboard_000019_C33D": "In use (Green): The asset group is fully onboarded to WithSecure Elements Exposure Management, and scans are actively running.", "step.step_exposure_dashboard_00001C_3C96": "Onboard now (Orange): The organization has the necessary licenses, but onboarding or configuration is incomplete. Click the area to see the relevant view to complete the setup.", "step.step_exposure_dashboard_00001E_3CE8": "No Subscription (Grey): The organization does not have the required licenses for this asset group. To proceed, contact your sales representative for licensing options.", "content.title_exposure_dashboard_000020_851B": "Organization exposure risk", "content.p_exposure_dashboard_000021_6804": "The Organization Exposure Risk Chart shows your company's exposure risk in comparison to the average exposure risk of other companies.", "content.p_exposure_dashboard_000022_594E": "The exposure risk of a company represents the relative business risk posed by the current state of the company's digital assets. The asset exposure risk score is calculated based on various factors, including attack path mapping, business context, and threat intelligence.", "content.p_exposure_dashboard_000023_6E75": "The average company exposure risk is calculated as the average of the exposure risks for all companies using WithSecure Elements Exposure Management. This average is updated regularly.", "content.title_exposure_dashboard_000025_C869": "Highest impact recommendations", "content.p_exposure_dashboard_000026_AF77": "The Highest Impact Recommendation List displays the top 5 active recommendations with the greatest potential for risk reduction. Our AI-powered recommendation engine analyzes your environment and prioritizes the most significant actions you can take to improve your security posture.", "content.p_exposure_dashboard_000027_126A": "To view the full list of recommendations, navigate to Environment > Exposure > Recommendations .", "content.title_exposure_dashboard_00002C_58B6": "Exposure risk by category", "content.p_exposure_dashboard_00002D_39D5": "The Exposure risk by category chart displays calculated exposure risk values segmented by asset type. This breakdown helps identify which asset categories contribute most significantly to overall risk for targeted remediation efforts.", "content.title_exposure_dashboard_00002F_C7A5": "Assets with the highest exposure risk", "content.p_exposure_dashboard_000030_F3DC": "The Assets with highest exposure risk list identifies the top five assets ranked by their calculated exposure risk. This list is intended to help administrators focus on the most vulnerable and significant assets within the environment.", "content.p_exposure_dashboard_000032_C2A7": "Each asset's exposure risk score is derived from a combination of the following contributing factors:", "step.step_exposure_dashboard_000034_256B": "Likelihood of attacker exploiting asset findings", "step.step_exposure_dashboard_000035_D895": "Likelihood of attacker exploiting findings to reach this asset", "step.step_exposure_dashboard_000036_0884": "Asset business context", "step.step_exposure_dashboard_000037_832B": "Lateral movement to critical assets in case the asset is compromised", "content.title_exposure_dashboard_000038_00C5": "Executive summary (beta)", "content.p_exposure_dashboard_000039_97F2": "The Executive summary (beta) feature allows you to generate a customer-facing report that summarizes organizational risk levels and key security activities performed during a selected reporting period. The report is exportable as a PDF and is designed to support transparency and demonstrate progress in risk management.", "content.p_exposure_dashboard_00003B_2F4C": "Report contains:", "step.step_exposure_dashboard_00003D_0259": "Text that you can edit to summarize the actions and their impact.", "step.step_exposure_dashboard_00003E_68FC": "Company exposure risk as a visual grade with reference to how you are doing compared to other companies using WithSecure XM.", "step.step_exposure_dashboard_00003F_A749": "Exposure risk shows company exposure risk trend line for the selected time period.", "step.step_exposure_dashboard_000040_81A7": "Recommendation fixed – number of recommendations with closed status (\"Done\", \"False positive\") per week (snapshot).", "step.step_exposure_dashboard_000041_FF17": "Exposure risk by asset type showing the exposure risk comparisons for the start and end of the reporting period split by asset type.", "desc": [ "content.p_exposure_dashboard_00000E_2347", "content.title_exposure_dashboard_00000F_5497", "content.p_exposure_dashboard_000010_9BF2", { "steps.ul_exposure_dashboard_000018_864A": [ "step.step_exposure_dashboard_000019_C33D", "step.step_exposure_dashboard_00001C_3C96", "step.step_exposure_dashboard_00001E_3CE8" ] }, "content.title_exposure_dashboard_000020_851B", "content.p_exposure_dashboard_000021_6804", "content.p_exposure_dashboard_000022_594E", "content.p_exposure_dashboard_000023_6E75", "content.title_exposure_dashboard_000025_C869", "content.p_exposure_dashboard_000026_AF77", "content.p_exposure_dashboard_000027_126A", "content.title_exposure_dashboard_00002C_58B6", "content.p_exposure_dashboard_00002D_39D5", "content.title_exposure_dashboard_00002F_C7A5", "content.p_exposure_dashboard_000030_F3DC", "content.p_exposure_dashboard_000032_C2A7", { "steps.ul_exposure_dashboard_000033_F1F5": [ "step.step_exposure_dashboard_000034_256B", "step.step_exposure_dashboard_000035_D895", "step.step_exposure_dashboard_000036_0884", "step.step_exposure_dashboard_000037_832B" ] }, "content.title_exposure_dashboard_000038_00C5", "content.p_exposure_dashboard_000039_97F2", "content.p_exposure_dashboard_00003B_2F4C", { "steps.ul_exposure_dashboard_00003C_9762": [ "step.step_exposure_dashboard_00003D_0259", "step.step_exposure_dashboard_00003E_68FC", "step.step_exposure_dashboard_00003F_A749", "step.step_exposure_dashboard_000040_81A7", "step.step_exposure_dashboard_000041_FF17" ] } ] }, "recommendations-latest-en.json": { "title": "title_recommendations_000001_99003D3", "title_recommendations_000001_99003D3": "Recommendations", "shortdesc": "shortdesc_recommendations_000002_3D6A8AD", "shortdesc_recommendations_000002_3D6A8AD": "An AI-powered engine analyzes threat intelligence, attack paths, business context, and security findings to generate specific remediation guidance.", "content.title_recommendations_00000E_7D68665": "Recommendation list", "content.p_recommendations_00000F_BFA3CBC": "The Recommendation list shows all active remediation recommendations for the organization. Recommendations are prioritized to support efficient risk reduction and resource allocation.", "content.p_recommendations_000011_3CCEF55": "Recommendations are sorted primarily by Remediation impact and secondarily by Remediation effort.", "content.title_recommendations_000014_4B1F409": "Recommendation details", "content.p_recommendations_000015_AFE7B37": "The Recommendation details page provides in-depth information about a specific recommendation, including remediation guidance, related findings, and available actions. It helps to understand the context of the recommendation and take appropriate action.", "content.p_recommendations_000017_62EBA46": "Remediation instructions are step-by-step guidance powered by Luminen, the WithSecure AI assistant, to help you address the issue directly.", "content.p_recommendations_00001A_0B5ECC5": "Findings and assets tables provide detailed lists of affected findings and associated assets. These tables help identify where action is required and may vary depending on the recommendation type.", "content.p_recommendations_00001B_D774ACD": "Attack path is a graphical representation of how an attacker could exploit the issue.", "step.step_recommendations_00001D_E432A7E": "Green node: Initial access point (for example, public-facing service or phishing email).", "step.step_recommendations_00001F_7813A76": "Red nodes: Vulnerabilities related to the current recommendation.", "step.step_recommendations_000021_3ED8941": "Selecting an asset node opens a pane with its related findings and its role in the attack path.", "content.note_recommendations_000022_DF45249": "Tip: Use the checkbox panel to toggle between different attack paths. Select Show details to view each step, including involved assets, tactics and techniques, and specific findings.", "content.p_recommendations_000024_3F59F0A": "The left sidebar provides additional tools and actions:", "content.note_recommendations_000029_8013259": "Note: Requires an Elements EPP license with WithSecure Software Updates (SWUP).", "step.step_recommendations_000026_0702FB3": "Look for Patches – Search for and install relevant updates directly via the Elements Security Center.", "content.note_recommendations_00002D_C28A239": "Note: This service is currently free of charge", "step.step_recommendations_00002A_2CA9FB6": "Elevate to WithSecure – Request assistance from the WithSecure team.", "subchoice.choice_recommendations_000031_EBB1DE1": "Open", "subchoice.choice_recommendations_000032_DA92BD1": "Acknowledged", "subchoice.choice_recommendations_000033_958E290": "Accepted Risk", "subchoice.choice_recommendations_000034_1DA4C94": "False Positive", "subchoice.choice_recommendations_000035_08FE46F": "Done", "step.step_recommendations_00002E_6FBB5E4": "Status – Change the recommendation status. Available statuses include:", "step.step_recommendations_000036_89E7464": "Notes – Add supplementary information such as ticket IDs, responsible personnel, or progress updates.", "desc": [ "content.title_recommendations_00000E_7D68665", "content.p_recommendations_00000F_BFA3CBC", "content.p_recommendations_000011_3CCEF55", "content.title_recommendations_000014_4B1F409", "content.p_recommendations_000015_AFE7B37", "content.p_recommendations_000017_62EBA46", "content.p_recommendations_00001A_0B5ECC5", "content.p_recommendations_00001B_D774ACD", { "steps.ul_recommendations_00001C_1ACF258": [ "step.step_recommendations_00001D_E432A7E", "step.step_recommendations_00001F_7813A76", "step.step_recommendations_000021_3ED8941" ] }, "content.note_recommendations_000022_DF45249", "content.p_recommendations_000024_3F59F0A", { "steps.ul_recommendations_000025_4B7C3E4": [ "step.step_recommendations_000026_0702FB3", "content.note_recommendations_000029_8013259", "step.step_recommendations_00002A_2CA9FB6", "content.note_recommendations_00002D_C28A239", "step.step_recommendations_00002E_6FBB5E4", { "subchoices.ul_recommendations_000030_3A39404": [ "subchoice.choice_recommendations_000031_EBB1DE1", "subchoice.choice_recommendations_000032_DA92BD1", "subchoice.choice_recommendations_000033_958E290", "subchoice.choice_recommendations_000034_1DA4C94", "subchoice.choice_recommendations_000035_08FE46F" ] }, "step.step_recommendations_000036_89E7464" ] } ] }, "recommendation_values-latest-en.json": { "title": "title_recommendation_values_00000D58", "title_recommendation_values_00000D58": "Recommendation impact, effort, and status", "shortdesc": "shortdesc_recommendation_values_00004B4A", "shortdesc_recommendation_values_00004B4A": "What the remediation impact, remediation effort, recommendation status, and status badge values mean for an Exposure Management recommendation.", "content.title_recommendation_values_0000FCEE": "Remediation impact", "content.p_recommendation_values_0000A0F1": "Remediation impact refers to the proportion of overall organizational risk that can be reduced by addressing specific security findings through the recommended actions. It quantifies how much risk mitigation is achievable if the recommendation is implemented.", "content.p_recommendation_values_0000D8D5": "This value is calculated using a combination of factors, including:", "choice.choice_recommendation_values_00000187": "the nature and severity of the findings,", "choice.choice_recommendation_values_000085CF": "the criticality of affected assets,", "choice.choice_recommendation_values_000009E8": "business context and operational importance,", "choice.choice_recommendation_values_00008089": "known attack paths, and", "choice.choice_recommendation_values_0000CE10": "relevant threat intelligence.", "content.p_recommendation_values_00006B99": "Based on this analysis, remediation impact is classified into four levels:", "step.step_recommendation_values_0000B31E": "Critical – Significantly reduces overall risk", "step.step_recommendation_values_00007E72": "High – Substantially reduces risk", "step.step_recommendation_values_00006495": "Low – Minimally reduces risk", "step.step_recommendation_values_0000824F": "Inconclusive – Not enough data to determine impact", "content.title_recommendation_values_0000BE4D": "Remediation effort", "content.p_recommendation_values_000047A9": "Remediation effort indicates the estimated level of work required to address all security findings associated with a specific recommendation. This helps administrators assess the resource commitment needed for implementation.", "content.p_recommendation_values_0000382F": "Remediation effort is categorized into three levels:", "step.step_recommendation_values_00007F5C": "Low – Minimal effort required", "step.step_recommendation_values_0000732A": "Medium – Moderate effort required", "step.step_recommendation_values_00006DCA": "High – Significant effort required", "content.title_recommendation_values_0000BBF8": "Recommendation status", "content.p_recommendation_values_00006E21": "Each recommendation is assigned either an Active Group or Closed Group status that reflects its current state in the remediation process.", "content.p_recommendation_values_000071EC": "Active Group indicates that the recommendation is still under consideration or action:", "choice.choice_recommendation_values_0000B703": "Open – The recommendation has been identified but not yet addressed.", "choice.choice_recommendation_values_00005C11": "Acknowledged – The issue has been recognized, but remediation has not started.", "choice.choice_recommendation_values_00004163": "Accepted Risk – The organization has chosen to accept the risk without remediation.", "content.p_recommendation_values_0000C7C0": "Closed Group indicates that the recommendation has been resolved or dismissed:", "step.step_recommendation_values_0000A736": "False Positive – The finding was determined to be incorrect or not a true risk.", "step.step_recommendation_values_00003FEF": "Done – The recommendation has been fully implemented and the issue resolved.", "content.p_recommendation_values_00005BF3": "By default, only Active recommendations are shown. To view Closed recommendations, adjust the filter settings in the recommendation list.", "content.title_recommendation_values_0000EA09": "Setting Recommendation Status manually", "content.p_recommendation_values_0000F5AD": "You can manually assign a status to each recommendation based on the assessment of the associated security findings. The available statuses and their intended use are as follows:", "step.step_recommendation_values_00009D76": "Open – Indicates that the recommendation requires attention and has not yet been addressed.", "step.step_recommendation_values_00004CEF": "Acknowledged – Indicates that the recommendation has been reviewed and remediation efforts are currently in progress.", "step.step_recommendation_values_000071FA": "Accepted Risk – Indicates that the related security findings have been reviewed and, although the findings are valid, there is a justified reason for not mitigating them. The risk is formally accepted.", "step.step_recommendation_values_0000E01C": "False Positive – Indicates that the related security findings have been reviewed and determined to be incorrect or they were triggered in error.", "content.title_recommendation_values_0000F974": "Recommendation Status badges", "content.p_recommendation_values_0000A893": "Status badges are small colored indicators displayed next to the status of a recommendation in the recommendation list. The following badge types are used:", "choice.choice_recommendation_values_0000C733": "Red – Indicates that the recommendation has been issued within the past 30 days and has a Remediation Impact greater than Inconclusive.", "choice.choice_recommendation_values_0000FEC1": "Orange – Indicates that the recommendation has transitioned from a Closed to an Active state due to an increase in its Remediation Impact from a lower tier to a higher tier.", "content.p_recommendation_values_000022B5": "This typically occurs when all significant security findings associated with the recommendation have been resolved, either manually or automatically, and the findings are no longer detected in subsequent scans.", "choice.choice_recommendation_values_0000F415": "Green – Indicates that the recommendation has transitioned from Active to Closed because its Remediation Impact has decreased to Inconclusive.", "content.note_recommendation_values_00000563": "Note: If you change the status of a recommendation that has a badge, the badge is removed.", "content.p_recommendation_values_0000C3A9": "", "content.note_recommendation_values_00005910": "Note: Red and orange badges appear only with recommendations that have a Open status and green badges appear only with recommendations that have a status of Done.", "desc": [ "content.title_recommendation_values_0000FCEE", "content.p_recommendation_values_0000A0F1", "content.p_recommendation_values_0000D8D5", { "choices.ul_recommendation_values_0000E861": [ "choice.choice_recommendation_values_00000187", "choice.choice_recommendation_values_000085CF", "choice.choice_recommendation_values_000009E8", "choice.choice_recommendation_values_00008089", "choice.choice_recommendation_values_0000CE10" ] }, "content.p_recommendation_values_00006B99", { "steps.ul_recommendation_values_00008F98": [ "step.step_recommendation_values_0000B31E", "step.step_recommendation_values_00007E72", "step.step_recommendation_values_00006495", "step.step_recommendation_values_0000824F" ] }, "content.title_recommendation_values_0000BE4D", "content.p_recommendation_values_000047A9", "content.p_recommendation_values_0000382F", { "steps.ul_recommendation_values_0000056A": [ "step.step_recommendation_values_00007F5C", "step.step_recommendation_values_0000732A", "step.step_recommendation_values_00006DCA" ] }, "content.title_recommendation_values_0000BBF8", "content.p_recommendation_values_00006E21", "content.p_recommendation_values_000071EC", { "choices.ul_recommendation_values_00001E42": [ "choice.choice_recommendation_values_0000B703", "choice.choice_recommendation_values_00005C11", "choice.choice_recommendation_values_00004163" ] }, "content.p_recommendation_values_0000C7C0", { "steps.ul_recommendation_values_00002C89": [ "step.step_recommendation_values_0000A736", "step.step_recommendation_values_00003FEF" ] }, "content.p_recommendation_values_00005BF3", "content.title_recommendation_values_0000EA09", "content.p_recommendation_values_0000F5AD", { "steps.ul_recommendation_values_00006D47": [ "step.step_recommendation_values_00009D76", "step.step_recommendation_values_00004CEF", "step.step_recommendation_values_000071FA", "step.step_recommendation_values_0000E01C" ] }, "content.title_recommendation_values_0000F974", "content.p_recommendation_values_0000A893", { "choices.ul_recommendation_values_00009D3B": [ "choice.choice_recommendation_values_0000C733", "choice.choice_recommendation_values_0000FEC1", "choice.choice_recommendation_values_0000F415", "content.p_recommendation_values_000022B5" ] }, "content.note_recommendation_values_00000563", "content.note_recommendation_values_00005910" ] }, "findings-latest-en.json": { "title": "title_findings_000001_6E48ABEE", "title_findings_000001_6E48ABEE": "Findings", "shortdesc": "shortdesc_findings_000002_259FA27F", "shortdesc_findings_000002_259FA27F": "A finding is a single instance of a vulnerability, misconfiguration, or other security issue that is relevant to the organization's attack surface or compliance posture.", "content.title_findings_000010_A7938D91": "Finding list", "content.p_findings_000011_52778A9A": "The Finding list shows all identified security findings across the organization. Each entry provides key details to help assess and prioritize remediation efforts.", "content.p_findings_000013_29B8AD4C": "The table includes the following information:", "step.step_findings_000015_0D2C682F": "Finding Type – The category of the issue", "step.step_findings_000017_B4ED7FBE": "Asset Type – The type of asset affected", "step.step_findings_000019_6904DC7E": "Affected Asset – The specific asset where the finding was detected", "step.step_findings_00001B_330991B1": "State – The current status of the finding", "step.step_findings_00001D_36184AB6": "Last Seen – The most recent date the finding was detected.", "content.title_findings_00001F_9E444761": "Finding details", "content.p_findings_000020_242DFA12": "The Finding details page provides comprehensive information about a specific security finding, along with available actions and contextual insights to support remediation.", "content.p_findings_000022_B0F35ECF": "The left sidebar offers additional tools and actions, when applicable:", "step.step_findings_000024_E6D35101": "View related recommendations – Shows a list of recommendations associated with this finding.", "step.step_findings_000026_BE0E82E5": "View assets with this finding – Lists all assets where this finding has been detected.", "subchoice.choice_findings_00002B_50D8406D": "Open", "subchoice.choice_findings_00002D_D7ED33F6": "Acknowledged", "subchoice.choice_findings_00002F_0FA1E1BB": "Accepted Risk", "subchoice.choice_findings_000031_FDA9E192": "False Positive", "subchoice.choice_findings_000033_DD72F589": "Done", "content.note_findings_000035_0B9BE4D3": "Note: Findings that are False Positive or Done are excluded from scoring calculations.", "step.step_findings_000028_BA4B6C8F": "Status – Allows you to update the status of the finding. Available statuses include:", "desc": [ "content.title_findings_000010_A7938D91", "content.p_findings_000011_52778A9A", "content.p_findings_000013_29B8AD4C", { "steps.ul_findings_000014_D4B5E52C": [ "step.step_findings_000015_0D2C682F", "step.step_findings_000017_B4ED7FBE", "step.step_findings_000019_6904DC7E", "step.step_findings_00001B_330991B1", "step.step_findings_00001D_36184AB6" ] }, "content.title_findings_00001F_9E444761", "content.p_findings_000020_242DFA12", "content.p_findings_000022_B0F35ECF", { "steps.ul_findings_000023_E160C526": [ "step.step_findings_000024_E6D35101", "step.step_findings_000026_BE0E82E5", "step.step_findings_000028_BA4B6C8F", { "subchoices.ul_findings_00002A_7B4ACBAE": [ "subchoice.choice_findings_00002B_50D8406D", "subchoice.choice_findings_00002D_D7ED33F6", "subchoice.choice_findings_00002F_0FA1E1BB", "subchoice.choice_findings_000031_FDA9E192", "subchoice.choice_findings_000033_DD72F589" ] }, "content.note_findings_000035_0B9BE4D3" ] } ] }, "management_for_ot-latest-en.json": { "title": "title_management_for_ot_000001_A7D47", "title_management_for_ot_000001_A7D47": "Exposure management for operational technology", "shortdesc": "shortdesc_management_for_ot_000002_24D7C", "shortdesc_management_for_ot_000002_24D7C": "The following describes a non-intrusive, repeatable process to reduce cybersecurity risks in operational technology (OT) environments without disrupting operations.", "content.p_management_for_ot_00000F_90729": "The workflow focuses on the most important risks first and combines identity hardening, attack path analysis, controlled scanning, and guided remediation. It is designed to be repeated on a regular cycle.", "content.dt_management_for_ot_000017_82D7B": "Prioritize identities", "content.dd_management_for_ot_000018_0E953": "Mark personnel with OT access as high-priority assets.", "content.dt_management_for_ot_00001A_C609B": "Connect frontline workers", "content.dd_management_for_ot_00001B_3F4C4": "Assign a frontline add-on license where applicable to bring them under management.", "content.dt_management_for_ot_00001D_680AF": "Limit access", "content.dd_management_for_ot_00001E_54962": "Make sure that these identities have only the permissions required for their role.", "content.p_management_for_ot_000013_63057": "Protect all user identities and accounts that can access OT systems:", "step.step_management_for_ot_000011_72940": "Secure identities with access to OT.", "content.dt_management_for_ot_000025_B26EC": "Prioritize connecting assets", "content.dd_management_for_ot_000026_36F8B": "Mark IT assets that connect to OT interface assets as high priority.", "content.dt_management_for_ot_000028_58CC8": "Simulate attack paths", "content.dd_management_for_ot_000029_1FE3E": "Run attack path simulations in the IT environment to verify whether OT interfaces can be reached.", "content.p_management_for_ot_000021_459BB": "Identify and remove ways an attacker could move from IT into OT:", "step.step_management_for_ot_00001F_DEA43": "Eliminate attack paths leading to OT.", "content.dt_management_for_ot_000030_86492": "Scan from outside", "content.dd_management_for_ot_000031_7B858": "Run a controlled external exposure scan to identify internet-facing services related to OT.", "content.p_management_for_ot_00002C_3F816": "Understand what is exposed to the internet and reduce unnecessary exposure:", "step.step_management_for_ot_00002A_B798C": "Secure the external attack surface of OT.", "content.dt_management_for_ot_000038_E8DAC": "Install a scan node", "content.dd_management_for_ot_000039_55002": "Place a scan node inside the OT environment to keep traffic local and controlled.", "content.dt_management_for_ot_00003B_DE2D1": "Catalog unmanaged devices", "content.dd_management_for_ot_00003C_80E0A": "Use an internal discovery scan to find devices that are not yet inventoried.", "content.dt_management_for_ot_00003E_47EFE": "Label and search", "content.dd_management_for_ot_00003F_CCB63": "Tag discovered devices for future reviews.", "content.dt_management_for_ot_000041_D8C38": "Assess for known weaknesses", "content.dd_management_for_ot_000042_DFBBC": "Run a system scan to check for known issues and configuration gaps.", "content.note_management_for_ot_000043_31C6A": "Note: The system scan is an extensive scan and it should be scheduled to minimize operational risk.
", "content.p_management_for_ot_000034_5C96D": "Use low-impact discovery and assessment to avoid disrupting operations:", "step.step_management_for_ot_000032_FF9A2": "Run controlled scans inside OT.", "content.dt_management_for_ot_00004A_40D57": "Review findings", "content.dd_management_for_ot_00004B_83CB5": "Use expert guidance or a human-in-the-loop assistant to understand the impact and urgency.", "content.dt_management_for_ot_00004D_65D28": "Escalate when needed", "content.dd_management_for_ot_00004E_92EBB": "Use WithSecure Elevate to get more instructions and detailed recommendations.", "content.p_management_for_ot_000046_8995B": "Address issues in a prioritized and safe way:", "step.step_management_for_ot_000044_528F4": "Take remediation actions.", "content.p_management_for_ot_000051_0CEB6": "Exposure management is an ongoing process. Revisit these steps on a defined schedule and after any changes in your OT or connected IT environments. Each cycle should reduce attack paths, improve identity hygiene, and tighten your external and internal exposure.", "content.note_management_for_ot_000052_3B81D": "Tip: Document your scan windows, stakeholder contacts, and change-control approvals to keep the process safe and predictable for operations.", "desc": [ "content.p_management_for_ot_00000F_90729", { "steps.steps_management_for_ot_000010_BB1D1": [ "step.step_management_for_ot_000011_72940", "content.p_management_for_ot_000013_63057", { "dl.dl_management_for_ot_000015_9A042": [ { "dlentry.dlentry_management_for_ot_000016_85282": [ "content.dt_management_for_ot_000017_82D7B", "content.dd_management_for_ot_000018_0E953" ] }, { "dlentry.dlentry_management_for_ot_000019_ECA77": [ "content.dt_management_for_ot_00001A_C609B", "content.dd_management_for_ot_00001B_3F4C4" ] }, { "dlentry.dlentry_management_for_ot_00001C_7A473": [ "content.dt_management_for_ot_00001D_680AF", "content.dd_management_for_ot_00001E_54962" ] } ] }, "step.step_management_for_ot_00001F_DEA43", "content.p_management_for_ot_000021_459BB", { "dl.dl_management_for_ot_000023_8885B": [ { "dlentry.dlentry_management_for_ot_000024_DB5CC": [ "content.dt_management_for_ot_000025_B26EC", "content.dd_management_for_ot_000026_36F8B" ] }, { "dlentry.dlentry_management_for_ot_000027_63F81": [ "content.dt_management_for_ot_000028_58CC8", "content.dd_management_for_ot_000029_1FE3E" ] } ] }, "step.step_management_for_ot_00002A_B798C", "content.p_management_for_ot_00002C_3F816", { "dl.dl_management_for_ot_00002E_C7936": [ { "dlentry.dlentry_management_for_ot_00002F_2A6A3": [ "content.dt_management_for_ot_000030_86492", "content.dd_management_for_ot_000031_7B858" ] } ] }, "step.step_management_for_ot_000032_FF9A2", "content.p_management_for_ot_000034_5C96D", { "dl.dl_management_for_ot_000036_FF8F9": [ { "dlentry.dlentry_management_for_ot_000037_C3C73": [ "content.dt_management_for_ot_000038_E8DAC", "content.dd_management_for_ot_000039_55002" ] }, { "dlentry.dlentry_management_for_ot_00003A_2E7FB": [ "content.dt_management_for_ot_00003B_DE2D1", "content.dd_management_for_ot_00003C_80E0A" ] }, { "dlentry.dlentry_management_for_ot_00003D_3BE5E": [ "content.dt_management_for_ot_00003E_47EFE", "content.dd_management_for_ot_00003F_CCB63" ] }, { "dlentry.dlentry_management_for_ot_000040_1F853": [ "content.dt_management_for_ot_000041_D8C38", "content.dd_management_for_ot_000042_DFBBC", "content.note_management_for_ot_000043_31C6A" ] } ] }, "step.step_management_for_ot_000044_528F4", "content.p_management_for_ot_000046_8995B", { "dl.dl_management_for_ot_000048_A7C77": [ { "dlentry.dlentry_management_for_ot_000049_8FD2B": [ "content.dt_management_for_ot_00004A_40D57", "content.dd_management_for_ot_00004B_83CB5" ] }, { "dlentry.dlentry_management_for_ot_00004C_B03E3": [ "content.dt_management_for_ot_00004D_65D28", "content.dd_management_for_ot_00004E_92EBB" ] } ] } ] }, "content.p_management_for_ot_000051_0CEB6", "content.note_management_for_ot_000052_3B81D" ] }, "reporting-latest-en.json": { "title": "title_reporting_000001_08664DEB", "title_reporting_000001_08664DEB": "Reporting", "shortdesc": "shortdesc_reporting_000002_B8ABD8FD", "shortdesc_reporting_000002_B8ABD8FD": "Reporting is a vital part of WithSecure Elements Security Center. You can generate customized reports that suit the needs of your manager, system administrator, or your third-party service provider. ", "content.p_reporting_00000F_0F587501": "You can start creating reports as soon as your scans are completed.", "content.p_reporting_000010_ABC27DED": "You can download the reports to your computer in the following formats:", "content.dt_reporting_000013_4812B789": "XML report grouped by hosts", "content.dd_reporting_000014_DA2E3F48": "Download the raw report data in XML format, organized by host.", "content.dt_reporting_000016_35AA59CC": "Excel report grouped by vulnerabilities", "content.dd_reporting_000017_88396E41": "Contains all the technical details of the hosts in scope and gives you the freedom to use the features available in Excel.", "content.dt_reporting_000019_106E3385": "Word report grouped by hosts", "content.dd_reporting_00001A_BF5A2B7F": "Contains all the technical details of the hosts in scope, organized by host. This is useful when your scope does not cover a large number of hosts.", "content.dt_reporting_00001C_71583C5A": "Word report grouped by vulnerabilities", "content.dd_reporting_00001D_B63A055B": "Contains all the technical details of the hosts in scope, organized by vulnerability type. This gives you a smaller report if the scope is very large.", "content.dt_reporting_00001F_C392DFB3": "Word report, executive summary", "content.dd_reporting_000020_8D31D430": "Designed to be a light-weight report with few pages even if the report scope covers thousands of hosts.", "content.dt_reporting_000022_9888EA33": "Word report, preliminary PCI", "content.dd_reporting_000023_B6DF63FA": "This report helps your organization to proactively identify issues that need to be addressed to ensure the compliance state of your systems with the Payment Card Industry (PCI) standards.", "content.p_reporting_000024_3C75A3CB": "Vulnerabilities detected during multiple scans can be combined into one report.", "content.p_reporting_000025_8EF01C62": "Exposure management reports can be scheduled to be sent via email periodically.", "content.p_reporting_000026_524DEF12": "Once the report is created, it is added to the list on the Reports > Email notification and report page. As soon as reports are run, they appear as report instances under the report. Only 10 latest report instances can be downloaded from the portal. This means that generating a new report removes the oldest report instance from the list.", "desc": [ "content.p_reporting_00000F_0F587501", "content.p_reporting_000010_ABC27DED", { "dl.dl_reporting_000011_F981EF97": [ { "dlentry.dlentry_reporting_000012_F398FB7F": [ "content.dt_reporting_000013_4812B789", "content.dd_reporting_000014_DA2E3F48" ] }, { "dlentry.dlentry_reporting_000015_48FBCA4D": [ "content.dt_reporting_000016_35AA59CC", "content.dd_reporting_000017_88396E41" ] }, { "dlentry.dlentry_reporting_000018_A3CC5330": [ "content.dt_reporting_000019_106E3385", "content.dd_reporting_00001A_BF5A2B7F" ] }, { "dlentry.dlentry_reporting_00001B_EFBF2894": [ "content.dt_reporting_00001C_71583C5A", "content.dd_reporting_00001D_B63A055B" ] }, { "dlentry.dlentry_reporting_00001E_195E5910": [ "content.dt_reporting_00001F_C392DFB3", "content.dd_reporting_000020_8D31D430" ] }, { "dlentry.dlentry_reporting_000021_CE4FC732": [ "content.dt_reporting_000022_9888EA33", "content.dd_reporting_000023_B6DF63FA" ] } ] }, "content.p_reporting_000024_3C75A3CB", "content.p_reporting_000025_8EF01C62", "content.p_reporting_000026_524DEF12" ] }, "creating_reports-latest-en.json": { "title": "title_creating_reports_000001_C58736", "title_creating_reports_000001_C58736": "Create vulnerability management reports", "shortdesc": "shortdesc_creating_reports_000002_0FD7D6", "shortdesc_creating_reports_000002_0FD7D6": "You can create your own report on the Reports page. ", "content.p_creating_reports_00000F_198DC9": "You can start creating reports once your scans are completed. If there are no scans run yet, you can start your first agent-based scan on the Environment > Devices > Device Discovery page, or in the WithSecure Elements Security Center, go to Security Configurations > Scans > Network scans start a network-based scan.", "content.p_creating_reports_000019_843EFA": "To create a report:", "content.p_creating_reports_00001E_A0E1EC": "The Reports page opens.", "step.step_creating_reports_00001B_D4575D": "From the left navigation pane, select Reports.", "content.p_creating_reports_000024_10EA95": "The Vulnerability report page opens.", "step.step_creating_reports_000020_256057": "Select the Email notification and report tab and then select Add vulnerability report.", "step.step_creating_reports_000026_6FF889": "Give the report a descriptive name (required) and a description. You can also select the language of the report.", "cell.choptionhd_creating_reports_00002D_8C0190": "Option", "cell.chdeschd_creating_reports_00002E_9CB435": "Description", "cell.choption_creating_reports_000030_3ED72B": "Report frequency", "cell.chdesc_creating_reports_000032_9CA4C1": "Based on the values you select, the time of the next report is shown beneath the report frequency fields.", "cell.choption_creating_reports_000034_6361D5": "Time Zone", "cell.chdesc_creating_reports_000036_8968E8": "The time zone comes from your profile. If you wish, you can change it for this report.", "cell.choption_creating_reports_000038_E3C8F4": "Email notifications (optional)", "choice.choice_creating_reports_00003C_311CF4": "Report format shared via email - Select the format of the report (.xml, .xlsx or .docx) and how the data is presented on the report.", "choice.choice_creating_reports_00003E_859733": "Link to the report expires after - Define when the link to the report in the email expires.", "cell.chdesc_creating_reports_00003A_BF44C2": "If you wish, you can specify that the report is automatically sent to email addresses of your choice. Separate the email addresses by commas.", "content.note_creating_reports_000041_891194": "Note: If you wish, you can later disable the schedule for the report by clicking its Scheduler column on the Reports > Email notification and report page.", "step.step_creating_reports_000028_3769FD": "If you want to define a schedule for the report, turn on Schedule and enter the following details:", "content.p_creating_reports_000049_C2947C": "The Scan scope page opens.", "step.step_creating_reports_000046_FF3C83": "Select Next.", "subchoice.choice_creating_reports_00004E_7F05B7": "Assets - Note that this is the primary choice if you mainly run agent-based scans. Not valid for network scans nor network scan groups.", "subchoice.choice_creating_reports_000050_3F0F77": "Network vulnerability scan groups", "subchoice.choice_creating_reports_000052_F623FF": "Tags", "subchoice.choice_creating_reports_000054_8F54B0": "Individual network vulnerability scans", "content.note_creating_reports_000057_9291E1": "Note: If you wish, you can also use tags assigned to the scan type or group to narrow down the scan scope of the report.", "step.step_creating_reports_00004B_1355E2": "Select the report scope from one of the following options (at least one scan or asset must be chosen):", "content.p_creating_reports_00005B_3A24EA": "The Include vulnerabilities with page opens.", "step.step_creating_reports_000058_837FD7": "Select Next.", "substep.substep_creating_reports_000060_E51FB6": "Select the statuses and severities of the vulnerabilities to be included in the report.", "substep.substep_creating_reports_000062_F5471E": "Under System scan vulnerabilities, select the categories and attack vector types of vulnerabilities to be included in the report.", "substep.substep_creating_reports_000065_6920CF": "Under Web scan vulnerabilities, select the categories of vulnerabilities to be included in the report.", "content.note_creating_reports_000069_1DCAC9": "Note: If you wish, you can also use tags to narrow down the vulnerabilities included in the report.", "step.step_creating_reports_00005D_5BF3BB": "Define the vulnerability scope of the report:", "content.p_creating_reports_00006D_2206F1": "The Report options page opens.", "step.step_creating_reports_00006A_9AC63F": "Select Next.", "content.p_creating_reports_000072_51C62A": "The report Summary page opens.", "step.step_creating_reports_00006F_B7F566": "Select what information is shown on the report and then select Next.", "content.note_creating_reports_000078_F2FECD": "Note: By default, the Generate a report now checkbox is ticked. This means that the new report is generated as soon as you have selected Finish. If you don't want to generate the report immediately but according to the schedule that you have defined, untick the Generate a report now checkbox before selecting Finish. However, if you later edit the report settings, you need to tick the Generate a report now checkbox if you want that the report is generated immediately.", "step.step_creating_reports_000074_9D7217": "Review the report details. You can still go back and make changes to the report settings by selecting Previous.", "step.step_creating_reports_00007E_F98230": "To complete the report wizard, select Finish.", "content.p_creating_reports_000081_20818F": "The report is added to the list of reports on the Reports > page. As soon as the report is run and complete, a snapshot of the current state of vulnerabilities, or report instance, is shown under the report on the Reports > Email notification and report page. If you wish, you can immediately download the report in desired format to your computer.", "desc": [ "content.p_creating_reports_00000F_198DC9", "content.p_creating_reports_000019_843EFA", { "steps.steps_creating_reports_00001A_7C36AC": [ "step.step_creating_reports_00001B_D4575D", "content.p_creating_reports_00001E_A0E1EC", "step.step_creating_reports_000020_256057", "content.p_creating_reports_000024_10EA95", "step.step_creating_reports_000026_6FF889", "step.step_creating_reports_000028_3769FD", { "table.table_creating_reports_00002B_E1E57C": [ { "thead.chhead_creating_reports_00002C_D052F9": [ "cell.choptionhd_creating_reports_00002D_8C0190", "cell.chdeschd_creating_reports_00002E_9CB435" ] }, { "row.chrow_creating_reports_00002F_2DEDA8": [ "cell.choption_creating_reports_000030_3ED72B", "cell.chdesc_creating_reports_000032_9CA4C1" ] }, { "row.chrow_creating_reports_000033_E5F120": [ "cell.choption_creating_reports_000034_6361D5", "cell.chdesc_creating_reports_000036_8968E8" ] }, { "row.chrow_creating_reports_000037_CA6E2C": [ "cell.choption_creating_reports_000038_E3C8F4", "cell.chdesc_creating_reports_00003A_BF44C2", { "choices.ul_creating_reports_00003B_9A1976": [ "choice.choice_creating_reports_00003C_311CF4", "choice.choice_creating_reports_00003E_859733" ] } ] } ] }, "content.note_creating_reports_000041_891194", "step.step_creating_reports_000046_FF3C83", "content.p_creating_reports_000049_C2947C", "step.step_creating_reports_00004B_1355E2", { "subchoices.choices_creating_reports_00004D_E85004": [ "subchoice.choice_creating_reports_00004E_7F05B7", "subchoice.choice_creating_reports_000050_3F0F77", "subchoice.choice_creating_reports_000052_F623FF", "subchoice.choice_creating_reports_000054_8F54B0" ] }, "content.note_creating_reports_000057_9291E1", "step.step_creating_reports_000058_837FD7", "content.p_creating_reports_00005B_3A24EA", "step.step_creating_reports_00005D_5BF3BB", { "substeps.substepsalpha_creatingalpha_reportsalpha_00005Falpha_3B91B7": [ "substep.substep_creating_reports_000060_E51FB6", "substep.substep_creating_reports_000062_F5471E", "substep.substep_creating_reports_000065_6920CF" ] }, "content.note_creating_reports_000069_1DCAC9", "step.step_creating_reports_00006A_9AC63F", "content.p_creating_reports_00006D_2206F1", "step.step_creating_reports_00006F_B7F566", "content.p_creating_reports_000072_51C62A", "step.step_creating_reports_000074_9D7217", "content.note_creating_reports_000078_F2FECD", "step.step_creating_reports_00007E_F98230" ] }, "content.p_creating_reports_000081_20818F" ] }, "task_addingwidgetstomyreport-latest-en.json": { "title": "title_adding_widgets_to_my_rep_0BC6F", "title_adding_widgets_to_my_rep_0BC6F": "Add widgets to My report", "shortdesc": "shortdesc_adding_widgets_to_my_rep_05261", "shortdesc_adding_widgets_to_my_rep_05261": "My report is a dashboard on the Reports page, made up of individual widgets that you choose and arrange yourself.", "content.p_adding_widgets_to_my_rep_0FDAE": "My report is different from the scheduled reports on the Email notification and report tab. Instead, you build your own dashboard from widgets, each one showing live data from a source that you choose.", "content.p_adding_widgets_to_my_rep_051FD": "To add a widget to My report:", "content.p_adding_widgets_to_my_rep_0079A": "The Reports page opens.", "step.step_adding_widgets_to_my_rep_0B625": "From the left navigation pane, select Reports.", "step.step_adding_widgets_to_my_rep_0E379": "Go to the My report tab.", "content.p_adding_widgets_to_my_rep_0091B": "The Add widget dialog opens.", "step.step_adding_widgets_to_my_rep_0A028": "Select Add widget.", "step.step_adding_widgets_to_my_rep_035D9": "Enter a name for the widget in the Name field.", "step.step_adding_widgets_to_my_rep_00935": "From Data source, select the data that the widget shows: Devices, Security Events, Broad Context Detections, Patch Management, or AI-generated Summaries.", "step.step_adding_widgets_to_my_rep_072F8": "Select Create.", "content.p_adding_widgets_to_my_rep_03C66": "The widget is added to My report.", "content.note_adding_widgets_to_my_rep_04CC5": "Note: To start from a named layout instead of adding widgets one by one, select New view template on the My report tab.", "desc": [ "content.p_adding_widgets_to_my_rep_0FDAE", "content.p_adding_widgets_to_my_rep_051FD", { "steps.steps_adding_widgets_to_my_rep_0AA42": [ "step.step_adding_widgets_to_my_rep_0B625", "content.p_adding_widgets_to_my_rep_0079A", "step.step_adding_widgets_to_my_rep_0E379", "step.step_adding_widgets_to_my_rep_0A028", "content.p_adding_widgets_to_my_rep_0091B", "step.step_adding_widgets_to_my_rep_035D9", "step.step_adding_widgets_to_my_rep_00935", "step.step_adding_widgets_to_my_rep_072F8" ] }, "content.p_adding_widgets_to_my_rep_03C66", "content.note_adding_widgets_to_my_rep_04CC5" ] }, "vulnerability_management_reporting-latest-en.json": { "title": "title_vulnerability_management_077F6", "title_vulnerability_management_077F6": "View vulnerability management reports", "shortdesc": "shortdesc_vulnerability_management_0C6F2", "shortdesc_vulnerability_management_0C6F2": "Instructions how to access and view vulnerability reports for completed scans in the Elements Security Center.", "step.step_vulnerability_management_0FE7D": "To view the vulnerability report for a single scan in the Elements Security Center, select Security Configurations > Scans > Network scans.", "content.note_vulnerability_management_0ECC0": "Note: If there are no scans run yet, you can start your first agent-based scan by going to Environment > Devices > Computers , selecting the desired devices, and then selecting Vulnerability Management scanEnable scanning from the action bar. Alternatively, you can go to Security Configurations > Scans > Network scans and start a network-based scan.", "step.step_vulnerability_management_0FA82": "Select the name of the desired completed scan.", "content.p_vulnerability_management_0832B": "Once the report is created, it is added as a report instance to the list on the Reports > Email notification and report page.", "content.note_vulnerability_management_089F1": "Note: Only 10 latest report instances can be downloaded from the portal. This means that generating a new report removes the oldest report instance from the list.", "desc": [ { "steps.steps_vulnerability_management_057F8": [ "step.step_vulnerability_management_0FE7D", "step.step_vulnerability_management_0FA82", "content.note_vulnerability_management_0ECC0" ] }, "content.p_vulnerability_management_0832B", "content.note_vulnerability_management_089F1" ] }, "creating_exposure_management_reports-latest-en.json": { "title": "title_creating_exposure_manage_0BE22", "title_creating_exposure_manage_0BE22": "Create exposure management reports", "shortdesc": "shortdesc_creating_exposure_manage_0E843", "shortdesc_creating_exposure_manage_0E843": "You can create exposure management reports on the Reports page. ", "content.p_creating_exposure_manage_01267": "The exposure management reports list recommended security actions that should be taken.", "content.p_creating_exposure_manage_0B4A2": "To create an exposure management report:", "content.p_creating_exposure_manage_0783C": "The Reports page opens.", "step.step_creating_exposure_manage_09E6C": "From the left navigation pane, select Reports.", "step.step_creating_exposure_manage_023A5": "Go to My Report.", "step.step_creating_exposure_manage_09729": "Open View template and select Exposure Management.", "step.step_creating_exposure_manage_0E55A": "To define a schedule for the report, open Email notification and report and select Add email report.", "step.step_creating_exposure_manage_0763C": "Give the report a name and set data source to My report.", "step.step_creating_exposure_manage_014A0": "Select Exposure Management as the template.", "step.step_creating_exposure_manage_00727": "Select Save.", "content.p_creating_exposure_manage_067FB": "The exposure management report is created and listed on the Reports page.", "desc": [ "content.p_creating_exposure_manage_01267", "content.p_creating_exposure_manage_0B4A2", { "steps.steps_creating_exposure_manage_0CC85": [ "step.step_creating_exposure_manage_09E6C", "content.p_creating_exposure_manage_0783C", "step.step_creating_exposure_manage_023A5", "step.step_creating_exposure_manage_09729", "step.step_creating_exposure_manage_0E55A", "step.step_creating_exposure_manage_0763C", "step.step_creating_exposure_manage_014A0", "step.step_creating_exposure_manage_00727" ] }, "content.p_creating_exposure_manage_067FB" ] }, "task_xmconfiguringemailnotifications-latest-en.json": { "title": "title_configuring_email_notifi_01A74", "title_configuring_email_notifi_01A74": "Configure email reports", "shortdesc": "shortdesc_configuring_email_notifi_0F37D", "shortdesc_configuring_email_notifi_0F37D": "You can configure automated email reports in the Email notification and report tab under Reports.", "content.p_configuring_email_notifi_02D07": "You must have a custom view for security events to use as a template.", "content.p_configuring_email_notifi_044CB": "After creating a custom view, you can add, configure, and schedule email reports and define their recipients.", "substep.substep_configuring_email_notifi_03240": "Select Reports on the left-hand navigation pane.", "substep.substep_configuring_email_notifi_0FE98": "On the Reports page, go to the Email notification and report tab.", "content.p_configuring_email_notifi_0979E": "The Add new email report pane opens.", "substep.substep_configuring_email_notifi_094C2": "Select Add email report.", "substep.substep_configuring_email_notifi_0AD26": "Enter a name for the report (for example, XM report).", "content.note_configuring_email_notifi_08279": "Note: If you select Security Events as the data source, the email sent to recipients includes a link to the Security Events view in Elements Security Center. If you select My report as the data source, the email sent to recipients includes a link to download the report as a PDF file. The content of the report is customized using the selected template.", "substep.substep_configuring_email_notifi_0B13F": "From the Data source drop-down menu, select Security Events.", "substep.substep_configuring_email_notifi_04512": "From the Template drop-down menu, select the template that you already created on the Security Events page (for example, XM recommendations ).", "substep.substep_configuring_email_notifi_0C190": "Choose your preferred language for the report.", "step.step_configuring_email_notifi_0C439": "To add a new email report and configure it, do the following:", "content.p_configuring_email_notifi_06776": "Reports for security events are sent every 10 minutes.", "content.note_configuring_email_notifi_010FC": "Note: The first report includes data from the last 24 hours; subsequent reports include data from the last ten minutes.", "substep.substep_configuring_email_notifi_07074": "By default, Send only when report has content under Schedule is turned on. Turn it off to receive reports even when there are no events.", "substep.substep_configuring_email_notifi_0F18B": "In Recipients, enter email addresses separated by commas.", "step.step_configuring_email_notifi_0F13A": "To configure schedule and recipients, do the following:", "step.step_configuring_email_notifi_0F956": "Select Save.", "content.p_configuring_email_notifi_0E405": "The scheduled email report is saved.", "desc": [ "content.p_configuring_email_notifi_02D07", "content.p_configuring_email_notifi_044CB", { "steps.steps_configuring_email_notifi_0C2E9": [ "step.step_configuring_email_notifi_0C439", { "substeps.substepsalpha_configuringalpha_emailalpha_notifialpha_083FE": [ "substep.substep_configuring_email_notifi_03240", "substep.substep_configuring_email_notifi_0FE98", "substep.substep_configuring_email_notifi_094C2", "content.p_configuring_email_notifi_0979E", "substep.substep_configuring_email_notifi_0AD26", "substep.substep_configuring_email_notifi_0B13F", "content.note_configuring_email_notifi_08279", "substep.substep_configuring_email_notifi_04512", "substep.substep_configuring_email_notifi_0C190" ] }, "step.step_configuring_email_notifi_0F13A", { "substeps.substepsalpha_configuringalpha_emailalpha_notifialpha_0C6C4": [ "substep.substep_configuring_email_notifi_07074", "content.p_configuring_email_notifi_06776", "content.note_configuring_email_notifi_010FC", "substep.substep_configuring_email_notifi_0F18B" ] }, "step.step_configuring_email_notifi_0F956" ] }, "content.p_configuring_email_notifi_0E405" ], "related": [ "task_creatingcustomviewforxmrecommendations-latest-en" ] }, "task_creatingcustomviewforxmrecommendations-latest-en.json": { "title": "title_creating_custom_view_for_05519", "title_creating_custom_view_for_05519": "Create a custom view for security events", "shortdesc": "shortdesc_creating_custom_view_for_08B13", "shortdesc_creating_custom_view_for_08B13": "You can create a custom view for XM recommendations security events to use as a template, for example, when configuring email reports.", "step.step_creating_custom_view_for_02942": "Under Events, select Security Events.", "step.step_creating_custom_view_for_07641": "Open the View drop-down menu and select XM recommendations.", "step.step_creating_custom_view_for_0D6E0": "Select Save as and enter a name for your custom view, for example, XM recommendations.", "content.p_creating_custom_view_for_09022": "The custom view appears under My views at the top of the list.", "step.step_creating_custom_view_for_020B5": "Select Save.", "desc": [ { "steps.steps_creating_custom_view_for_0664B": [ "step.step_creating_custom_view_for_02942", "step.step_creating_custom_view_for_07641", "step.step_creating_custom_view_for_0D6E0", "step.step_creating_custom_view_for_020B5", "content.p_creating_custom_view_for_09022" ] } ] }, "editing_the_settings_of_an_existing_report-latest-en.json": { "title": "title_editing_the_settings_of__091EA", "title_editing_the_settings_of__091EA": "Edit the settings of an existing report", "shortdesc": "shortdesc_editing_the_settings_of__0A556", "shortdesc_editing_the_settings_of__0A556": "You can edit the settings of an existing report. ", "content.p_editing_the_settings_of__07928": "To edit the report settings:", "content.p_editing_the_settings_of__0B739": "The Reports page opens.", "step.step_editing_the_settings_of__0735F": "From the left navigation pane, select Reports.", "step.step_editing_the_settings_of__0D026": "Select the report whose settings you want to edit.", "content.p_editing_the_settings_of__04018": "The Report details page opens.", "step.step_editing_the_settings_of__05764": "In the Actions column of the selected report, click the menu button and select Edit.", "step.step_editing_the_settings_of__0644C": "Follow the steps in the wizard and make the desired changes to the report settings until the Summary page opens.", "step.step_editing_the_settings_of__0682F": "If you want to run the report with the edited settings immediately, tick the Generate a report now checkbox and select Save and close.", "content.p_editing_the_settings_of__0B765": "The report settings have now been saved.", "content.p_editing_the_settings_of__0523B": "Next time when the report is run, the report instance is based on the new settings. The report instances with the old settings will still remain downloadable on the Reports > Email notification and report page until they are gradually replaced by the new report instances as each report can have up to 10 instances at a time.", "desc": [ "content.p_editing_the_settings_of__07928", { "steps.steps_editing_the_settings_of__00494": [ "step.step_editing_the_settings_of__0735F", "content.p_editing_the_settings_of__0B739", "step.step_editing_the_settings_of__0D026", "step.step_editing_the_settings_of__05764", "content.p_editing_the_settings_of__04018", "step.step_editing_the_settings_of__0644C", "step.step_editing_the_settings_of__0682F" ] }, "content.p_editing_the_settings_of__0B765", "content.p_editing_the_settings_of__0523B" ] }, "cloning_an_existing_report-latest-en.json": { "title": "title_cloning_an_existing_repo_01636", "title_cloning_an_existing_repo_01636": "Clone an existing report", "shortdesc": "shortdesc_cloning_an_existing_repo_0BB0E", "shortdesc_cloning_an_existing_repo_0BB0E": "You can clone a report to reuse the settings of an existing report. ", "content.note_cloning_an_existing_repo_0474F": "Note: The report instances, however, are not cloned.", "content.p_cloning_an_existing_repo_0705D": "To clone an existing report:", "content.p_cloning_an_existing_repo_0BCCB": "The Reports page opens.", "step.step_cloning_an_existing_repo_0B372": "From the left navigation pane, select Reports.", "step.step_cloning_an_existing_repo_02E07": "Select the report that you want to clone.", "content.p_cloning_an_existing_repo_08F20": "The report is added to the list of reports on the Reports page.", "step.step_cloning_an_existing_repo_06655": "In the Actions column of the selected report, click the menu button and select Clone.", "step.step_cloning_an_existing_repo_06E53": "If you want to make changes to the settings of this report, click the menu button in the Actions column and select Edit.", "content.p_cloning_an_existing_repo_00233": "A copy of the report is created and listed on the Reports page.", "desc": [ "content.note_cloning_an_existing_repo_0474F", "content.p_cloning_an_existing_repo_0705D", { "steps.steps_cloning_an_existing_repo_0EFF2": [ "step.step_cloning_an_existing_repo_0B372", "content.p_cloning_an_existing_repo_0BCCB", "step.step_cloning_an_existing_repo_02E07", "step.step_cloning_an_existing_repo_06655", "content.p_cloning_an_existing_repo_08F20", "step.step_cloning_an_existing_repo_06E53" ] }, "content.p_cloning_an_existing_repo_00233" ] }, "updating_an_existing_report-latest-en.json": { "title": "title_updating_an_existing_rep_09406", "title_updating_an_existing_rep_09406": "Update contents of existing reports", "shortdesc": "shortdesc_updating_an_existing_rep_05269", "shortdesc_updating_an_existing_rep_05269": "You can refresh the contents of existing reports to reflect the current state of vulnerabilities. ", "content.p_updating_an_existing_rep_09D31": "To update existing reports:", "content.p_updating_an_existing_rep_0DCF1": "The Reports page opens.", "step.step_updating_an_existing_rep_068DC": "From the left navigation pane, select Reports.", "content.p_updating_an_existing_rep_0007D": "The action bar opens.", "step.step_updating_an_existing_rep_07E67": "Select the report(s) whose data you want to refresh.", "step.step_updating_an_existing_rep_04923": "Select Generate a report now, and to confirm the action, select Generate a report now.", "content.p_updating_an_existing_rep_00E9D": "The data of the selected report or reports are refreshed to reflect the current state of vulnerabilities.", "desc": [ "content.p_updating_an_existing_rep_09D31", { "steps.steps_updating_an_existing_rep_0511C": [ "step.step_updating_an_existing_rep_068DC", "content.p_updating_an_existing_rep_0DCF1", "step.step_updating_an_existing_rep_07E67", "content.p_updating_an_existing_rep_0007D", "step.step_updating_an_existing_rep_04923" ] }, "content.p_updating_an_existing_rep_00E9D" ] }, "viewing_executive_summary-latest-en.json": { "title": "title_xm_viewing_executive_sum_022D7", "title_xm_viewing_executive_sum_022D7": "View Executive summary", "shortdesc": "shortdesc_xm_viewing_executive_sum_0BACB", "shortdesc_xm_viewing_executive_sum_0BACB": "In the Executive Summary page, you can see the exposure grade of your company and the global distribution of exposure grades in all companies that use Exposure Management.", "content.p_xm_viewing_executive_sum_0E080": "The page shows also shows the exposure risk level of your company, the exposure risk by asset type, and the number of fixed made to comply with the recommendations.", "content.p_xm_viewing_executive_sum_000F3": "To view and download the executive summary:", "content.p_xm_viewing_executive_sum_00D0B": "The Executive Summary page opens showing your company's exposure grade and risk level.", "step.step_xm_viewing_executive_sum_0964F": "Under Home > Exposure , select Executive Summary.", "step.step_xm_viewing_executive_sum_0B872": "Use the calendar at the top of the page to select the time period for which you want to view data.", "step.step_xm_viewing_executive_sum_0E725": "Select Download PDF report to save the displayed data as a PDF file on your device.", "desc": [ "content.p_xm_viewing_executive_sum_0E080", "content.p_xm_viewing_executive_sum_000F3", { "steps.steps_xm_viewing_executive_sum_03BD3": [ "step.step_xm_viewing_executive_sum_0964F", "content.p_xm_viewing_executive_sum_00D0B", "step.step_xm_viewing_executive_sum_0B872", "step.step_xm_viewing_executive_sum_0E725" ] } ] }, "deleting_reports-2-latest-en.json": { "title": "title_deleting_reports_000001_4D8389", "title_deleting_reports_000001_4D8389": "Delete reports", "shortdesc": "shortdesc_deleting_reports_000002_0EA7D3", "shortdesc_deleting_reports_000002_0EA7D3": "You can delete reports that you don't need any more. ", "content.p_deleting_reports_00000D_E8CDCE": "To delete reports:", "content.p_deleting_reports_000012_21723F": "The Reports page opens.", "step.step_deleting_reports_00000F_FA9D10": "From the left navigation pane, select Reports.", "content.p_deleting_reports_000016_7D6CB7": "The action bar opens.", "step.step_deleting_reports_000014_717BCB": "Select reports that you want to delete.", "step.step_deleting_reports_000017_2CECBC": "Select Delete, and to confirm the action, select Remove.", "content.p_deleting_reports_00001B_EDA93D": "The selected report or reports disappear from the Reports > Email notification and report page.", "desc": [ "content.p_deleting_reports_00000D_E8CDCE", { "steps.steps_deleting_reports_00000E_9FE21D": [ "step.step_deleting_reports_00000F_FA9D10", "content.p_deleting_reports_000012_21723F", "step.step_deleting_reports_000014_717BCB", "content.p_deleting_reports_000016_7D6CB7", "step.step_deleting_reports_000017_2CECBC" ] }, "content.p_deleting_reports_00001B_EDA93D" ] }, "management-latest-en.json": { "title": "title_management_000001_B8B5358B", "title_management_000001_B8B5358B": "General management", "shortdesc": "shortdesc_management_000002_C5E91400", "shortdesc_management_000002_C5E91400": "Managing your assets, scan nodes, cloud accounts, users, and product settings in Elements Exposure Management. ", "content.p_management_000010_32C0ED06": "After you onboard and scan your environment, you manage it from Elements Security Center. Management covers your assets, scan nodes, cloud accounts, the users who can access Elements Exposure Management, and the product settings.", "desc": [ "content.p_management_000010_32C0ED06" ] }, "asset_management-latest-en.json": { "title": "title_asset_management_000001_750EEF", "title_asset_management_000001_750EEF": "Device assets", "shortdesc": "shortdesc_asset_management_000002_BFE156", "shortdesc_asset_management_000002_BFE156": "Elements Exposure Management keeps an inventory of all the assets, such as servers, computers, printers, routers, IoT devices, etc. within your network environment, discovered by Elements Exposure Management during the Discovery scan or a network as well as agent-based vulnerability scan. ", "content.p_asset_management_000015_92917F": "The Discovery scan maps your whole network and all its assets.", "content.p_asset_management_000016_F7BD2C": "You get the full benefit from the assets inventory with Authenticated scanning; the non-authenticated scans will provide only a limited set of information about each asset.", "content.p_asset_management_000017_42B945": "On the Environment > Devices > Vulnerability assets page, you can:", "step.step_asset_management_00001D_DEB5C9": "view the complete list of assets discovered in your environment;", "step.step_asset_management_00001E_45BCA8": "filter the list of assets to see the asset data that is most relevant to you;", "step.step_asset_management_00001F_D5C84C": "see detailed information about individual assets, such as the device's hardware details and the software installed on it;", "step.step_asset_management_000020_CB5D38": "assign custom tags and criticality rating for each asset for improved prioritization of vulnerabilities.", "content.p_asset_management_000021_F0FF62": "To view the data of an individual asset, go to the Environment > Devices > Vulnerability assets page and click the asset name.", "desc": [ "content.p_asset_management_000015_92917F", "content.p_asset_management_000016_F7BD2C", "content.p_asset_management_000017_42B945", { "steps.ul_asset_management_00001C_A01568": [ "step.step_asset_management_00001D_DEB5C9", "step.step_asset_management_00001E_45BCA8", "step.step_asset_management_00001F_D5C84C", "step.step_asset_management_000020_CB5D38" ] }, "content.p_asset_management_000021_F0FF62" ] }, "viewing_assets-latest-en.json": { "title": "title_viewing_assets_000001_6DB9E793", "title_viewing_assets_000001_6DB9E793": "View device assets", "shortdesc": "shortdesc_viewing_assets_000002_089B5356", "shortdesc_viewing_assets_000002_089B5356": "There are several ways to view the assets in your network, and you can use filters to see the data that is most relevant to you. ", "content.p_viewing_assets_000011_A8964D4F": "On the Environment > Devices > Vulnerability assets page, you can view the data in the following two modes:", "step.step_viewing_assets_000017_BF3DB647": "List view - Shows all assets in a flat list which can be sorted by various criteria, such as asset name, vulnerability, criticality, etc.", "content.note_viewing_assets_00001B_461BD897": "Note: You can group assets by manually-added asset tags only.", "step.step_viewing_assets_000019_621591F4": "Grouped by - Allows you to group the assets by one of the following attributes: Department, Business owner, Hardware type, Operating system, Country, or Asset tags.", "content.p_viewing_assets_00001C_EF45676A": "The standard Elements Exposure Management filtering can be used to filter the assets. Click the chevron next to Filter to see the available options for filtering the assets. For example, the Asset source option allows you to filter the assets to see only the assets which have been scanned by the authenticated network vulnerability scan.", "content.p_viewing_assets_000020_8E59AB41": "To view the data of an individual asset:", "content.p_viewing_assets_000028_5CA4D35A": "The Asset details page opens, with all available information about the asset.", "step.step_viewing_assets_000022_35D7123F": "On the Environment > Devices > Vulnerability assets page, click the asset name.", "step.step_viewing_assets_00002A_EABEBA4F": "If you want to manually edit or add data to the asset details, the various attributes assigned to the asset in the Description tab, or the data in the Notes tab, click the pen icon in the top-right corner of the respective tab, edit or add the desired data and select Save.", "content.note_viewing_assets_000030_668705AA": "Note: To see the latest network vulnerability scan report for the asset in question, click the link icon next to the vulnerability ratings.", "desc": [ "content.p_viewing_assets_000011_A8964D4F", { "steps.ul_viewing_assets_000016_5E45BB17": [ "step.step_viewing_assets_000017_BF3DB647", "step.step_viewing_assets_000019_621591F4", "content.note_viewing_assets_00001B_461BD897" ] }, "content.p_viewing_assets_00001C_EF45676A", "content.p_viewing_assets_000020_8E59AB41", { "steps.steps_viewing_assets_000021_14383E18": [ "step.step_viewing_assets_000022_35D7123F", "content.p_viewing_assets_000028_5CA4D35A", "step.step_viewing_assets_00002A_EABEBA4F" ] }, "content.note_viewing_assets_000030_668705AA" ] }, "tracking_asset_changes-latest-en.json": { "title": "title_tracking_asset_changes_000EE91", "title_tracking_asset_changes_000EE91": "Tracking asset changes", "shortdesc": "shortdesc_tracking_asset_changes_0008FAD", "shortdesc_tracking_asset_changes_0008FAD": "Assets can be filtered also by the following attributes: First discovered, Last seen, Last scanned and Last updated. ", "content.p_tracking_asset_changes_0004EF1": "Use these attributes together with scheduled Discovery scans to see the changes, if any, that have taken place in an asset in your network.", "content.title_tracking_asset_changes_000188F": "Asset change tracking attributes", "cell.entry_tracking_asset_changes_000D251": "Attribute", "cell.entry_tracking_asset_changes_000469F": "Meaning", "cell.entry_tracking_asset_changes_00046E4": "First discovered", "cell.entry_tracking_asset_changes_0007A9A": "Indicates when the asset in question was detected by the system for the very first time. The source of information can be any type of scan, including a Discovery scan.", "cell.entry_tracking_asset_changes_000DD25": "Last seen", "cell.entry_tracking_asset_changes_00026EE": "Indicates when the asset in question was last seen. The source of information can be any type of scan, including a Discovery scan.", "cell.entry_tracking_asset_changes_0008348": "Last scanned", "cell.entry_tracking_asset_changes_00040EE": "Indicates when the asset in question was last scanned for vulnerabilities.", "cell.entry_tracking_asset_changes_000A53A": "Last updated", "cell.entry_tracking_asset_changes_00079EC": "Indicates when the information about the asset in question was last updated in Elements Exposure Management. This takes place once the system detects new information about the asset and the reliability of the information source is high enough. For example, information gathered during the port scan of the asset is less reliable than that collected during an authenticated network scan.", "desc": [ "content.p_tracking_asset_changes_0004EF1", "content.title_tracking_asset_changes_000188F", { "table.table_asset-change-tracking-attrCFC6": [ { "thead.thead_tracking_asset_changes_00018D5": [ "cell.entry_tracking_asset_changes_000D251", "cell.entry_tracking_asset_changes_000469F" ] }, { "row.row_tracking_asset_changes_0006506": [ "cell.entry_tracking_asset_changes_00046E4", "cell.entry_tracking_asset_changes_0007A9A" ] }, { "row.row_tracking_asset_changes_0000ED5": [ "cell.entry_tracking_asset_changes_000DD25", "cell.entry_tracking_asset_changes_00026EE" ] }, { "row.row_tracking_asset_changes_000CF19": [ "cell.entry_tracking_asset_changes_0008348", "cell.entry_tracking_asset_changes_00040EE" ] }, { "row.row_tracking_asset_changes_0006D7C": [ "cell.entry_tracking_asset_changes_000A53A", "cell.entry_tracking_asset_changes_00079EC" ] } ] } ] }, "managing_asset_attributes-latest-en.json": { "title": "title_managing_asset_attribute_02F5C", "title_managing_asset_attribute_02F5C": "Manage device asset attributes", "shortdesc": "shortdesc_managing_asset_attribute_0BD0C", "shortdesc_managing_asset_attribute_0BD0C": "On the Environment > Devices > Vulnerability assets page, you can manually supplement the asset data with various attributes. ", "content.p_managing_asset_attribute_078D2": "Once an asset is discovered by a scan, all available data about the asset will be obtained automatically. Later on, you can manually edit the data or add more details to the asset.", "content.p_managing_asset_attribute_064FE": "To manage attributes related to an asset:", "content.p_managing_asset_attribute_032A1": "The action bar appears at the bottom of the page.", "step.step_managing_asset_attribute_07E1F": "On the Environment > Devices > Vulnerability assets page, select the checkbox of the asset (or assets) whose data you want to manage.", "step.step_managing_asset_attribute_0168B": "Select Manage attributes from the action bar.", "content.p_managing_asset_attribute_087BF": "Depending on the type of attribute, a field or set of fields is displayed.", "step.step_managing_asset_attribute_0C1A2": "From the drop-down, select the attribute you want to manage.", "step.step_managing_asset_attribute_09012": "Enter the data you want to add.", "step.step_managing_asset_attribute_0438D": "Select Save.", "content.p_managing_asset_attribute_06F30": "The data can now be seen in the asset details in the Description tab where the data can also be edited.", "desc": [ "content.p_managing_asset_attribute_078D2", "content.p_managing_asset_attribute_064FE", { "steps.steps_managing_asset_attribute_0CBF9": [ "step.step_managing_asset_attribute_07E1F", "content.p_managing_asset_attribute_032A1", "step.step_managing_asset_attribute_0168B", "step.step_managing_asset_attribute_0C1A2", "content.p_managing_asset_attribute_087BF", "step.step_managing_asset_attribute_09012", "step.step_managing_asset_attribute_0438D" ] }, "content.p_managing_asset_attribute_06F30" ] }, "managing_asset_tags-latest-en.json": { "title": "title_managing_asset_tags_000001A7C6", "title_managing_asset_tags_000001A7C6": "Manage asset tags", "shortdesc": "shortdesc_managing_asset_tags_0000029958", "shortdesc_managing_asset_tags_0000029958": "On the Environment > Devices > Vulnerability assets page, you can add tags to assets and remove tags from them. ", "content.p_managing_asset_tags_0000138B2B": "To add or remove tags related to an asset or assets:", "content.p_managing_asset_tags_00001B0A24": "The action bar appears at the bottom of the page.", "step.step_managing_asset_tags_000015ECC4": "On the Environment > Devices > Vulnerability assets page, select the checkbox of the asset (or assets) whose tags you want to manage.", "step.step_managing_asset_tags_00001CF610": "Select Manage tags from the action bar.", "substep.substep_managing_asset_tags_00002230D2": "Select Add the following tags to assets and select Next.", "substep.substep_managing_asset_tags_000026085B": "Click the field and either select an existing tag from the tags list displayed or enter a new tag to add it to the assets and select Add.", "step.step_managing_asset_tags_00001FD958": "If you want to add tags to the assets:", "substep.substep_managing_asset_tags_00002CCA5C": "Select Remove the following tags from assets and select Next.", "substep.substep_managing_asset_tags_0000308DE9": "Click the field and, from the tags list displayed, select the tag that you want to remove from the assets, and then select Remove.", "step.step_managing_asset_tags_0000298F0C": "If you want to remove tags from the assets:", "content.note_managing_asset_tags_0000346C65": "Note: You can add tags to an individual asset also through the Asset details page.", "desc": [ "content.p_managing_asset_tags_0000138B2B", { "steps.steps_managing_asset_tags_000014DA1C": [ "step.step_managing_asset_tags_000015ECC4", "content.p_managing_asset_tags_00001B0A24", "step.step_managing_asset_tags_00001CF610", "step.step_managing_asset_tags_00001FD958", { "substeps.substepsalpha_managingalpha_assetalpha_tagsalpha_0000211512": [ "substep.substep_managing_asset_tags_00002230D2", "substep.substep_managing_asset_tags_000026085B" ] }, "step.step_managing_asset_tags_0000298F0C", { "substeps.substepsalpha_managingalpha_assetalpha_tagsalpha_00002BEAC4": [ "substep.substep_managing_asset_tags_00002CCA5C", "substep.substep_managing_asset_tags_0000308DE9" ] } ] }, "content.note_managing_asset_tags_0000346C65" ] }, "updating_notes-latest-en.json": { "title": "title_updating_notes_000001_640EEC28", "title_updating_notes_000001_640EEC28": "Update notes", "shortdesc": "shortdesc_updating_notes_000002_C44DBC28", "shortdesc_updating_notes_000002_C44DBC28": "If you wish, you can add notes to the selected assets. ", "content.note_updating_notes_00000F_24EC3A7C": "Note: When you update notes, the existing notes already assigned to the selected assets will be overwritten.", "content.p_updating_notes_000010_075A860D": "There are two ways you can add notes to an asset:", "step.step_updating_notes_000012_05D666BF": "On the Asset details page of the selected asset, select the Notes tab and click the pen icon in the top-right corner of the tab, enter the desired data and select Save.", "step.step_updating_notes_000016_3E26153C": "On the Environment > Devices > Vulnerability assets page:", "content.p_updating_notes_00001E_435175F5": "The action bar appears at the bottom of the page.", "step.step_updating_notes_00001C_D27228D5": "Select the checkbox of the asset (or assets) whose notes you want to update.", "step.step_updating_notes_00001F_1077F35E": "Select Update notes from the action bar.", "step.step_updating_notes_000022_17B0AB06": "Enter the data you want to add to notes and select Save.", "content.p_updating_notes_000025_58B86794": "You can view the notes in the Notes tab in the Asset details page.", "desc": [ "content.note_updating_notes_00000F_24EC3A7C", "content.p_updating_notes_000010_075A860D", { "steps.ul_updating_notes_000011_41246177": [ "step.step_updating_notes_000012_05D666BF", "step.step_updating_notes_000016_3E26153C" ] }, { "steps.steps_updating_notes_00001B_048BCDB6": [ "step.step_updating_notes_00001C_D27228D5", "content.p_updating_notes_00001E_435175F5", "step.step_updating_notes_00001F_1077F35E", "step.step_updating_notes_000022_17B0AB06" ] }, "content.p_updating_notes_000025_58B86794" ] }, "deleting_assets-latest-en.json": { "title": "title_deleting_assets_000001_3A944EB", "title_deleting_assets_000001_3A944EB": "Delete device assets", "shortdesc": "shortdesc_deleting_assets_000002_99ED435", "shortdesc_deleting_assets_000002_99ED435": "On the Assets page, you can immediately delete assets from your inventory. ", "content.note_deleting_assets_000010_3EC68F4": "Note: When you delete an asset, it will also remove the network vulnerability scans associated with the asset.", "content.p_deleting_assets_000011_CA224AB": "To remove an asset or assets:", "content.p_deleting_assets_000019_A9B42A5": "The action bar appears at the bottom of the page.", "step.step_deleting_assets_000013_660DCEE": "On the Environment > Devices > Vulnerability assets page, select the checkbox of the asset (or assets) that you want to delete.", "step.step_deleting_assets_00001A_67353F2": "Select Delete assets from the action bar.", "step.step_deleting_assets_00001D_21A4C93": "Select Delete.", "content.p_deleting_assets_000021_386C891": "The selected asset or assets together with the associated vulnerability scans are deleted from Elements Exposure Management.", "content.note_deleting_assets_000023_4C3D36B": "Note: You can also configure Elements Exposure Management to delete archived assets automatically after a specified time.", "desc": [ "content.note_deleting_assets_000010_3EC68F4", "content.p_deleting_assets_000011_CA224AB", { "steps.steps_deleting_assets_000012_896A553": [ "step.step_deleting_assets_000013_660DCEE", "content.p_deleting_assets_000019_A9B42A5", "step.step_deleting_assets_00001A_67353F2", "step.step_deleting_assets_00001D_21A4C93" ] }, "content.p_deleting_assets_000021_386C891", "content.note_deleting_assets_000023_4C3D36B" ] }, "deleting_archived_assets-latest-en.json": { "title": "title_deleting_archived_assets_0772B", "title_deleting_archived_assets_0772B": "Delete archived assets", "shortdesc": "shortdesc_deleting_archived_assets_0A8AA", "shortdesc_deleting_archived_assets_0A8AA": "If you have configured Elements Exposure Management to archive old assets, you can configure it also to delete the archived assets automatically after a specified time. ", "content.p_deleting_archived_assets_06DA7": "If you have configured Elements Exposure Management to archive old assets, they are archived based on the time they were last seen by any of type of scan.", "content.p_deleting_archived_assets_0C854": "To delete the archived assets automatically:", "step.step_deleting_archived_assets_006BF": "Go to Management > Vulnerability Settings > General settings > Miscellaneous.", "content.p_deleting_archived_assets_055D2": "The options are: Never, 1 month, 1 quarter, Half a year, 1 year, or 2 years.", "step.step_deleting_archived_assets_080E0": "Under Archive assets, use the drop-down to specify when assets will be archived based on the time last seen.", "content.p_deleting_archived_assets_064C2": "The options are: Forever, 1 month, 1 quarter, Half a year, 1 year, or 2 years.", "step.step_deleting_archived_assets_07F69": "Under Store assets, use the drop-down to specify for how long the archived assets are stored before they are automatically deleted.", "step.step_deleting_archived_assets_034D1": "Select Save.", "content.p_deleting_archived_assets_013E0": "All assets that meet the specified criteria will be deleted automatically from Elements Exposure Management.", "desc": [ "content.p_deleting_archived_assets_06DA7", "content.p_deleting_archived_assets_0C854", { "steps.steps_deleting_archived_assets_03C88": [ "step.step_deleting_archived_assets_006BF", "step.step_deleting_archived_assets_080E0", "content.p_deleting_archived_assets_055D2", "step.step_deleting_archived_assets_07F69", "content.p_deleting_archived_assets_064C2", "step.step_deleting_archived_assets_034D1" ] }, "content.p_deleting_archived_assets_013E0" ] }, "scan_nodes-latest-en.json": { "title": "title_scan_nodes_000001_D971519C", "title_scan_nodes_000001_D971519C": "Scan nodes", "shortdesc": "shortdesc_scan_nodes_000002_3535B734", "shortdesc_scan_nodes_000002_3535B734": "Security Configurations > Scans > Scan nodes is used to manage all scan nodes available in your Elements Exposure Management account. ", "content.p_scan_nodes_000012_CFD59A04": "The table shows the following information for each listed scan node:", "step.step_scan_nodes_000014_A0E1C61A": "Type indicates the type of scan associated with the scan node (discovery scan, system scan, or web scan).", "step.step_scan_nodes_000016_A8CFBF19": "Name contains a descriptive text for the node. You can hover over the name to see more details.", "step.step_scan_nodes_000018_004E6703": "Current load tells the maximum capacity of the scan node and how many scans are currently running on the node.", "step.step_scan_nodes_00001A_8388FE53": "Engine update tells when the scanning engine itself was last updated. Note that some scanning engines are updated more often than others. For example, you should expect daily updates for System Scan, but less frequent updates for the other engines.", "step.step_scan_nodes_00001C_2D858380": "Last seen shows when the scan node last contacted the WithSecure Elements Security Center. By default, the scan nodes are configured to connect every 60 seconds.", "step.step_scan_nodes_00001F_62FBF71A": "Status indicates whether the node is Active or Inactive.", "content.note_scan_nodes_000023_4875EB7F": "Tip: Click the arrow down icon to view more details for the scan node.", "desc": [ "content.p_scan_nodes_000012_CFD59A04", { "steps.ul_scan_nodes_000013_581D6D1D": [ "step.step_scan_nodes_000014_A0E1C61A", "step.step_scan_nodes_000016_A8CFBF19", "step.step_scan_nodes_000018_004E6703", "step.step_scan_nodes_00001A_8388FE53", "step.step_scan_nodes_00001C_2D858380", "step.step_scan_nodes_00001F_62FBF71A" ] }, "content.note_scan_nodes_000023_4875EB7F" ] }, "adding_scan_nodes-latest-en.json": { "title": "title_adding_scan_nodes_000001_8012C", "title_adding_scan_nodes_000001_8012C": "Add new scan nodes", "shortdesc": "shortdesc_adding_scan_nodes_000002_E5E6C", "shortdesc_adding_scan_nodes_000002_E5E6C": "To use a new scan node, you need to either request a new license or register an already installed scan node in WithSecure Elements Security Center. ", "content.note_adding_scan_nodes_000011_45A51": "Note: You can download Scan Node installers for Windows and Linux from Elements Security Center under Management > Downloads .", "step.step_adding_scan_nodes_000017_9C660": "Go to the Scan nodes page.", "content.p_adding_scan_nodes_00001D_CAD1C": "If you need a new scan node license:", "substep.substep_adding_scan_nodes_00001F_81263": "Select Request a new scan node and click Next.", "content.p_adding_scan_nodes_000026_297DB": "When your request is approved, the license file automatically starts to download. Follow the steps on the Summary page to install the scan node.", "substep.substep_adding_scan_nodes_000023_888E5": "Enter a name and description (optional) for the scan node and click Request.", "substep.substep_adding_scan_nodes_000028_CB3F4": "Click Done.", "content.p_adding_scan_nodes_00002B_F9EFE": "If you already have a scan node license file:", "substep.substep_adding_scan_nodes_00002D_9EDA1": "Select Register a previously requested scan node and click Next.", "content.p_adding_scan_nodes_000033_F1751": "Use a name that identifies the scan node server such as a hostname and preferably the source IP, so that other Elements Vulnerability Management users can see from which IP the node will be scanning.", "substep.substep_adding_scan_nodes_000031_36D1D": "Enter a name and description (optional) for the scan node.", "content.p_adding_scan_nodes_000037_D706B": "Log in to the scan node server and open the scan node control center application. Under the Settings tab, you will find the scan node identifier.", "content.p_adding_scan_nodes_000039_4217C": "Make sure the scan node type matches the node identifier.", "substep.substep_adding_scan_nodes_000035_12BF7": "Use the switches to select the node types that you want to register and enter the corresponding module identifiers.", "content.p_adding_scan_nodes_00003E_BC241": "By default, the scan node starts the connection. If a so-called \"reverse connection scan node\" has been installed, the WithSecure Elements portal must start the connection.", "substep.substep_adding_scan_nodes_00003A_23ABB": "Connection type. Defines how the scan node and the WithSecure Elements portal communicate.", "step.step_adding_scan_nodes_00001A_BAF50": "Select Add new scan node.", "desc": [ "content.note_adding_scan_nodes_000011_45A51", { "steps.steps_adding_scan_nodes_000016_EB201": [ "step.step_adding_scan_nodes_000017_9C660", "step.step_adding_scan_nodes_00001A_BAF50", "content.p_adding_scan_nodes_00001D_CAD1C", { "substeps.substepsalpha_addingalpha_scanalpha_nodesalpha_00001Ealpha_EE403": [ "substep.substep_adding_scan_nodes_00001F_81263", "substep.substep_adding_scan_nodes_000023_888E5", "content.p_adding_scan_nodes_000026_297DB", "substep.substep_adding_scan_nodes_000028_CB3F4" ] }, "content.p_adding_scan_nodes_00002B_F9EFE", { "substeps.substepsalpha_addingalpha_scanalpha_nodesalpha_00002Calpha_5ED5C": [ "substep.substep_adding_scan_nodes_00002D_9EDA1", "substep.substep_adding_scan_nodes_000031_36D1D", "content.p_adding_scan_nodes_000033_F1751", "substep.substep_adding_scan_nodes_000035_12BF7", "content.p_adding_scan_nodes_000037_D706B", "content.p_adding_scan_nodes_000039_4217C", "substep.substep_adding_scan_nodes_00003A_23ABB", "content.p_adding_scan_nodes_00003E_BC241" ] } ] } ], "related": [ "concept_r1p_wpx_dbc-latest-en" ] }, "scan_node_uninstallation-latest-en.json": { "title": "title_scan_node_uninstallation_0C92A", "title_scan_node_uninstallation_0C92A": "Uninstalling scan nodes", "shortdesc": "shortdesc_scan_node_uninstallation_0FBE3", "shortdesc_scan_node_uninstallation_0FBE3": "Uninstalls a scan node from a Windows or Linux host.", "content.p_scan_node_uninstallation_0F2D7": "When you no longer need a scan node, uninstall it from the host. The uninstallation procedure differs between Windows and Linux systems, so use the procedure that matches the host operating system.", "desc": [ "content.p_scan_node_uninstallation_0F2D7" ] }, "uninstalling_scan_nodes-latest-en.json": { "title": "title_uninstalling_scan_nodes_00104A", "title_uninstalling_scan_nodes_00104A": "Uninstall scan nodes from Windows", "shortdesc": "shortdesc_uninstalling_scan_nodes_009C55", "shortdesc_uninstalling_scan_nodes_009C55": "Follow these steps to uninstall a scan node from your Windows system. ", "content.p_uninstalling_scan_nodes_0087FD": "To uninstall a scan node:", "step.step_uninstalling_scan_nodes_00916D": "Go to Control Panel > Programs > Programs and Features.", "content.p_uninstalling_scan_nodes_004740": "If you see WithSecure Elements Scan Node Agent:", "substep.substep_uninstalling_scan_nodes_008510": "Double-click WithSecure Elements Scan Node Agent.", "content.p_uninstalling_scan_nodes_003F54": "Scan Node Agent no longer appears in the list of installed programs.", "substep.substep_uninstalling_scan_nodes_00C955": "Type y and press Enter to confirm that you want to remove Scan Node Agent.", "content.p_uninstalling_scan_nodes_004000": "If you cannot find Scan Node Agent, it means that your version of Scan Node Agent is older than 2.6.1.1174. To uninstall earlier versions:", "substep.substep_uninstalling_scan_nodes_00935D": "Open an elevated command prompt.", "substep.substep_uninstalling_scan_nodes_00C445": "Change the directory to C:\\Program Files (x86)\\F-Secure\\RadarScanAgent.", "substep.substep_uninstalling_scan_nodes_00EED4": "Uninstall the Scan Node Agent's Windows service by running the following command: FSRadarAgent.exe -u.", "substep.substep_uninstalling_scan_nodes_005246": "Delete the scan node folder C:\\Program Files (x86)\\F-Secure\\RadarScanAgent.", "content.p_uninstalling_scan_nodes_003458": "The Scan Node Agent files and registry key are removed.", "substep.substep_uninstalling_scan_nodes_003E1F": "Remove the following registry key: HKLM\\Software\\Wow6432Node\\F-Secure\\SN.", "step.step_uninstalling_scan_nodes_0095D0": "Check the list of programs.", "content.p_uninstalling_scan_nodes_003B09": "To remove any remaining files:", "step.step_uninstalling_scan_nodes_006E79": "Log in to Elements Security Center.", "step.step_uninstalling_scan_nodes_00FCB0": "Under Security Configurations, select Scans > Scan nodes.", "step.step_uninstalling_scan_nodes_009E95": "Use the action menu to unregister the scan engines.", "desc": [ "content.p_uninstalling_scan_nodes_0087FD", { "steps.steps_uninstalling_scan_nodes_00C3F9": [ "step.step_uninstalling_scan_nodes_00916D", "step.step_uninstalling_scan_nodes_0095D0", "content.p_uninstalling_scan_nodes_004740", { "substeps.substepsalpha_uninstallingalpha_scanalpha_nodesalpha_00F57D": [ "substep.substep_uninstalling_scan_nodes_008510", "substep.substep_uninstalling_scan_nodes_00C955", "content.p_uninstalling_scan_nodes_003F54" ] }, "content.p_uninstalling_scan_nodes_004000", { "substeps.substepsalpha_uninstallingalpha_scanalpha_nodesalpha_00CC2D": [ "substep.substep_uninstalling_scan_nodes_00935D", "substep.substep_uninstalling_scan_nodes_00C445", "substep.substep_uninstalling_scan_nodes_00EED4", "substep.substep_uninstalling_scan_nodes_005246", "substep.substep_uninstalling_scan_nodes_003E1F", "content.p_uninstalling_scan_nodes_003458" ] } ] }, "content.p_uninstalling_scan_nodes_003B09", { "steps.ol_uninstalling_scan_nodes_00E581": [ "step.step_uninstalling_scan_nodes_006E79", "step.step_uninstalling_scan_nodes_00FCB0", "step.step_uninstalling_scan_nodes_009E95" ] } ] }, "uninstalling_scan_nodes_linux-latest-en.json": { "title": "title_uninstalling_scan_nodes__009EE", "title_uninstalling_scan_nodes__009EE": "Uninstall scan nodes from Linux", "shortdesc": "shortdesc_uninstalling_scan_nodes__06480", "shortdesc_uninstalling_scan_nodes__06480": "Follow these steps to uninstall a scan node from your Linux system.", "content.p_uninstalling_scan_nodes__0822F": "To uninstall a scan node:", "content.p_uninstalling_scan_nodes__0175F": "sudo apt remove --purge f-secure-radar-scannodeagent-installer", "step.step_uninstalling_scan_nodes__0B2D2": "Run the following command to uninstall the scan node:", "desc": [ "content.p_uninstalling_scan_nodes__0822F", { "steps.steps_uninstalling_scan_nodes__096D2": [ "step.step_uninstalling_scan_nodes__0B2D2", "content.p_uninstalling_scan_nodes__0175F" ] } ] }, "debugging_scan_nodes-latest-en.json": { "title": "title_debugging_scan_nodes_000009A75", "title_debugging_scan_nodes_000009A75": "Troubleshooting scan node issues", "shortdesc": "shortdesc_debugging_scan_nodes_00000B865", "shortdesc_debugging_scan_nodes_00000B865": "These checks help you resolve common scan node problems in Elements Exposure Management.", "content.p_debugging_scan_nodes_0000065DF": "To resolve scan node issues, try the following checks:", "step.step_debugging_scan_nodes_000012D4E": "Ensure that the scan node Windows service is running.", "step.step_debugging_scan_nodes_000015155": "Open Scan Node - Control Center and check that the scan node is active and that scanning engines were downloaded (revision is greater than 0).", "step.step_debugging_scan_nodes_00001EDFE": "Review the scan node log files (C:\\Program Files (x86)\\F-Secure\\RadarScanAgent\\logs).", "content.p_debugging_scan_nodes_000017FBE": "C:\\Program Files (x86)\\F-Secure\\RadarScanAgent>FSRadarAgent.exe -test", "step.step_debugging_scan_nodes_00001518F": "Perform a connection test. Run the following command as the same user that runs the service:", "content.note_debugging_scan_nodes_0000239E4": "Note: Remember to run the command line as the user running the \"Scan Node Agent\" service.", "substep.substep_debugging_scan_nodes_00002B826": "Via the command line with the following command: FSRadarAgent.exe -c -vv. For example: C:\\Program Files (x86)\\F-Secure\\RadarScanAgent>FSRadarAgent.exe -c -vv.", "content.p_debugging_scan_nodes_00002763A": "", "content.note_debugging_scan_nodes_00002FA99": "Note: Editing the system registry is a very sensitive operation. Proceed with caution if you use this approach.", "substep.substep_debugging_scan_nodes_0000225F8": "Alternatively, run it as a service. To do this, add the -vv argument to the service startup command. The service startup parameters can be modified in the system registry.", "step.step_debugging_scan_nodes_00001C400": "Run the scan node agent in debug mode:", "step.step_debugging_scan_nodes_000029B45": "Check Windows Event Viewer for possible errors.", "content.p_debugging_scan_nodes_000036880": "If none of these checks resolves the issue, contact Elements Vulnerability Management support. When sending your support request, describe your problem in detail and always attach log files (at least the log from the date when the issue occurred).", "desc": [ "content.p_debugging_scan_nodes_0000065DF", { "steps.steps_debugging_scan_nodes_0000168D3": [ "step.step_debugging_scan_nodes_000012D4E", "step.step_debugging_scan_nodes_000015155", "step.step_debugging_scan_nodes_00001EDFE", "step.step_debugging_scan_nodes_00001518F", "content.p_debugging_scan_nodes_000017FBE", "step.step_debugging_scan_nodes_00001C400", { "substeps.substepsalpha_debuggingalpha_scanalpha_nodesalpha_00002813C": [ "substep.substep_debugging_scan_nodes_00002B826", "content.note_debugging_scan_nodes_0000239E4", "substep.substep_debugging_scan_nodes_0000225F8", "content.p_debugging_scan_nodes_00002763A", "content.note_debugging_scan_nodes_00002FA99" ] }, "step.step_debugging_scan_nodes_000029B45" ] }, "content.p_debugging_scan_nodes_000036880" ] }, "task_t3k_sgy_bbc-latest-en.json": { "title": "title_deleting_cloud_account_0006221", "title_deleting_cloud_account_0006221": "Delete cloud accounts", "shortdesc": "shortdesc_deleting_cloud_account_0006042", "shortdesc_deleting_cloud_account_0006042": "Deletes a cloud account that has been added to the service.", "content.p_deleting_cloud_account_000138C": "Delete a cloud account when you no longer want WithSecure to monitor it.", "step.step_deleting_cloud_account_0009F96": "Open Elements Security Center.", "step.step_deleting_cloud_account_0007192": "Under Environment, select Cloud.", "content.p_deleting_cloud_account_000ABC0": "The action panel opens.", "step.step_deleting_cloud_account_0001FD1": "Select the account that you want to delete.", "content.note_deleting_cloud_account_000228A": "Note: To turn off scanning for an account temporarily, select Disable scanning instead.", "step.step_deleting_cloud_account_0004CF8": "Select Remove.", "content.p_deleting_cloud_account_000C0BA": "The cloud account is removed from the service.", "desc": [ "content.p_deleting_cloud_account_000138C", { "steps.steps_deleting_cloud_account_00004E7": [ "step.step_deleting_cloud_account_0009F96", "step.step_deleting_cloud_account_0007192", "step.step_deleting_cloud_account_0001FD1", "content.p_deleting_cloud_account_000ABC0", "step.step_deleting_cloud_account_0004CF8", "content.note_deleting_cloud_account_000228A" ] }, "content.p_deleting_cloud_account_000C0BA" ] }, "user_management-2-latest-en.json": { "title": "title_user_management_000001_AA62BA8", "title_user_management_000001_AA62BA8": "Users", "shortdesc": "shortdesc_user_management_000002_A7EDCB2", "shortdesc_user_management_000002_A7EDCB2": "Management > Organization Settings > Vulnerability users allows you to control user access to WithSecure Elements Exposure Management using Role-Based Access Control (RBAC) principles. ", "content.p_user_management_000015_4BDDADA": "User management in Elements Exposure Management involves three concepts: Users, User groups, and Roles.", "content.dt_user_management_00001B_C7FA271": "Users", "content.dd_user_management_00001C_1F297F8": "The Management > Organization Settings > Vulnerability users page shows you a list of all users with access to your Elements Exposure Management account. On this page you can review the users and what they have access to, and add and remove users.", "content.dt_user_management_000023_E2ACB6D": "User groups", "content.dd_user_management_000024_4798A3D": "User groups act as containers for one or more users. With groups, you can control the permissions (roles) for the set of users. The User groups column shows you which groups each listed user belongs to.", "content.dt_user_management_000027_7D78DF1": "Roles", "content.dd_user_management_000028_2D9ED21": "Roles are used to define what a user can access. For example, you can create roles like: View only, System owner, Administrator. To view and edit the roles for your Elements Exposure Management account, go to Management > Organization Settings > Vulnerability users and select Manage roles.", "desc": [ "content.p_user_management_000015_4BDDADA", { "dl.dl_user_management_00001A_BFED689": [ { "dlentry.users": [ "content.dt_user_management_00001B_C7FA271", "content.dd_user_management_00001C_1F297F8" ] }, { "dlentry.user-groups": [ "content.dt_user_management_000023_E2ACB6D", "content.dd_user_management_000024_4798A3D" ] }, { "dlentry.roles": [ "content.dt_user_management_000027_7D78DF1", "content.dd_user_management_000028_2D9ED21" ] } ] } ] }, "settings-latest-en.json": { "title": "title_settings_000001_9C76DA2C", "title_settings_000001_9C76DA2C": "Settings", "shortdesc": "shortdesc_settings_000002_54B42CEC", "shortdesc_settings_000002_54B42CEC": "You can control how your Elements Exposure Management account behaves across all users on the Management > Vulnerability Settings page. ", "content.title_settings_000015_CDC9C34C": "General settings", "content.dt_settings_000018_44FC9B1A": "Contact details ", "content.dd_settings_000019_3CBCAA53": "This sections contains the contact details of the selected organization.", "content.dt_settings_00001B_20C17997": "Subscription details ", "content.dd_settings_00001C_AA7B2B8E": "This section provides information about the subscription of the selected organization.", "content.dt_settings_00001E_37DA44D9": "Product customization ", "content.dd_settings_00001F_B8026C85": "This section is used to manage the product customization if it is enabled.", "content.dt_settings_000021_6B775DA2": "Scanning restrictions ", "content.dd_settings_000022_EDEA89F9": "This section can be used to control what IP ranges Elements Vulnerability Management is allowed to scan, and also to control when starting certain scans is allowed or denied.", "content.dt_settings_000025_4C623BE6": "Encryption keys ", "content.dd_settings_000026_8A91342B": "This section is used to manage the encryption keys that are used as a part of the Linux authenticated scanning feature.", "content.dt_settings_000028_0D48B06B": "Vulnerability statuses ", "content.dd_settings_000029_E6FA0B0F": "Use this section to define whether open and closed vulnerability statuses affect PCI compliance. You can also include or exclude these statuses from the vulnerability counts and statistics on the Home > Vulnerabilities page.", "content.dt_settings_00002E_6265359C": "Workflow ", "content.dd_settings_00002F_FEF370CC": "Use this section to define what to do with automatically closed or reopened tickets. You can also choose whether and when to notify participants about ticket deadlines, whether to flag new assets for internet exposure, and whether to mark duplicate findings automatically.", "content.dt_settings_000031_5913368C": "Miscellaneous ", "content.dd_settings_000032_244D43A8": "This section can be used to define the default time zone for the organization, to specify for how long reports are stored, to define when to mark assets as archived, to specify for how long archived assets are stored, and to define how often vulnerability scans are triggered on endpoints.", "content.title_settings_000033_5CE7CA95": "Security settings", "content.dt_settings_000036_140B0B07": "Isolate my organization ", "content.dd_settings_000037_CED01A3E": "When enabled, users that belong to the upper entities in the organization hierarchy will not be able to access this organization. Only users present in the Account Management list will be able to see data from this organization.", "content.dt_settings_000039_2371FA67": "Restrict login based on IP address ", "content.dd_settings_00003A_4F68D376": "This setting can be used to control who has permission to authenticate to your Elements Exposure Management account based on the source IP address. For example, you can enhance the security of your account by only permitting a list of trusted IP addresses.", "content.dt_settings_00003D_6C13DDB1": "Force two-factor authentication ", "content.dd_settings_00003E_D783E8BF": "If enabled, this enforces two-factor authentication for all users. If disabled, two-factor authentication becomes optional. Users can choose to enable two-factor authentication manually via the My profile page.", "content.note_settings_000040_CD0E7994": "Note: Two-factor authentication supports Google Authenticator, Microsoft Authenticator, and any other mobile authentication app that supports the TOTP (Time-based One-Time Password) algorithm.
", "content.p_settings_000056_449EBCEE": "", "content.dt_settings_000042_CD364A00": "User can reset password without login ", "content.dd_settings_000043_BA1739C1": "If enabled, unauthenticated users are allowed to reset their password with the Forgot password? link. If disabled, only existing (authenticated) users and administrators can reset the password of another user.", "content.dt_settings_000046_A1F1EC3D": "Default security stance ", "content.dd_settings_000047_76C7F659": "This setting affects the default permissions of newly created users:", "choice.choice_settings_000049_8106D8F7": "Permit means that everything that is not explicitly forbidden is permitted.", "choice.choice_settings_00004B_B8CA4A90": "Deny (default) means that everything that is not explicitly permitted is forbidden.", "content.dt_settings_00004E_4BCC8FDD": "Email notifications include ", "content.dd_settings_00004F_CE064E01": "This setting defines how many details are allowed to be communicated via email, which is often unencrypted and in general considered unsafe.", "content.title_settings_000050_0EE8CAC6": "Notification settings", "content.p_settings_000051_B19E4867": "", "content.note_settings_000052_839FBD24": "Note: Notification settings apply to your personal user account only. In other words, they do not apply to the entire organization.", "content.title_settings_000053_F0BF0274": "Event log", "content.p_settings_000054_FBEC10C1": "The event log allows you to review all the events performed by any user. You can use the filter to view only events of a specific type, for a specific date range, or a specific user. The event log is very useful to track who started or deleted specific scans, or made certain changes in the Elements Exposure Management.", "desc": [ "content.title_settings_000015_CDC9C34C", { "dl.dl_settings_000016_7C53102D": [ { "dlentry.dlentry_settings_000017_39431EFE": [ "content.dt_settings_000018_44FC9B1A", "content.dd_settings_000019_3CBCAA53" ] }, { "dlentry.dlentry_settings_00001A_C7C39FFD": [ "content.dt_settings_00001B_20C17997", "content.dd_settings_00001C_AA7B2B8E" ] }, { "dlentry.dlentry_settings_00001D_D6CE46A5": [ "content.dt_settings_00001E_37DA44D9", "content.dd_settings_00001F_B8026C85" ] }, { "dlentry.dlentry_settings_000020_80896437": [ "content.dt_settings_000021_6B775DA2", "content.dd_settings_000022_EDEA89F9" ] }, { "dlentry.dlentry_settings_000024_4B926756": [ "content.dt_settings_000025_4C623BE6", "content.dd_settings_000026_8A91342B" ] }, { "dlentry.dlentry_settings_000027_DCE1EA86": [ "content.dt_settings_000028_0D48B06B", "content.dd_settings_000029_E6FA0B0F" ] }, { "dlentry.dlentry_settings_00002D_C9EE5A8C": [ "content.dt_settings_00002E_6265359C", "content.dd_settings_00002F_FEF370CC" ] }, { "dlentry.dlentry_settings_000030_929FA5C0": [ "content.dt_settings_000031_5913368C", "content.dd_settings_000032_244D43A8" ] } ] }, "content.title_settings_000033_5CE7CA95", { "dl.dl_settings_000034_EC70C32D": [ { "dlentry.dlentry_settings_000035_3272ED4A": [ "content.dt_settings_000036_140B0B07", "content.dd_settings_000037_CED01A3E" ] }, { "dlentry.dlentry_settings_000038_964F6CCE": [ "content.dt_settings_000039_2371FA67", "content.dd_settings_00003A_4F68D376" ] }, { "dlentry.dlentry_settings_00003C_C5A6C1D4": [ "content.dt_settings_00003D_6C13DDB1", "content.dd_settings_00003E_D783E8BF", "content.note_settings_000040_CD0E7994", "content.p_settings_000056_449EBCEE" ] }, { "dlentry.dlentry_settings_000041_E857C47B": [ "content.dt_settings_000042_CD364A00", "content.dd_settings_000043_BA1739C1" ] }, { "dlentry.dlentry_settings_000045_151842BB": [ "content.dt_settings_000046_A1F1EC3D", "content.dd_settings_000047_76C7F659", { "choices.ul_settings_000048_8DFB0E60": [ "choice.choice_settings_000049_8106D8F7", "choice.choice_settings_00004B_B8CA4A90" ] } ] }, { "dlentry.dlentry_settings_00004D_127AC313": [ "content.dt_settings_00004E_4BCC8FDD", "content.dd_settings_00004F_CE064E01" ] } ] }, "content.title_settings_000050_0EE8CAC6", "content.note_settings_000052_839FBD24", "content.title_settings_000053_F0BF0274", "content.p_settings_000054_FBEC10C1" ] }, "xm_troubleshooting-latest-en.json": { "title": "title_xm_troubleshooting_000001_938B", "title_xm_troubleshooting_000001_938B": "Troubleshooting", "shortdesc": "shortdesc_xm_troubleshooting_000002_8370", "shortdesc_xm_troubleshooting_000002_8370": "Help for solving technical issues with Elements Exposure Management is available in the WithSecure Community knowledge base.", "content.p_xm_troubleshooting_00000F_B4A0": "Most technical issues with Elements Exposure Management involve scan nodes. Common scan node problems include:", "step.step_xm_troubleshooting_000012_CDE6": "The scan node does not start.", "step.step_xm_troubleshooting_000013_C31D": "The scan node does not download its scan engines.", "step.step_xm_troubleshooting_000014_16FA": "The scan node cannot connect to Elements Security Center.", "content.p_xm_troubleshooting_000016_F434": "The scan node troubleshooting steps cover these problems. For other issues, see the https://community.withsecure.com/en/kb/categories/156-elements-exposure-managementElements Exposure Management knowledge base.", "desc": [ "content.p_xm_troubleshooting_00000F_B4A0", { "steps.ul_xm_troubleshooting_000011_AEFC": [ "step.step_xm_troubleshooting_000012_CDE6", "step.step_xm_troubleshooting_000013_C31D", "step.step_xm_troubleshooting_000014_16FA" ] }, "content.p_xm_troubleshooting_000016_F434" ], "related": [ "debugging_scan_nodes-latest-en" ] }, "concept_ezq_xbz_bbc-latest-en.json": { "title": "title_using_iac_tools_000001_9A536B3", "title_using_iac_tools_000001_9A536B3": "Using Infrastructure-as-Code tools", "shortdesc": "shortdesc_using_iac_tools_000002_B944042", "shortdesc_using_iac_tools_000002_B944042": "Infrastructure-as-Code (IaC) tools such as Terraform and CloudFormation for provisioning Elements Exposure Management scanning infrastructure.", "content.p_using_iac_tools_00000F_AA4CDAD": "You can provision and manage Elements Exposure Management scanning infrastructure with Infrastructure-as-Code (IaC) tools. Use Terraform for multi-cloud environments, or CloudFormation for AWS-only environments.", "desc": [ "content.p_using_iac_tools_00000F_AA4CDAD" ] }, "using_terraform-latest-en.json": { "title": "title_using_terraform_000001_94D7746", "title_using_terraform_000001_94D7746": "Implement infrastructure with Terraform", "shortdesc": "shortdesc_using_terraform_000002_0FFF1F0", "shortdesc_using_terraform_000002_0FFF1F0": "You can use a Terraform template to manage resources in your cloud environment. ", "content.p_using_terraform_000013_47B82E3": "You have installed Terraform and initialized a working directory (terraform init).", "content.p_using_terraform_000016_FCF49DF": "Elements Security Center generates a Terraform template with the account permissions Exposure Management needs; applying it keeps the setup consistent and tracked in your infrastructure-as-code workflow instead of granting permissions manually.", "step.step_using_terraform_00001A_8C4B607": "Open Elements Security Center.", "step.step_using_terraform_00001D_6B32362": "Under Environment, select Cloud > AWS Accounts and Security Posture .", "content.p_using_terraform_000025_AA079D9": "The action panel opens.", "step.step_using_terraform_000023_420D216": "Select accounts that you want to edit.", "step.step_using_terraform_000026_254A09A": "Select Create Terraform template.", "step.step_using_terraform_000029_742210D": "Copy the template to the directory where it has been initialized.", "step.step_using_terraform_00002B_A1E47E6": "Run terraform apply in the directory with the template.", "desc": [ "content.p_using_terraform_000013_47B82E3", "content.p_using_terraform_000016_FCF49DF", { "steps.steps_using_terraform_000019_02F246E": [ "step.step_using_terraform_00001A_8C4B607", "step.step_using_terraform_00001D_6B32362", "step.step_using_terraform_000023_420D216", "content.p_using_terraform_000025_AA079D9", "step.step_using_terraform_000026_254A09A", "step.step_using_terraform_000029_742210D", "step.step_using_terraform_00002B_A1E47E6" ] } ] }, "using_cloudformation-latest-en.json": { "title": "title_using_cloudformation_000001413", "title_using_cloudformation_000001413": "Implement infrastructure with CloudFormation", "shortdesc": "shortdesc_using_cloudformation_00000D359", "shortdesc_using_cloudformation_00000D359": "You can use a CloudFormation template to manage your AWS resources. ", "content.p_using_cloudformation_000016D67": "Elements Security Center generates a CloudFormation template with the account permissions Exposure Management needs; deploying it through CloudFormation keeps the setup consistent and version-controlled instead of granting permissions manually in the AWS console.", "step.step_using_cloudformation_0000141A6": "Open Elements Security Center.", "step.step_using_cloudformation_000015CE5": "Under Environment, select Cloud > AWS Accounts and Security Posture .", "content.p_using_cloudformation_000011E3A": "The action panel opens.", "step.step_using_cloudformation_00001F9F2": "Select AWS accounts that you want to edit.", "step.step_using_cloudformation_000028ABD": "Select Create CloudFormation template.", "step.step_using_cloudformation_0000215AB": "Log in to your AWS account.", "step.step_using_cloudformation_000021ACA": "Go to the AWS CloudFormation console.", "content.p_using_cloudformation_000027440": "The Create stack page opens.", "step.step_using_cloudformation_000028294": "Choose Create stack and select With new resources.", "step.step_using_cloudformation_00002C9CB": "Under Specify template, choose Upload a template file and browse to your CloudFormation template file.", "content.p_using_cloudformation_000030AD8": "The Specify stack details page opens.", "step.step_using_cloudformation_00003D05C": "Select Next.", "step.step_using_cloudformation_00003067A": "In the Stack name field, enter a unique name for the stack.", "step.step_using_cloudformation_00003353C": "Review the template parameters and enter values for those required in your AWS environment.", "content.p_using_cloudformation_00003AD1A": "The Configure stack options page opens.", "step.step_using_cloudformation_00003EA74": "Select Next.", "step.step_using_cloudformation_000041217": "Review the stack options and add tags, permissions, or notifications required for your AWS environment.", "content.p_using_cloudformation_0000432CC": "The Review page opens.", "step.step_using_cloudformation_000047698": "Select Next.", "step.step_using_cloudformation_0000419ED": "Review your stack settings and choose Create stack.", "desc": [ "content.p_using_cloudformation_000016D67", { "steps.steps_using_cloudformation_00001319E": [ "step.step_using_cloudformation_0000141A6", "step.step_using_cloudformation_000015CE5", "step.step_using_cloudformation_00001F9F2", "content.p_using_cloudformation_000011E3A", "step.step_using_cloudformation_000028ABD", "step.step_using_cloudformation_0000215AB", "step.step_using_cloudformation_000021ACA", "step.step_using_cloudformation_000028294", "content.p_using_cloudformation_000027440", "step.step_using_cloudformation_00002C9CB", "step.step_using_cloudformation_00003D05C", "content.p_using_cloudformation_000030AD8", "step.step_using_cloudformation_00003067A", "step.step_using_cloudformation_00003353C", "step.step_using_cloudformation_00003EA74", "content.p_using_cloudformation_00003AD1A", "step.step_using_cloudformation_000041217", "step.step_using_cloudformation_000047698", "content.p_using_cloudformation_0000432CC", "step.step_using_cloudformation_0000419ED" ] } ] }, "authenticated_scanning-latest-en.json": { "title": "title_authenticated_scanning_000DE05", "title_authenticated_scanning_000DE05": "Authenticated scanning", "shortdesc": "shortdesc_authenticated_scanning_0000146", "shortdesc_authenticated_scanning_0000146": "In addition to regular network-based scanning, where the host's ports are scanned and the exposed services are reviewed for flaws, you can also run system scans in authenticated mode, which enables it to authenticate the target host. ", "content.note_authenticated_scanning_000D32C": "Note: You can only run authenticated scans for Linux and Windows system scan targets that are configured to use private scan nodes that are installed in the customer network. Authenticated system scans do not work if they are configured to use cloud scan nodes.", "content.p_authenticated_scanning_0008523": "Network-based system scans can reveal hidden services and vulnerable products and configurations. However, a vast majority of known vulnerabilities (with or without a CVE number) affects some particular versions of a software package. The network scanning cannot always determine exact product versions, which is why WithSecure Elements Exposure Management combines the external vulnerability scanning results with the internal - \"authenticated\" - results.", "content.title_authenticated_scanning_000C61F": "Authentication method on Windows", "content.p_authenticated_scanning_000CAA4": "Use an endpoint agent for the best authenticated scanning method with Windows targets. When WithSecure Elements Agent is installed on the target server, it sends the scanning results to WithSecure Elements Security Center. In this mode, remote management interfaces can be disabled and no additional credentials are necessary.", "content.p_authenticated_scanning_000E17F": "If you cannot use the endpoint agent, configure the scan authentication via Windows Remote Management (WinRM). When you configure it to use the Scan Node service account, which scans hosts in the same AD domain, no credentials are stored in the WithSecure Elements Security Center database.", "content.p_authenticated_scanning_000878D": "The authenticated scan requires administrator privileges on Windows targets.", "content.title_authenticated_scanning_000B740": "Authentication method on Linux", "content.p_authenticated_scanning_00002E9": "WithSecure Elements Exposure Management uses the industry-standard SSH protocol to perform the authenticated scanning on Linux-based hosts. We recommend that you set up a key-based SSH authentication, but the password-based authentication method is also supported.", "content.note_authenticated_scanning_000EDBA": "Note: Credentials are stored in WithSecure Elements Security Center in an encrypted form. To perform the authenticated scans, generate a \"transfer\" key pair, upload the public key to the Elements Security Center and the private key to the Scan Node Agent. This key pair keeps the credentials encrypted while they are stored or transferred. The decryption is only possible on the Scan Node Agent with appropriate public key when a scan starts.", "content.p_authenticated_scanning_000DFAC": "The authenticated scan does not require superuser access, but without it some system details are hidden, which may make the scanning results incomplete.", "content.title_authenticated_scanning_000ED2C": "Managing credentials", "content.p_authenticated_scanning_00025AE": "Follow security policies and procedures of your organization when setting up the authenticated scanning.", "content.p_authenticated_scanning_0009FAA": "It is up to the organization to perform a risk assessment and evaluate the need to split the systems into smaller groups with different credentials for scanning. From the technical point of view, it is possible to configure single credentials for the whole group of scans or for each scan separately.", "content.p_authenticated_scanning_0003400": "Using a single user that is dedicated to authenticated scanning has its pros and cons. It can be set up, identified in logs, and deactivated if it is misbehaving. On the other hand, if a threat actor gains access to the account, they would gain access to a significant number of assets.", "content.p_authenticated_scanning_000DA41": "We do not recommend that you disable the user that is used for authenticated scans outside the scan schedule. Based on our experience, it does not improve the security posture significantly but can cause issues when the scanning takes longer than expected or scan has to be redone, for example.", "desc": [ "content.note_authenticated_scanning_000D32C", "content.p_authenticated_scanning_0008523", "content.title_authenticated_scanning_000C61F", "content.p_authenticated_scanning_000CAA4", "content.p_authenticated_scanning_000E17F", "content.p_authenticated_scanning_000878D", "content.title_authenticated_scanning_000B740", "content.p_authenticated_scanning_00002E9", "content.note_authenticated_scanning_000EDBA", "content.p_authenticated_scanning_000DFAC", "content.title_authenticated_scanning_000ED2C", "content.p_authenticated_scanning_00025AE", "content.p_authenticated_scanning_0009FAA", "content.p_authenticated_scanning_0003400", "content.p_authenticated_scanning_000DA41" ] }, "windows_authenticated_scanning_winrm-latest-en.json": { "title": "title_windows_authenticated_sc_09EE9", "title_windows_authenticated_sc_09EE9": "Windows authenticated scanning (WinRM)", "shortdesc": "shortdesc_windows_authenticated_sc_0A352", "shortdesc_windows_authenticated_sc_0A352": "Prepares your internal network for authenticated scanning using Windows Remote Management (WinRM). ", "content.p_windows_authenticated_sc_0CA8E": "WithSecure Elements Exposure Management supports two ways of authenticating to Windows systems:", "step.step_windows_authenticated_sc_08B48": "If the scan node is deployed on a Windows computer, use the scan node service account credentials (recommended)", "step.step_windows_authenticated_sc_07033": "Specify credentials explicitly in WithSecure Elements Security Center", "content.p_windows_authenticated_sc_0E3CD": "WithSecure Elements Exposure Management uses WinRM to check for missing Windows patches and detect vulnerabilities related to common third-party software. WinRM obtains the list of Windows patches from Windows Update Agent using one of the following sources:", "choice.choice_windows_authenticated_sc_06BA5": "Microsoft's own Windows Update Service (internet access required)", "choice.choice_windows_authenticated_sc_07CA9": "An internal network WSUS service", "choice.choice_windows_authenticated_sc_0C80F": "A Windows Updates database file", "content.p_windows_authenticated_sc_02B14": "These options can be turned on or off in the WithSecure Elements Exposure Management scan templates.", "content.p_windows_authenticated_sc_04A92": "If you choose the first option (Windows Update Service), you can also select the Check for other Microsoft products option. This allows you to retrieve updates not only for Windows systems, but also for other Microsoft products (such as Microsoft Office).", "content.note_windows_authenticated_sc_094EE": "Note: Windows 10, Windows Server 2016, or newer target systems that do not have the Receive updates for other Microsoft products when you update Windows option turned on in Windows Update settings may not include the service required for finding updates for other Microsoft products. To mitigate this, Elements Exposure Management adds the service source ID to the target if necessary. Although Elements Exposure Management cannot undo this change, it does not affect any functionality of Windows Update Service or the settings for automatic updates on a scanned machine.", "content.p_windows_authenticated_sc_0D0C1": "The third option (Windows Updates database file) can be used as a failover option if the target Windows systems do not have network access to Windows Update Service or WSUS. If it is taken into use, WithSecure Elements Exposure Management can check for missing Windows patches by uploading the Windows Updates database file (wsusscn2.cab) onto the target system's temp folder (%SystemRoot%\\Temp\\MBSA\\Cache\\). Once uploaded, WUA uses this file to check for missing Windows patches without accessing the internet.", "content.p_windows_authenticated_sc_06A1F": "Besides checking for missing Windows patches, WithSecure Elements Exposure Management also detects vulnerabilities related to common third-party software. WinRM fetches the list of third-party software from Windows Registry.", "desc": [ "content.p_windows_authenticated_sc_0CA8E", { "steps.ul_windows_authenticated_sc_0FF1E": [ "step.step_windows_authenticated_sc_08B48", "step.step_windows_authenticated_sc_07033" ] }, "content.p_windows_authenticated_sc_0E3CD", { "choices.ul_windows_authenticated_sc_0B099": [ "choice.choice_windows_authenticated_sc_06BA5", "choice.choice_windows_authenticated_sc_07CA9", "choice.choice_windows_authenticated_sc_0C80F" ] }, "content.p_windows_authenticated_sc_02B14", "content.p_windows_authenticated_sc_04A92", "content.note_windows_authenticated_sc_094EE", "content.p_windows_authenticated_sc_0D0C1", "content.p_windows_authenticated_sc_06A1F" ] }, "was_winrm_configuration-latest-en.json": { "title": "title_was_winrm_configuration_00F8CE", "title_was_winrm_configuration_00F8CE": "Preparing for Windows authenticated scanning (WinRM)", "shortdesc": "shortdesc_was_winrm_configuration_00E9A6", "shortdesc_was_winrm_configuration_00E9A6": "Before applying changes, WithSecure recommends that you discuss all potential changes with your network administrator. ", "content.p_was_winrm_configuration_00AB82": "The following summarizes the requirements for enabling WinRM authenticated scanning for Windows:", "subchoice.choice_was_winrm_configuration_00632D": "Local user account added to the Administrators group", "step.step_was_winrm_configuration_007F67": "If a Linux scan node is in use, a user account must meet the following requirement:", "subchoice.choice_was_winrm_configuration_00C7C0": "An Active Directory user account added to the Administrators group", "subchoice.choice_was_winrm_configuration_00288C": "Local user account added to the Administrators group", "step.step_was_winrm_configuration_008FF4": "If a Windows scan node is in use, there are two options for user accounts:", "content.note_was_winrm_configuration_005D5E": "Note: For a scan node on Linux, we recommend that you use only HTTPS because of known authentication issues with unencrypted connections between Linux and Windows.", "subchoice.choice_was_winrm_configuration_005398": "WinRM service is running and WinRM HTTP or HTTPS listener is created", "subchoice.choice_was_winrm_configuration_00D051": "Operating systems with Windows Firewall with Advanced Security component installed (introduced in Windows Vista), where a firewall exception for WinRM traffic is enabled", "subchoice.choice_was_winrm_configuration_000DC4": "Basic authentication allowed on the WinRM service (for scan nodes deployed on Linux only)", "step.step_was_winrm_configuration_001647": "Target host configuration requirements:", "subchoice.choice_was_winrm_configuration_00EDD0": "For HTTP protocol only: target host is added to the TrustedHosts list", "step.step_was_winrm_configuration_006A97": "Scan node configuration requirements:", "content.note_was_winrm_configuration_0077CC": "Note: When a Windows Updates database file is used for scanning, the scan node will copy the database file to the %SystemRoot%\\Temp\\MBSA\\Cache\\ folder during the scan and delete it once the scan has completed (for scan nodes deployed on Windows only).", "content.p_was_winrm_configuration_0020A5": "Most of the configuration commands require a PowerShell console run with administrative privileges.", "desc": [ "content.p_was_winrm_configuration_00AB82", { "steps.ul_was_winrm_configuration_0065E3": [ "step.step_was_winrm_configuration_007F67", { "subchoices.ul_was_winrm_configuration_0002E5": [ "subchoice.choice_was_winrm_configuration_00632D" ] }, "step.step_was_winrm_configuration_008FF4", { "subchoices.ul_was_winrm_configuration_00BA36": [ "subchoice.choice_was_winrm_configuration_00C7C0", "subchoice.choice_was_winrm_configuration_00288C" ] }, "step.step_was_winrm_configuration_001647", { "subchoices.ul_was_winrm_configuration_00A046": [ "subchoice.choice_was_winrm_configuration_005398", "content.note_was_winrm_configuration_005D5E", "subchoice.choice_was_winrm_configuration_00D051", "subchoice.choice_was_winrm_configuration_000DC4" ] }, "step.step_was_winrm_configuration_006A97", { "subchoices.ul_was_winrm_configuration_00E152": [ "subchoice.choice_was_winrm_configuration_00EDD0" ] } ] }, "content.note_was_winrm_configuration_0077CC", "content.p_was_winrm_configuration_0020A5" ] }, "was_updating_powershell-latest-en.json": { "title": "title_was_updating_powershell_005BEF", "title_was_updating_powershell_005BEF": "Update PowerShell", "shortdesc": "shortdesc_was_updating_powershell_00272F", "shortdesc_was_updating_powershell_00272F": "The configuration requires PowerShell version 5.0 or newer, although we recommend updating PowerShell to the latest version. ", "content.p_was_updating_powershell_00AB98": "To check the PowerShell version and update it:", "step.step_was_updating_powershell_00C4D3": "Open a PowerShell console with administrative privileges.", "content.p_was_updating_powershell_00622F": "Get-Host | Select-Object Version", "step.step_was_updating_powershell_00C112": "Run the following command to check the installed version of PowerShell:", "content.p_was_updating_powershell_00F202": "PowerShell 5.0 or later is installed.", "step.step_was_updating_powershell_00A928": "If the reported version is earlier than 5.0, download and install PowerShell 5.0 or later from Microsoft Download Center.", "step.step_was_updating_powershell_00C522": "Restart the computer.", "desc": [ "content.p_was_updating_powershell_00AB98", { "steps.steps_was_updating_powershell_00DA07": [ "step.step_was_updating_powershell_00C4D3", "step.step_was_updating_powershell_00C112", "content.p_was_updating_powershell_00622F", "step.step_was_updating_powershell_00A928", "content.p_was_updating_powershell_00F202", "step.step_was_updating_powershell_00C522" ] } ] }, "was_winrm_create_account-latest-en.json": { "title": "title_was_winrm_create_account_0BA57", "title_was_winrm_create_account_0BA57": "Create a dedicated user account", "shortdesc": "shortdesc_was_winrm_create_account_023FE", "shortdesc_was_winrm_create_account_023FE": "We recommend that you create a dedicated user account for Elements Exposure Management with access to WinRM. ", "content.p_was_winrm_create_account_03F0F": "To create a new user account:", "step.step_was_winrm_create_account_0E86D": "Go to Control Panel > Administrative Tools > Computer Management > Local Users and Groups > Users.", "step.step_was_winrm_create_account_0E54B": "Add a new user account.", "step.step_was_winrm_create_account_0685A": "Add the new user account to the Administrators group.", "desc": [ "content.p_was_winrm_create_account_03F0F", { "steps.steps_was_winrm_create_account_0AE60": [ "step.step_was_winrm_create_account_0E86D", "step.step_was_winrm_create_account_0E54B", "step.step_was_winrm_create_account_0685A" ] } ] }, "was_configuring_winrm_http-latest-en.json": { "title": "title_was_configuring_winrm_ht_09506", "title_was_configuring_winrm_ht_09506": "Configure the WinRM service to use HTTP on individual hosts", "shortdesc": "shortdesc_was_configuring_winrm_ht_0CAA2", "shortdesc_was_configuring_winrm_ht_0CAA2": "You can configure the WinRM service used for authenticated scanning to handle network traffic over HTTP. ", "content.note_http_recommendation": "Note: Using HTTP for WinRM is not recommended outside a domain environment where the NTLM protocol does not provide a sufficient level of protection for credentials. This also means that using HTTP is particularly inadequate when using scan nodes that are deployed on Linux computers.", "content.note_was_configuring_winrm_ht_0C877": "Note: In larger domain environments, it is highly recommended to configure the WinRM service via Group Policy.", "content.p_was_configuring_winrm_ht_08AC8": "Set-WSManQuickConfig –Force", "content.note_was_configuring_winrm_ht_0E3A5": "Note: If the computer is on a public network, use the additional -SkipNetworkProfileCheck parameter, which enables a firewall rule for public networks.", "content.p_was_configuring_winrm_ht_015F3": "This command ensures that the WinRM service is running and is set up to start automatically, creates an HTTP listener to accept WinRM requests, and creates a firewall exception for WinRM traffic.", "step.step_was_configuring_winrm_ht_00C71": "On the target computer where you want to run the WinRM service, run the following command to set up the remote management configuration:", "content.p_was_configuring_winrm_ht_02714": "Set-Item WSMan:\\localhost\\Client\\TrustedHosts -Value '{IpAddress}'", "content.note_was_configuring_winrm_ht_08A62": "Note: Use the IP address of the target computer. Use the wildcard character (*) instead of an IP address to add all computers.", "step.step_scan_node_trustedhosts": "On the scan node, run the following command to add the target host to the TrustedHosts list:", "desc": [ "content.note_http_recommendation", "content.note_was_configuring_winrm_ht_0C877", { "steps.steps_was_configuring_winrm_ht_011B0": [ "step.step_was_configuring_winrm_ht_00C71", "content.p_was_configuring_winrm_ht_08AC8", "content.note_was_configuring_winrm_ht_0E3A5", "content.p_was_configuring_winrm_ht_015F3", "step.step_scan_node_trustedhosts", "content.p_was_configuring_winrm_ht_02714", "content.note_was_configuring_winrm_ht_08A62" ] } ] }, "was_configuring_winrm_http_gpo-latest-en.json": { "title": "title_was_configuring_winrm_ht_04438", "title_was_configuring_winrm_ht_04438": "Configure the WinRM service to use HTTP through GPO", "shortdesc": "shortdesc_was_configuring_winrm_ht_068B5", "shortdesc_was_configuring_winrm_ht_068B5": "For larger domain environments, we recommend that you configure the WinRM service via Group Policy. ", "content.note_was_configuring_winrm_ht_0D751": "Note: Using HTTP for WinRM is not recommended outside a domain environment where the NTLM protocol does not provide a sufficient level of protection for credentials. This also means that using HTTP is particularly inadequate when using scan nodes that are deployed on Linux computers.", "substep.substep_was_configuring_winrm_ht_01C34": "Select Start > Administrative Tools > Group Policy Management.", "substep.substep_was_configuring_winrm_ht_0B676": "Right-click Domains and select Create a GPO in this domain, and link it here.", "substep.substep_was_configuring_winrm_ht_0FD54": "Enter Elements Exposure Management as the required name and click OK.", "substep.substep_was_configuring_winrm_ht_0E1D9": "Right-click the GPO that you created (Elements Exposure Management) and select Edit.", "step.step_was_configuring_winrm_ht_054F0": "Create a new Group Policy object:", "substep.substep_was_configuring_winrm_ht_094F4": "Select Computer Configuration > Policies > Administrative Templates > Windows Components > Windows Remote Management (WinRM) > WinRM Service.", "substep.substep_was_configuring_winrm_ht_023D6": "Right-click Allow remote server management through WinRM, select Enabled, and enter suitable IPv4 and IPv6 filters.", "step.step_was_configuring_winrm_ht_0F133": "Allow remote server management through WinRM:", "substep.substep_was_configuring_winrm_ht_02A34": "Select Computer Configuration > Preferences > Control Panel Settings.", "substep.substep_was_configuring_winrm_ht_04CD9": "Right-click Services and select New > Service.", "substep.substep_was_configuring_winrm_ht_07FFA": "Select Automatic as the Startup type and WinRM as the ServiceName.", "step.step_was_configuring_winrm_ht_04968": "Switch on the WinRM service:", "substep.substep_was_configuring_winrm_ht_01C6B": "Select Computer Configuration > Policies > Windows Settings > Security Settings > Windows Firewall with Advanced Security.", "substep.substep_was_configuring_winrm_ht_02D25": "Right-click Inbound Rules and select New Rule.", "substep.substep_was_configuring_winrm_ht_0AE1A": "Select Windows Remote Management as the Predefined rule type and click Next.", "substep.substep_was_configuring_winrm_ht_0287F": "Select the appropriate rule for your network profile and click Next.", "substep.substep_was_configuring_winrm_ht_0CD63": "Select Allow the connection and click Finish.", "step.step_was_configuring_winrm_ht_00F1D": "Add a firewall rule to allow traffic:", "content.p_was_configuring_winrm_ht_0D272": "Set-Item WSMan:\\localhost\\Client\\TrustedHosts -Value '{IpAddress}'", "content.note_was_configuring_winrm_ht_06FC6": "Note: Use the IP address of the target computer. Use the wildcard character (*) instead of an IP address to add all computers.", "step.step_was_configuring_winrm_ht_06733": "On the scan node, run the following command to add the target host to the TrustedHosts list:", "desc": [ "content.note_was_configuring_winrm_ht_0D751", { "steps.steps_was_configuring_winrm_ht_00D04": [ "step.step_was_configuring_winrm_ht_054F0", { "substeps.substepsalpha_wasalpha_configuringalpha_winrmalpha_htalpha_0782B": [ "substep.substep_was_configuring_winrm_ht_01C34", "substep.substep_was_configuring_winrm_ht_0B676", "substep.substep_was_configuring_winrm_ht_0FD54", "substep.substep_was_configuring_winrm_ht_0E1D9" ] }, "step.step_was_configuring_winrm_ht_0F133", { "substeps.substepsalpha_wasalpha_configuringalpha_winrmalpha_htalpha_073A0": [ "substep.substep_was_configuring_winrm_ht_094F4", "substep.substep_was_configuring_winrm_ht_023D6" ] }, "step.step_was_configuring_winrm_ht_04968", { "substeps.substepsalpha_wasalpha_configuringalpha_winrmalpha_htalpha_0238C": [ "substep.substep_was_configuring_winrm_ht_02A34", "substep.substep_was_configuring_winrm_ht_04CD9", "substep.substep_was_configuring_winrm_ht_07FFA" ] }, "step.step_was_configuring_winrm_ht_00F1D", { "substeps.substepsalpha_wasalpha_configuringalpha_winrmalpha_htalpha_07DE7": [ "substep.substep_was_configuring_winrm_ht_01C6B", "substep.substep_was_configuring_winrm_ht_02D25", "substep.substep_was_configuring_winrm_ht_0AE1A", "substep.substep_was_configuring_winrm_ht_0287F", "substep.substep_was_configuring_winrm_ht_0CD63" ] }, "step.step_was_configuring_winrm_ht_06733", "content.p_was_configuring_winrm_ht_0D272", "content.note_was_configuring_winrm_ht_06FC6" ] } ], "related": [ "was_troubleshooting_winrm-latest-en" ] }, "was_configure_winrm_service-latest-en.json": { "title": "title_was_configure_winrm_serv_018E2", "title_was_configure_winrm_serv_018E2": "Configure the WinRM service to use HTTPS with a publicly signed certificate", "shortdesc": "shortdesc_was_configure_winrm_serv_016C0", "shortdesc_was_configure_winrm_serv_016C0": "After creating the dedicated WinRM user account for Elements Exposure Management, you need to configure the WinRM service on the machine where you want to run it. ", "content.p_was_configure_winrm_serv_047F3": "You have already created the dedicated WinRM user account for Elements Exposure Management.", "content.p_was_configure_winrm_serv_09823": "To set up the remote management configuration on a computer that uses a publicly signed certificate:", "content.p_was_configure_winrm_serv_0AAC8": "Set-WSManQuickConfig -UseSSL -Force", "content.note_was_configure_winrm_serv_0D20E": "Note: When the computer is on a public network, use the additional -SkipNetworkProfileCheck parameter , which enables a firewall rule for public networks as well.", "content.p_was_configure_winrm_serv_07FA1": "This command ensures that the WinRM service is running and is set up to start automatically, creates an HTTPS listener to accept WinRM requests, and creates a firewall exception for WinRM traffic.", "step.step_was_configure_winrm_serv_0CE2A": "Run the following command:", "content.p_was_configure_winrm_serv_0303E": "winrm set winrm/config/service/auth '@{Basic=\"true\"}'", "step.step_was_configure_winrm_serv_0D812": "If you are using Linux scan nodes, enable WinRM basic authentication:", "desc": [ "content.p_was_configure_winrm_serv_047F3", "content.p_was_configure_winrm_serv_09823", { "steps.steps_was_configure_winrm_serv_083B1": [ "step.step_was_configure_winrm_serv_0CE2A", "content.p_was_configure_winrm_serv_0AAC8", "content.note_was_configure_winrm_serv_0D20E", "content.p_was_configure_winrm_serv_07FA1", "step.step_was_configure_winrm_serv_0D812", "content.p_was_configure_winrm_serv_0303E" ] } ], "related": [ "was_troubleshooting_winrm-latest-en" ] }, "was_configure_winrm_service_certificate-latest-en.json": { "title": "title_was_configure_winrm_serv_0D41B", "title_was_configure_winrm_serv_0D41B": "Configure the WinRM service to use HTTPS without a publicly signed certificate", "shortdesc": "shortdesc_was_configure_winrm_serv_03C2E", "shortdesc_was_configure_winrm_serv_03C2E": "If the computer does not use a publicly signed certificate, you need to perform some additional steps. ", "content.p_was_configure_winrm_serv_0407A": "On a computer running Windows 8, Windows Server 2012, or newer that does not use a publicly signed certificate, do all the following steps on the target Windows computer using PowerShell:", "content.p_was_configure_winrm_serv_02E2B": "Set-Service -Name \"WinRM\" -StartupType Automatic -Status Running", "step.step_was_configure_winrm_serv_0AA96": "Start the WinRM service and set it to start automatically:", "content.p_was_configure_winrm_serv_09BE5": "$Cert = New-SelfSignedCertificate -CertstoreLocation ^
Cert:\\LocalMachine\\My -DnsName \"{ipAddress}\"", "substep.substep_was_configure_winrm_serv_02CE4": "Use the following PowerShell command to create the certificate:", "content.p_was_configure_winrm_serv_03242": "$cert.Thumbprint", "substep.substep_was_configure_winrm_serv_01AD0": "Use the following command to check the certificate's thumbprint, which you need when creating the WSMan HTTPS listener:", "step.step_was_configure_winrm_serv_08A88": "Generate a new self-signed certificate:", "content.p_was_configure_winrm_serv_02C8F": "New-Item -Path WSMan:\\LocalHost\\Listener -Transport HTTPS -Address * ^
-CertificateThumbPrint $Cert.Thumbprint –Force", "step.step_was_configure_winrm_serv_00C88": "Add a new WSMan HTTPS listener:", "content.p_was_configure_winrm_serv_0CBB7": "New-NetFirewallRule -DisplayName \"Windows Remote Management ^
(HTTPS-In)\" -Name \"Windows Remote Management (HTTPS-In)\" -Profile ^
Any -LocalPort 5986 -Protocol TCP", "step.step_was_configure_winrm_serv_0A3CC": "Add a new firewall rule to allow WinRM HTTPS traffic:", "content.p_was_configure_winrm_serv_08A80": "winrm set winrm/config/service/auth '@{Basic=\"true\"}'", "step.step_was_configure_winrm_serv_0742C": "If you are using Linux scan nodes, run the following PowerShell command on the target Windows computer to allow basic WinRM authentication:", "desc": [ "content.p_was_configure_winrm_serv_0407A", { "steps.steps_was_configure_winrm_serv_0A81A": [ "step.step_was_configure_winrm_serv_0AA96", "content.p_was_configure_winrm_serv_02E2B", "step.step_was_configure_winrm_serv_08A88", { "substeps.substepsalpha_wasalpha_configurealpha_winrmalpha_servalpha_06688": [ "substep.substep_was_configure_winrm_serv_02CE4", "content.p_was_configure_winrm_serv_09BE5", "substep.substep_was_configure_winrm_serv_01AD0", "content.p_was_configure_winrm_serv_03242" ] }, "step.step_was_configure_winrm_serv_00C88", "content.p_was_configure_winrm_serv_02C8F", "step.step_was_configure_winrm_serv_0A3CC", "content.p_was_configure_winrm_serv_0CBB7", "step.step_was_configure_winrm_serv_0742C", "content.p_was_configure_winrm_serv_08A80" ] } ], "related": [ "was_troubleshooting_winrm-latest-en", "was_configure_winrm_cert_legacy_os-latest-en" ] }, "was_configure_winrm_cert_legacy_os-latest-en.json": { "title": "title_was_configure_winrm_cert_031F8", "title_was_configure_winrm_cert_031F8": "Configure the WinRM service to use HTTPS without a publicly signed certificate on older Windows versions", "shortdesc": "shortdesc_was_configure_winrm_cert_0B7D7", "shortdesc_was_configure_winrm_cert_0B7D7": "On Windows versions older than Windows 8 or Windows Server 2012, configure the WinRM service to use HTTPS by importing a certificate created on a newer computer.", "content.p_was_configure_winrm_cert_01581": "You have created a certificate on a separate computer running Windows 8, Windows Server 2012, or newer, using the IP address of this target computer, and exported it to a file.", "content.p_was_configure_winrm_cert_00388": "On a target computer running a Windows version older than Windows 8 or Windows Server 2012 that does not use a publicly signed certificate, do all the following steps:", "content.p_was_configure_winrm_cert_0301A": "Set-Service -Name \"WinRM\" -StartupType Automatic -Status Running", "step.step_was_configure_winrm_cert_06F31": "Start the WinRM service and set it to start automatically:", "content.note_was_configure_winrm_cert_02A4F": "Note: To view certificates in the local machine store, you must use administrator privileges.", "substep.substep_was_configure_winrm_cert_0AD0A": "Type mmc and press Enter.", "substep.substep_was_configure_winrm_cert_00B29": "Select File > Add/Remove Snap In.", "substep.substep_was_configure_winrm_cert_00569": "In the Available snap-ins dialog box, select Certificates.", "substep.substep_was_configure_winrm_cert_085E1": "Click Add.", "substep.substep_was_configure_winrm_cert_0360D": "In the Certificates snap-in dialog box, select Computer account and then click Next.", "substep.substep_was_configure_winrm_cert_0D0BC": "In the Select Computer dialog box, click Finish.", "substep.substep_was_configure_winrm_cert_08389": "In the Add/Remove Snap-in dialog box, click OK.", "substep.substep_was_configure_winrm_cert_00800": "Select Certificates (Local Computer) > Personal, right-click and select All Tasks > Import.", "substep.substep_was_configure_winrm_cert_04BA1": "Browse for the copied certificate, then click Next.", "substep.substep_was_configure_winrm_cert_0E58E": "Enter the password for the certificate, then click Next.", "substep.substep_was_configure_winrm_cert_061B1": "Click Finish.", "step.step_was_configure_winrm_cert_0635E": "Copy the exported certificate to the target computer and import it into the Personal certificate store:", "content.p_was_configure_winrm_cert_0FE0B": "New-Item -Path WSMan:\\LocalHost\\Listener -Transport HTTPS -Address * ^
-CertificateThumbPrint $Cert.Thumbprint –Force", "step.step_was_configure_winrm_cert_06144": "Add a new WSMan HTTPS listener:", "substep.substep_was_configure_winrm_cert_0C0D1": "Go to Control Panel > Windows Firewall > Advanced settings.", "substep.substep_was_configure_winrm_cert_04433": "Add a new rule for inbound traffic that allows TCP port 5986 for the selected network profiles.", "step.step_was_configure_winrm_cert_0B23B": "Add a new firewall rule to allow WinRM HTTPS traffic:", "content.p_was_configure_winrm_cert_04D7E": "winrm set winrm/config/service/auth '@{Basic=\"true\"}'", "step.step_was_configure_winrm_cert_06DB3": "If you are using Linux scan nodes, run the following PowerShell command on the target Windows computer to allow basic WinRM authentication:", "desc": [ "content.p_was_configure_winrm_cert_01581", "content.p_was_configure_winrm_cert_00388", { "steps.steps_was_configure_winrm_cert_0F0EF": [ "step.step_was_configure_winrm_cert_06F31", "content.p_was_configure_winrm_cert_0301A", "step.step_was_configure_winrm_cert_0635E", "content.note_was_configure_winrm_cert_02A4F", { "substeps.substepsalpha_wasalpha_configurealpha_winrmalpha_certalpha_068EC": [ "substep.substep_was_configure_winrm_cert_0AD0A", "substep.substep_was_configure_winrm_cert_00B29", "substep.substep_was_configure_winrm_cert_00569", "substep.substep_was_configure_winrm_cert_085E1", "substep.substep_was_configure_winrm_cert_0360D", "substep.substep_was_configure_winrm_cert_0D0BC", "substep.substep_was_configure_winrm_cert_08389", "substep.substep_was_configure_winrm_cert_00800", "substep.substep_was_configure_winrm_cert_04BA1", "substep.substep_was_configure_winrm_cert_0E58E", "substep.substep_was_configure_winrm_cert_061B1" ] }, "step.step_was_configure_winrm_cert_06144", "content.p_was_configure_winrm_cert_0FE0B", "step.step_was_configure_winrm_cert_0B23B", { "substeps.substepsalpha_wasalpha_configurealpha_winrmalpha_certalpha_03B4D": [ "substep.substep_was_configure_winrm_cert_0C0D1", "substep.substep_was_configure_winrm_cert_04433" ] }, "step.step_was_configure_winrm_cert_06DB3", "content.p_was_configure_winrm_cert_04D7E" ] } ], "related": [ "was_troubleshooting_winrm-latest-en", "was_create_export_certificate_legacy_os-latest-en" ] }, "was_create_export_certificate_legacy_os-latest-en.json": { "title": "title_was_create_export_certif_05D23", "title_was_create_export_certif_05D23": "Create and export a certificate for a legacy Windows target", "shortdesc": "shortdesc_was_create_export_certif_09221", "shortdesc_was_create_export_certif_09221": "Windows versions older than Windows 8 or Windows Server 2012 cannot create a self-signed certificate locally, so create one on a separate, newer computer and export it to a file.", "content.p_was_create_export_certif_0D8A0": "You need a computer running Windows 8, Windows Server 2012, or newer.", "content.p_was_create_export_certif_0D852": "Use the IP address of the target computer.", "content.p_was_create_export_certif_0635E": "$cert = New-SelfSignedCertificate -CertstoreLocation ^
Cert:\\LocalMachine\\My -DnsName \"{ipAddress}\"
$password = ConvertTo-SecureString -String \"{password}\" -Force ^
-AsPlainText
Export-PfxCertificate -Cert $cert -FilePath \"{filePath}\" -Password ^
$password", "step.step_was_create_export_certif_04DA8": "On the separate computer, run the following commands:", "content.p_was_create_export_certif_0DC99": "The certificate is exported to the specified file, ready to copy to the target computer.", "desc": [ "content.p_was_create_export_certif_0D8A0", "content.p_was_create_export_certif_0D852", { "steps.steps_was_create_export_certif_07F9E": [ "step.step_was_create_export_certif_04DA8", "content.p_was_create_export_certif_0635E" ] }, "content.p_was_create_export_certif_0DC99" ] }, "was_troubleshooting_winrm-latest-en.json": { "title": "title_was_troubleshooting_winr_0AE16", "title_was_troubleshooting_winr_0AE16": "Troubleshoot Windows authenticated scanning (WinRM)", "shortdesc": "shortdesc_was_troubleshooting_winr_0E00E", "shortdesc_was_troubleshooting_winr_0E00E": "It is recommended that you verify the functionality of the new account from a remote host before using the account for Windows authenticated scanning. ", "content.note_was_troubleshooting_winr_02DBD": "Note: Run the following commands directly on the target machine. This verifies that Windows Remote Management (WinRM) is configured properly on that machine and has sufficient permissions so that Windows is ready for the authenticated scan.", "content.p_was_troubleshooting_winr_06D3A": "Get-Host | Select-Object Version", "step.step_was_troubleshooting_winr_01BAC": "Make sure that PowerShell 5 or newer is installed:", "content.p_was_troubleshooting_winr_077DD": "(Get-PSSessionConfiguration -Name Microsoft.PowerShell).Permission", "step.step_was_troubleshooting_winr_0FE38": "Check the WinRM permissions for user groups or the individual user account:", "content.p_was_troubleshooting_winr_0B0B0": "Get-Service -Name \"WinRM\"", "step.step_was_troubleshooting_winr_0DEFB": "Make sure that the WinRM service is running:", "content.p_was_troubleshooting_winr_02E5E": "winrm enumerate winrm/config/listener", "step.step_was_troubleshooting_winr_06CBF": "Make sure that the WinRM HTTPS listener is configured:", "content.p_was_troubleshooting_winr_02756": "winrm get winrm/config/service", "step.step_was_troubleshooting_winr_01CB8": "Check the detailed WinRM configuration:", "content.note_was_troubleshooting_winr_0EBEF": "Note: If possible, run this command on a machine with Scan Node Agent installed. This shows you if it is possible to set the remote session and run the command from a Scan Node to a target Windows IP ($ip) using the credentials for the authenticated scan account.", "content.p_was_troubleshooting_winr_01147": "$ip = \"{ip}\"
$user = \"{username}\"
$pass = \"{password}\" | ConvertTo-SecureString -AsPlainText -Force
$cred = New-Object System.Management.Automation.PSCredential ($user, $pass)
$pso = New-PSSessionOption -SkipCACheck -SkipCNCheck
Invoke-Command -ComputerName $ip -Credential $cred -Authentication Negotiate -Port 5986 -UseSSL -SessionOption $pso {
if ((Get-Item -Path 'HKLM:\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion').Property.Contains('ProductName'))
{
(Get-ItemProperty -Path 'HKLM:\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion' -Name 'ProductName').ProductName
}
}", "subchoice.choice_was_troubleshooting_winr_08E22": "Windows scan node with explicit credentials and WinRM HTTPS listener in use:", "content.p_was_troubleshooting_winr_0B21F": "$ip = \"{ip}\"
$user = \"{username}\"
$pass = \"{password}\" | ConvertTo-SecureString -AsPlainText -Force
$cred = New-Object System.Management.Automation.PSCredential ($user, $pass)
$pso = New-PSSessionOption -SkipCACheck -SkipCNCheck
Invoke-Command -ComputerName $ip -Credential $cred -Authentication Basic -Port 5986 -UseSSL -SessionOption $pso {
if ((Get-Item -Path 'HKLM:\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion').Property.Contains('ProductName'))
{
(Get-ItemProperty -Path 'HKLM:\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion' -Name 'ProductName').ProductName
}
}", "subchoice.choice_was_troubleshooting_winr_0D9AF": "Linux scan node with explicit credentials and WinRM HTTPS listener in use:", "content.p_was_troubleshooting_winr_0A004": "$ip = \"{ip}\"
$user = \"{username}\"
$pass = \"{password}\" | ConvertTo-SecureString -AsPlainText -Force
$cred = New-Object System.Management.Automation.PSCredential ($user, $pass)
$pso = New-PSSessionOption -SkipCACheck -SkipCNCheck
Invoke-Command -ComputerName $ip -Credential $cred -Authentication Negotiate -Port 5985 -SessionOption $pso {
if ((Get-Item -Path 'HKLM:\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion').Property.Contains('ProductName'))
{
(Get-ItemProperty -Path 'HKLM:\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion' -Name 'ProductName').ProductName
}
}", "subchoice.choice_was_troubleshooting_winr_05065": "Windows scan node with explicit credentials and WinRM HTTP listener in use:", "content.p_was_troubleshooting_winr_0A6A8": "$ip = \"{ip}\"
$pso = New-PSSessionOption -SkipCACheck -SkipCNCheck
Invoke-Command -ComputerName $ip -Authentication NegotiateWithImplicitCredential -Port 5986 -UseSSL -SessionOption $pso {
if ((Get-Item -Path 'HKLM:\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion').Property.Contains('ProductName'))
{
(Get-ItemProperty -Path 'HKLM:\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion' -Name 'ProductName').ProductName
}
}", "subchoice.choice_was_troubleshooting_winr_043FA": "Windows scan node with scan node service account credentials and WinRM HTTPS listener in use:", "content.p_was_troubleshooting_winr_0A5AB": "$ip = \"{ip}\"
$pso = New-PSSessionOption -SkipCACheck -SkipCNCheck
Invoke-Command -ComputerName $ip -Authentication NegotiateWithImplicitCredential -Port 5985 -SessionOption $pso {
if ((Get-Item -Path 'HKLM:\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion').Property.Contains('ProductName'))
{
(Get-ItemProperty -Path 'HKLM:\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion' -Name 'ProductName').ProductName
}
}", "subchoice.choice_was_troubleshooting_winr_04CED": "Windows scan node with scan node service account credentials and WinRM HTTP listener in use:", "content.p_was_troubleshooting_winr_0BEC7": "Each of these scripts outputs the OS version of the target host.", "step.step_was_troubleshooting_winr_0994B": "Run the corresponding PowerShell script for your configuration from a remote host (for example, from the WithSecure Elements Scan Node if possible):", "content.note_was_troubleshooting_winr_0AC9E": "Note: Known issues:", "desc": [ "content.note_was_troubleshooting_winr_02DBD", { "steps.steps_was_troubleshooting_winr_046F0": [ "step.step_was_troubleshooting_winr_01BAC", "content.p_was_troubleshooting_winr_06D3A", "step.step_was_troubleshooting_winr_0FE38", "content.p_was_troubleshooting_winr_077DD", "step.step_was_troubleshooting_winr_0DEFB", "content.p_was_troubleshooting_winr_0B0B0", "step.step_was_troubleshooting_winr_06CBF", "content.p_was_troubleshooting_winr_02E5E", "step.step_was_troubleshooting_winr_01CB8", "content.p_was_troubleshooting_winr_02756", "step.step_was_troubleshooting_winr_0994B", "content.note_was_troubleshooting_winr_0EBEF", { "subchoices.choices_was_troubleshooting_winr_099C3": [ "subchoice.choice_was_troubleshooting_winr_08E22", "content.p_was_troubleshooting_winr_01147", "subchoice.choice_was_troubleshooting_winr_0D9AF", "content.p_was_troubleshooting_winr_0B21F", "subchoice.choice_was_troubleshooting_winr_05065", "content.p_was_troubleshooting_winr_0A004", "subchoice.choice_was_troubleshooting_winr_043FA", "content.p_was_troubleshooting_winr_0A6A8", "subchoice.choice_was_troubleshooting_winr_04CED", "content.p_was_troubleshooting_winr_0A5AB" ] }, "content.p_was_troubleshooting_winr_0BEC7" ] }, "content.note_was_troubleshooting_winr_0AC9E" ] }, "windows_authenticated_scanning-latest-en.json": { "title": "title_windows_authenticated_sc_0B2CB", "title_windows_authenticated_sc_0B2CB": "Windows authenticated scanning (RPC)", "shortdesc": "shortdesc_windows_authenticated_sc_067A3", "shortdesc_windows_authenticated_sc_067A3": "Prepares your internal network for authenticated scanning using Remote Procedure Call (RPC), a deprecated method being replaced by WinRM. ", "content.note_windows_authenticated_sc_034DF": "Warning: The authenticated scanning using RPC is a deprecated method for Windows authenticated scanning. This authentication method will be decommissioned soon, and we do not recommend its use any more. We suggest that you start using Windows authenticated scanning (WinRM) instead.", "content.p_windows_authenticated_sc_02644": "WithSecure Elements Exposure Management support two ways of authenticating to Windows systems:", "step.step_windows_authenticated_sc_0E583": "Use the scan node service account credentials (recommended)", "step.step_windows_authenticated_sc_0728E": "Specify credentials explicitly in WithSecure Elements Security Center", "content.p_windows_authenticated_sc_0F70C": "WithSecure Elements Exposure Management uses Windows Update Agent API (WUA) to check for missing Windows patches. To check which patches are missing, WUA must get the list of available patches from one of the following sources:", "choice.choice_windows_authenticated_sc_04B3B": "Microsoft's own Windows Update Service (internet access required)", "choice.choice_windows_authenticated_sc_06E81": "An internal network WSUS service", "choice.choice_windows_authenticated_sc_0D1A1": "A Windows Updates database file", "content.p_windows_authenticated_sc_077EF": "The first two options (Windows Update Service and WSUS) can be turned on or off in the WithSecure Elements Exposure Management scan templates. If allowed, the scanned Windows system will decide (based on its configuration) which of the two methods to use.", "content.p_windows_authenticated_sc_03E57": "The third option (Windows Updates database file) can be used as a failover option if the target Windows systems do not have network access to Windows Update Service or WSUS. When it is on, WithSecure Elements Exposure Management can check for missing Windows patches by uploading the Windows Updates database file (wsusscn2.cab) onto the target system's temp folder (%SystemRoot%\\Temp\\MBSA\\Cache\\). Once uploaded, WUA uses this file to check for missing Windows patches without accessing the internet.", "content.p_windows_authenticated_sc_087C0": "Besides checking for missing Windows patches, WithSecure Elements Exposure Management can also detect vulnerabilities related to common third-party software. The list of third-party software is fetched from Windows Registry. You must give the scan node the permission to read registry keys and turn on Remote Registry Service on the target Windows systems to use this feature.", "desc": [ "content.note_windows_authenticated_sc_034DF", "content.p_windows_authenticated_sc_02644", { "steps.ul_windows_authenticated_sc_078E0": [ "step.step_windows_authenticated_sc_0E583", "step.step_windows_authenticated_sc_0728E" ] }, "content.p_windows_authenticated_sc_0F70C", { "choices.ul_windows_authenticated_sc_040EA": [ "choice.choice_windows_authenticated_sc_04B3B", "choice.choice_windows_authenticated_sc_06E81", "choice.choice_windows_authenticated_sc_0D1A1" ] }, "content.p_windows_authenticated_sc_077EF", "content.p_windows_authenticated_sc_03E57", "content.p_windows_authenticated_sc_087C0" ], "related": [ "windows_authenticated_scanning_winrm-latest-en" ] }, "was_configuration-latest-en.json": { "title": "title_was_configuration_000001_565EB", "title_was_configuration_000001_565EB": "Preparing for Windows authenticated scanning (RPC)", "shortdesc": "shortdesc_was_configuration_000002_8550B", "shortdesc_was_configuration_000002_8550B": "Before applying changes, WithSecure recommends that you discuss all potential changes to the Group Policy with your network administrator. For more information about Group Policy, refer to your Microsoft documentation on Group Policy deployment. ", "content.p_was_configuration_000010_7A666": "The following summarizes the requirements for enabling authenticated scanning for Windows:", "subchoice.choice_was_configuration_000014_21008": "An Active Directory user account added to the local administrators group (recommended)", "subchoice.choice_was_configuration_000015_3CC77": "Built-in administrator user account", "subchoice.choice_was_configuration_000016_4798C": "Local user account added to local administrators group with Admin Approval Mode disabled", "step.step_was_configuration_000012_A9C65": "A user account must meet one of the following requirements:", "subchoice.choice_was_configuration_00001A_86EDB": "Inbound network traffic to the RPC Endpoint Mapper", "subchoice.choice_was_configuration_00001B_795DB": "Inbound network traffic to the RPC Dynamic Ports", "subchoice.choice_was_configuration_00001C_FCC0D": "Inbound network traffic to TCP 445 (SMB / CIFS) and TCP 135 (RPC)", "subsubchoice.choice_was_configuration_00001F_9B298": "Enable Remote Registry Service (or allow the scan node to start the service automatically during the scan)", "subsubchoice.choice_was_configuration_000020_EF95A": "Grant read access to registry keys", "subchoice.choice_was_configuration_00001D_C4651": "Optional (only required to check for vulnerabilities in third-party software):", "content.note_was_configuration_000029_D3771": "Note: During the scan, the scan node will copy the database file to the %SystemRoot%\\Temp\\MBSA\\Cache\\ folder and delete it once the scan has completed.", "subsubchoice.choice_was_configuration_000023_ABF86": "The network share name ADMIN$ must point to %SystemRoot% (e.g. C:\\Windows). Use the net share command to verify this.", "subchoice.choice_was_configuration_000021_A0179": "Optional (only required when a Windows Updates database file is used for scanning):", "step.step_was_configuration_000018_8C755": "Windows configuration requirements (preferably managed via GPOs)", "desc": [ "content.p_was_configuration_000010_7A666", { "steps.ul_was_configuration_000011_5D8DB": [ "step.step_was_configuration_000012_A9C65", { "subchoices.ul_was_configuration_000013_EB929": [ "subchoice.choice_was_configuration_000014_21008", "subchoice.choice_was_configuration_000015_3CC77", "subchoice.choice_was_configuration_000016_4798C" ] }, "step.step_was_configuration_000018_8C755", { "subchoices.ul_was_configuration_000019_C5BAE": [ "subchoice.choice_was_configuration_00001A_86EDB", "subchoice.choice_was_configuration_00001B_795DB", "subchoice.choice_was_configuration_00001C_FCC0D", "subchoice.choice_was_configuration_00001D_C4651", { "subsubchoices.ul_was_configuration_00001E_C4A4A": [ "subsubchoice.choice_was_configuration_00001F_9B298", "subsubchoice.choice_was_configuration_000020_EF95A" ] }, "subchoice.choice_was_configuration_000021_A0179", { "subsubchoices.ul_was_configuration_000022_42B2D": [ "subsubchoice.choice_was_configuration_000023_ABF86", "content.note_was_configuration_000029_D3771" ] } ] } ] } ] }, "was_create_domain_account-latest-en.json": { "title": "title_was_create_domain_accoun_034B8", "title_was_create_domain_accoun_034B8": "Create a Windows domain account", "shortdesc": "shortdesc_was_create_domain_accoun_05F8C", "shortdesc_was_create_domain_accoun_05F8C": "To create a new domain account, you may use the command given here, which must be executed using administrator credentials. ", "content.p_was_create_domain_accoun_03197": "Windows authenticated scanning uses a dedicated domain account to log in to the scanned systems, separate from your own administrator credentials.", "step.step_was_create_domain_accoun_093F3": "Log in as an administrator and open a command prompt with administrative privileges.", "content.p_was_create_domain_accoun_0BF79": "dsadd user \"cn=radar_account,cn=users,dc=ORGANIZATION,dc=COM\" -samid \\
radar_account -upn radar_account@ORGANIZATION.COM -pwd PASSWORD \\
-pwdneverexpires yes -mustchpwd no -fn radar_account -ln \\
fsecure_radar -display \"Radar Account\" -disabled no", "step.step_was_create_domain_accoun_0AD26": "Adjust the following command to fit your organization by replacing ORGANIZATION, COM, and PASSWORD with your domain components and a password, and then run it:", "step.step_was_create_domain_accoun_031E5": "If your organization\\'s password policy allows it, keep the -pwdneverexpires yes option in the command so that the account password does not expire.", "content.p_was_create_domain_accoun_013CA": "It is recommended that you use this domain account to run the Windows Service (WithSecure Elements Scan Node Agent) and authenticate to the scanned Windows systems.", "desc": [ "content.p_was_create_domain_accoun_03197", { "steps.steps_was_create_domain_accoun_00BFE": [ "step.step_was_create_domain_accoun_093F3", "step.step_was_create_domain_accoun_0AD26", "content.p_was_create_domain_accoun_0BF79", "step.step_was_create_domain_accoun_031E5" ] }, "content.p_was_create_domain_accoun_013CA" ] }, "was_disable_admin_approval-latest-en.json": { "title": "title_was_disable_admin_approv_01846", "title_was_disable_admin_approv_01846": "Disable Admin Approval Mode", "shortdesc": "shortdesc_was_disable_admin_approv_0ACE3", "shortdesc_was_disable_admin_approv_0ACE3": "This step can be skipped if you are using a domain account (recommended) or a built-in local administrator account to authenticate to Windows systems. ", "content.p_was_disable_admin_approv_04C6F": "This step is only required if WithSecure Elements Exposure Management is configured to use a local user account and added to the local administrator's group. To disable the Admin Approval Mode, do the following:", "step.step_was_disable_admin_approv_0104C": "Start secpol.msc.", "step.step_was_disable_admin_approv_016F5": "Go to Security Settings > Local Policies > Security Options and disable the User Account Control: Run all administrators in the Admin Approval Mode policy.", "step.step_was_disable_admin_approv_00671": "Restart the computer.", "desc": [ "content.p_was_disable_admin_approv_04C6F", { "steps.steps_was_disable_admin_approv_0B26C": [ "step.step_was_disable_admin_approv_0104C", "step.step_was_disable_admin_approv_016F5", "step.step_was_disable_admin_approv_00671" ] } ] }, "was_configure_gpo_policy-latest-en.json": { "title": "title_was_configure_gpo_policy_0ACDA", "title_was_configure_gpo_policy_0ACDA": "Group Policy best practices for authenticated scanning", "shortdesc": "shortdesc_was_configure_gpo_policy_03E13", "shortdesc_was_configure_gpo_policy_03E13": "The best practice Group Policy settings for authenticated scanning of Windows systems are described in this section. ", "content.p_was_configure_gpo_policy_0199A": "Consult your network administrator before changing Group Policy because the changes may affect network operations. The effect depends on your network configuration and security policy. Detailed documentation for many of the following settings is available online in the Group Policy Editor.", "content.note_was_configure_gpo_policy_0E247": "Important: We highly recommended that you discuss any potential changes to the Group Policy with your network administrator before implementing any alterations, as your local network configurations may depend on certain settings being in place. This service does not verify that these settings are appropriate for your network. If you do make any Group Policy changes, it may take several hours before the changes take effect on the client.", "content.p_was_configure_gpo_policy_01CB5": "For more information, see the Microsoft documentation on Group Policy deployment.", "content.p_was_configure_gpo_policy_08A5D": "It is recommended that you create a dedicated Windows user account (such as \"WithSecure_Elements_Vulnerability_Management_account\") to be used only by WithSecure VM scan nodes.", "desc": [ "content.p_was_configure_gpo_policy_0199A", "content.note_was_configure_gpo_policy_0E247", "content.p_was_configure_gpo_policy_01CB5", "content.p_was_configure_gpo_policy_08A5D" ] }, "was_create_gpo-latest-en.json": { "title": "title_was_create_gpo_000001_F355D540", "title_was_create_gpo_000001_F355D540": "Create a new Group Policy object", "shortdesc": "shortdesc_was_create_gpo_000002_05C3ADB3", "shortdesc_was_create_gpo_000002_05C3ADB3": "Create a Group Policy object (GPO) to apply the Windows authenticated scanning settings to the computers that Elements Exposure Management scans.", "content.p_was_create_gpo_000010_B4E3A8C1": "The GPO you create here holds the firewall, registry, and account settings needed for Windows authenticated scanning.", "step.step_was_create_gpo_000012_1DC7362D": "Go to Start > Administrative Tools > Group Policy Management.", "step.step_was_create_gpo_000018_82E6B2A5": "Right-click Domains and select Create a GPO in this domain, and link it here.", "step.step_was_create_gpo_00001C_16E5701D": "Enter Elements Exposure Management as the required name and click OK.", "content.p_was_create_gpo_000024_0BC88244": "You can now edit this GPO in the Group Policy Management Editor, where you should perform the next steps.", "step.step_was_create_gpo_000020_3E3B64B9": "Right-click the created GPO (Elements Exposure Management) and select Edit.", "content.p_was_create_gpo_000026_CFE646B5": "Remember to add all computers to be scanned to your security filtering.", "desc": [ "content.p_was_create_gpo_000010_B4E3A8C1", { "steps.steps_was_create_gpo_000011_41C20D6C": [ "step.step_was_create_gpo_000012_1DC7362D", "step.step_was_create_gpo_000018_82E6B2A5", "step.step_was_create_gpo_00001C_16E5701D", "step.step_was_create_gpo_000020_3E3B64B9", "content.p_was_create_gpo_000024_0BC88244" ] }, "content.p_was_create_gpo_000026_CFE646B5" ] }, "was_allow_traffic_rpc_endpoint_mapper-latest-en.json": { "title": "title_was_allow_traffic_rpc_en_02703", "title_was_allow_traffic_rpc_en_02703": "Add rule to allow traffic to the RPC Endpoint Mapper", "shortdesc": "shortdesc_was_allow_traffic_rpc_en_02E7C", "shortdesc_was_allow_traffic_rpc_en_02E7C": "Add a firewall rule that lets the scan node reach the RPC Endpoint Mapper on Windows targets scanned by Elements Exposure Management.", "step.step_was_allow_traffic_rpc_en_034F8": "Go to Computer Configuration > Policies > Windows Settings > Security Settings > Windows Firewall with Advanced Security > Windows Firewall with Advanced Security - LDAP > Inbound Rules.", "step.step_was_allow_traffic_rpc_en_067B0": "Right-click and choose New Rule.", "step.step_was_allow_traffic_rpc_en_021C1": "Choose Custom and click Next.", "step.step_was_allow_traffic_rpc_en_09C43": "Choose This Program Path and enter %systemroot%\\system32\\svchost.exe.", "step.step_was_allow_traffic_rpc_en_0B10D": "Choose Customize.", "step.step_was_allow_traffic_rpc_en_05EC9": "Choose Apply to this service, then select Remote Procedure Call (RPC) with the short name RpcSs and click OK.", "step.step_was_allow_traffic_rpc_en_05369": "Click Next and accept the pop-up warning.", "step.step_was_allow_traffic_rpc_en_02D61": "Select TCP as the Protocol type.", "step.step_was_allow_traffic_rpc_en_0B779": "Select RPC Endpoint Mapper as the Local Port and click Next.", "step.step_was_allow_traffic_rpc_en_096BF": "Specify the IP address of the scan node on the remote IP addresses list or choose Any IP address and then click Next.", "step.step_was_allow_traffic_rpc_en_0BE37": "Select Allow the connection and click Next.", "step.step_was_allow_traffic_rpc_en_05A57": "Select the checkboxes that fulfill the machine connection conditions and click Next.", "step.step_was_allow_traffic_rpc_en_083A7": "Specify Radar RPC Endpoint Mapper as the name and click Finish.", "desc": [ { "steps.steps_was_allow_traffic_rpc_en_08897": [ "step.step_was_allow_traffic_rpc_en_034F8", "step.step_was_allow_traffic_rpc_en_067B0", "step.step_was_allow_traffic_rpc_en_021C1", "step.step_was_allow_traffic_rpc_en_09C43", "step.step_was_allow_traffic_rpc_en_0B10D", "step.step_was_allow_traffic_rpc_en_05EC9", "step.step_was_allow_traffic_rpc_en_05369", "step.step_was_allow_traffic_rpc_en_02D61", "step.step_was_allow_traffic_rpc_en_0B779", "step.step_was_allow_traffic_rpc_en_096BF", "step.step_was_allow_traffic_rpc_en_0BE37", "step.step_was_allow_traffic_rpc_en_05A57", "step.step_was_allow_traffic_rpc_en_083A7" ] } ] }, "was_allow_traffic_rpc_dynamic_ports-latest-en.json": { "title": "title_was_allow_traffic_rpc_dy_04ACD", "title_was_allow_traffic_rpc_dy_04ACD": "Add rule to allow traffic to the RPC Dynamic Ports", "shortdesc": "shortdesc_was_allow_traffic_rpc_dy_0B77E", "shortdesc_was_allow_traffic_rpc_dy_0B77E": "Add a firewall rule that lets the scan node reach the RPC dynamic ports on Windows targets scanned by Elements Exposure Management.", "step.step_was_allow_traffic_rpc_dy_0B1B9": "Go to Computer Configuration > Policies > Windows Settings > Security Settings > Windows Firewall with Advanced Security > Windows Firewall with Advanced Security - LDAP > Inbound Rules.", "step.step_was_allow_traffic_rpc_dy_0A6CE": "Right-click and choose New Rule.", "step.step_was_allow_traffic_rpc_dy_037A8": "Choose Custom and click Next.", "step.step_was_allow_traffic_rpc_dy_06C9D": "Choose All programs and click Next.", "step.step_was_allow_traffic_rpc_dy_0BF01": "Select TCP as the Protocol type.", "step.step_was_allow_traffic_rpc_dy_0D9F2": "Select RPC Dynamic Ports as the Local Port and click Next.", "step.step_was_allow_traffic_rpc_dy_00562": "Specify the IP address of the scan node on the remote IP addresses list or choose Any IP address and then click Next.", "step.step_was_allow_traffic_rpc_dy_0BF74": "Select Allow the connection and click Next.", "step.step_was_allow_traffic_rpc_dy_090B3": "Select the checkboxes that fulfill the machine connection conditions and click Next.", "step.step_was_allow_traffic_rpc_dy_0168C": "Specify Radar RPC Dynamic Ports as the name and click Finish.", "desc": [ { "steps.steps_was_allow_traffic_rpc_dy_04EFF": [ "step.step_was_allow_traffic_rpc_dy_0B1B9", "step.step_was_allow_traffic_rpc_dy_0A6CE", "step.step_was_allow_traffic_rpc_dy_037A8", "step.step_was_allow_traffic_rpc_dy_06C9D", "step.step_was_allow_traffic_rpc_dy_0BF01", "step.step_was_allow_traffic_rpc_dy_0D9F2", "step.step_was_allow_traffic_rpc_dy_00562", "step.step_was_allow_traffic_rpc_dy_0BF74", "step.step_was_allow_traffic_rpc_dy_090B3", "step.step_was_allow_traffic_rpc_dy_0168C" ] } ] }, "was_allow_traffic_smb_cifs_rpc-latest-en.json": { "title": "title_was_allow_traffic_smb_ci_07AD5", "title_was_allow_traffic_smb_ci_07AD5": "Add rule to allow traffic to SMB/CIFS and RPC", "shortdesc": "shortdesc_was_allow_traffic_smb_ci_06DFA", "shortdesc_was_allow_traffic_smb_ci_06DFA": "Add a firewall rule that opens the SMB/CIFS and RPC ports on Windows targets scanned by Elements Exposure Management.", "content.p_was_allow_traffic_smb_ci_0A1FD": "To add a firewall rule to allow TCP/445 (SMB/CIFS) and TCP/135 (RPC):", "step.step_was_allow_traffic_smb_ci_0C4D8": "Go to Computer Configuration > Policies > Windows Settings > Security Settings > Windows Firewall with Advanced Security > Windows Firewall with Advanced Security - LDAP > Inbound Rules.", "step.step_was_allow_traffic_smb_ci_02D96": "Right-click and choose New Rule.", "step.step_was_allow_traffic_smb_ci_0DEC5": "Choose Port and click Next.", "step.step_was_allow_traffic_smb_ci_0F66A": "Choose TCP and at specific local ports enter 135, 445, then click Next.", "step.step_was_allow_traffic_smb_ci_064DC": "Select Allow the connection and click Next.", "step.step_was_allow_traffic_smb_ci_062AF": "Choose Domain (or other, depending on your knowledge), then click Next.", "step.step_was_allow_traffic_smb_ci_012DE": "Specify Radar Scanning as the name and click Finish.", "desc": [ "content.p_was_allow_traffic_smb_ci_0A1FD", { "steps.steps_was_allow_traffic_smb_ci_02A2D": [ "step.step_was_allow_traffic_smb_ci_0C4D8", "step.step_was_allow_traffic_smb_ci_02D96", "step.step_was_allow_traffic_smb_ci_0DEC5", "step.step_was_allow_traffic_smb_ci_0F66A", "step.step_was_allow_traffic_smb_ci_064DC", "step.step_was_allow_traffic_smb_ci_062AF", "step.step_was_allow_traffic_smb_ci_012DE" ] } ] }, "was_enable_remote_registry-latest-en.json": { "title": "title_was_enable_remote_regist_0AD0D", "title_was_enable_remote_regist_0AD0D": "Enable Remote Registry service", "shortdesc": "shortdesc_was_enable_remote_regist_05FF1", "shortdesc_was_enable_remote_regist_05FF1": "Enable the Remote Registry service on Windows targets so that Elements Exposure Management can read their registry during authenticated scans.", "content.p_was_enable_remote_regist_046E2": "To configure the Remote Registry service:", "step.step_was_enable_remote_regist_0BEE4": "Log on using an account with local administrator rights.", "step.step_was_enable_remote_regist_06003": "Press the Windows key + R to open the Run command window.", "step.step_was_enable_remote_regist_0E0D9": "Type services.msc and press Enter.", "step.step_was_enable_remote_regist_0F94A": "Right-click Remote Registry service and then select Properties from the menu", "step.step_was_enable_remote_regist_01A70": "In the General tab, open the Startup Type drop-down menu and select Automatic.", "step.step_was_enable_remote_regist_02B9D": "Select Apply and then select Start.", "content.p_was_enable_remote_regist_03329": "The Remote Registry service is enabled and running.", "step.step_was_enable_remote_regist_0580D": "Click OK after the Remote Registry service has started.", "desc": [ "content.p_was_enable_remote_regist_046E2", { "steps.steps_was_enable_remote_regist_089F6": [ "step.step_was_enable_remote_regist_0BEE4", "step.step_was_enable_remote_regist_06003", "step.step_was_enable_remote_regist_0E0D9", "step.step_was_enable_remote_regist_0F94A", "step.step_was_enable_remote_regist_01A70", "step.step_was_enable_remote_regist_02B9D", "step.step_was_enable_remote_regist_0580D", "content.p_was_enable_remote_regist_03329" ] } ] }, "was_grant_read_access_registry_keys-latest-en.json": { "title": "title_was_grant_read_access_re_06EE6", "title_was_grant_read_access_re_06EE6": "Grant read access to registry keys", "shortdesc": "shortdesc_was_grant_read_access_re_02FAD", "shortdesc_was_grant_read_access_re_02FAD": "Grant the scan account read access to the Windows registry keys that Elements Exposure Management needs for authenticated scanning.", "content.p_was_grant_read_access_re_090A9": "You have already created and selected the domain or local user account that is used to authenticate to the target Windows systems.", "step.step_was_grant_read_access_re_0CB00": "Go to Computer Configuration > Policies > Windows Settings > Security Settings > Registry.", "step.step_was_grant_read_access_re_016F9": "Right-click and select Add.", "step.step_was_grant_read_access_re_069C9": "Select MACHINE\\System\\CurrentControlSet\\Control\\SecurePipeServers\\winreg.", "step.step_was_grant_read_access_re_0664F": "Add read permission for the already selected (domain or local) user account used to authenticate to Windows systems.", "step.step_was_grant_read_access_re_087A9": "Click OK and select Propagate inheritable permissions to all sub keys.", "step.step_was_grant_read_access_re_0F2C3": "Click OK.", "desc": [ "content.p_was_grant_read_access_re_090A9", { "steps.steps_was_grant_read_access_re_0618B": [ "step.step_was_grant_read_access_re_0CB00", "step.step_was_grant_read_access_re_016F9", "step.step_was_grant_read_access_re_069C9", "step.step_was_grant_read_access_re_0664F", "step.step_was_grant_read_access_re_087A9", "step.step_was_grant_read_access_re_0F2C3" ] } ] }, "was_adding_scan_node-latest-en.json": { "title": "title_was_adding_scan_node_000008254", "title_was_adding_scan_node_000008254": "Add a scan node to the domain", "shortdesc": "shortdesc_was_adding_scan_node_000007F95", "shortdesc_was_adding_scan_node_000007F95": "To run Windows authenticated scans, the scan node must belong to your domain and use the scan account as a local administrator.", "content.p_was_adding_scan_node_00000DF59": "The scan node must be a part of your domain and the Radar_account must be set as a local administrator on the scan node.", "content.p_was_adding_scan_node_00001C13D": "To do this, enable the following settings:", "step.step_was_adding_scan_node_00001C5C6": "Open Administrative Tools > Group Policy Management and select your domain.", "step.step_was_adding_scan_node_00001AFA6": "Right-click and select Create a GPO in this domain, and link it here.", "step.step_was_adding_scan_node_00001F48B": "Enter a name, for example Scannode-Admin, and click OK.", "step.step_was_adding_scan_node_00001BBE7": "Select the created GPO and add the computer on which the scan node will be running to the proper Security Filtering.", "step.step_was_adding_scan_node_00002235A": "Right-click and select Edit.", "substep.substep_was_adding_scan_node_00002A717": "Go to Computer Configuration > Policies > Windows Settings > Security Settings > Restricted Groups.", "substep.substep_was_adding_scan_node_000030C6A": "Right-click and select Add Group.", "substep.substep_was_adding_scan_node_00003FC7E": "Select Administrators and click OK.", "substep.substep_was_adding_scan_node_000035CD8": "Next to Members of this group, click Add.", "substep.substep_was_adding_scan_node_00003D59F": "Browse for the user to be used for running the scan node and accept it.", "substep.substep_was_adding_scan_node_000036CCF": "Refresh the GPO by running gpupdate.exe.", "step.step_was_adding_scan_node_0000281D3": "Edit the GPO in the Group Policy Management Editor:", "desc": [ "content.p_was_adding_scan_node_00000DF59", "content.p_was_adding_scan_node_00001C13D", { "steps.steps_was_adding_scan_node_000019ACA": [ "step.step_was_adding_scan_node_00001C5C6", "step.step_was_adding_scan_node_00001AFA6", "step.step_was_adding_scan_node_00001F48B", "step.step_was_adding_scan_node_00001BBE7", "step.step_was_adding_scan_node_00002235A", "step.step_was_adding_scan_node_0000281D3", { "substeps.substepsalpha_wasalpha_addingalpha_scanalpha_nodealpha_000021807": [ "substep.substep_was_adding_scan_node_00002A717", "substep.substep_was_adding_scan_node_000030C6A", "substep.substep_was_adding_scan_node_00003FC7E", "substep.substep_was_adding_scan_node_000035CD8", "substep.substep_was_adding_scan_node_00003D59F", "substep.substep_was_adding_scan_node_000036CCF" ] } ] } ] }, "was_configure_security_center-latest-en.json": { "title": "title_was_configure_security_c_08273", "title_was_configure_security_c_08273": "Configure a network scan template for Windows authenticated scanning", "shortdesc": "shortdesc_was_configure_security_c_0E50B", "shortdesc_was_configure_security_c_0E50B": "Configure a network scan template in Elements Security Center to run Windows authenticated scans with Windows credentials.", "content.p_was_configure_security_c_0E56F": "You have already created the domain account, the Group Policy object (GPO), and the required firewall rules for Windows authenticated scanning.", "step.step_was_configure_security_c_09269": "Log in to Elements Security Center.", "step.step_was_configure_security_c_034D3": "Go to Templates and open the Network scan templates tab.", "step.step_was_configure_security_c_0D132": "Select Add network scan template or select the menu icon in the Actions column and select Edit to edit an existing template.", "step.step_was_configure_security_c_077E2": "Select Windows credentials from the Authentication method drop-down menu.", "subchoice.choice_was_configure_security_c_048B5": "Use the scan node's service account", "subchoice.choice_was_configure_security_c_097C4": "Specify credentials explicitly", "step.step_was_configure_security_c_0A97F": "Specify which credentials should be used:", "subchoice.choice_was_configure_security_c_06A90": "Microsoft Update Server or Windows Server Update Services (WSUS)", "subchoice.choice_was_configure_security_c_0B127": "Windows Updates database file", "content.p_was_configure_security_c_08922": "If Windows Updates database file is enabled, you must also specify a network share where the Windows patch database can be uploaded.", "step.step_was_configure_security_c_05990": "Choose which sources the WUA can use when checking the Windows system for missing patches:", "step.step_was_configure_security_c_02EC3": "Apply the scan configuration to a scan group or an individual scan target and run the scan.", "desc": [ "content.p_was_configure_security_c_0E56F", { "steps.steps_was_configure_security_c_0BAB4": [ "step.step_was_configure_security_c_09269", "step.step_was_configure_security_c_034D3", "step.step_was_configure_security_c_0D132", "step.step_was_configure_security_c_077E2", "step.step_was_configure_security_c_0A97F", { "subchoices.choices_was_configure_security_c_0B692": [ "subchoice.choice_was_configure_security_c_048B5", "subchoice.choice_was_configure_security_c_097C4" ] }, "step.step_was_configure_security_c_05990", { "subchoices.choices_was_configure_security_c_079CD": [ "subchoice.choice_was_configure_security_c_06A90", "subchoice.choice_was_configure_security_c_0B127" ] }, "content.p_was_configure_security_c_08922", "step.step_was_configure_security_c_02EC3" ] } ], "related": [ "was_troubleshooting-latest-en" ] }, "was_troubleshooting-latest-en.json": { "title": "title_was_troubleshooting_0000017B28", "title_was_troubleshooting_0000017B28": "Troubleshoot Windows authenticated scanning (RPC)", "shortdesc": "shortdesc_was_troubleshooting_000002596E", "shortdesc_was_troubleshooting_000002596E": "It is recommended that you verify the functionality of the new account from a remote host before using the account for Windows authenticated scanning (RPC). ", "content.p_was_troubleshooting_00000E9585": "The scanning engine requires access to the network share and the registry to perform authenticated scanning of Windows hosts.", "content.note_was_troubleshooting_00000FFF54": "Note: It may take several hours before Group Policy changes take effect.", "content.p_was_troubleshooting_0000134B27": "telnet TARGET_IP 135
telnet TARGET_IP 445", "content.p_was_troubleshooting_0000152C4C": "When a connection is made, you can send any information and the connection will be closed.", "step.step_was_troubleshooting_00001194BD": "Run the following command from the scan node to verify connectivity to the target system that you are trying to scan:", "content.p_was_troubleshooting_000019BFFD": "Before testing access to the Remote Registry service, ensure that you have already tested the access to the network shares. Run the following PowerShell script to test the Remote Registry access:", "content.p_was_troubleshooting_00001C12DE": "$Target = \"IP_ADDRESS\"
$Reg = [Microsoft.Win32.RegistryKey]::OpenRemoteBaseKey('LocalMachine', $Target)
$RegKey= $Reg.OpenSubKey(\"SOFTWARE\\\\Microsoft\\\\Windows NT\\\\CurrentVersion\")
$Result = $RegKey.GetValue(\"ProductName\")
echo $Result", "content.p_was_troubleshooting_00001E5ABF": "If the test was successful, the command should return the operating system name.", "step.step_was_troubleshooting_000016580F": "Test access to the Remote Registry service.", "content.p_was_troubleshooting_0000219B38": "When the authenticated scan has finished, it is possible to check if authentication was successful or not by reviewing the informational finding named Microsoft Windows authentication succeeded/failed. The Findings field displays useful information if the authentication failed.", "step.step_was_troubleshooting_00001FFF96": "Test the authenticated scan.", "content.note_was_troubleshooting_0000254F91": "Note: Known issues:
Scanning for Windows updates fails on Windows 10 (versions 1703, 1709 and 1803)
Due to a bug related to accessing WMI remotely in these versions of Windows 10, scanning for Windows updates may fail. It results in the Microsoft Windows authentication failed (1013914) finding in the System Scan report and Access is denied (0x80070005) errors in the System Scan log file. To solve the issue, install the recent cumulative update on the target machine. The issue is not present in the earlier and later versions of Windows 10.
", "desc": [ "content.p_was_troubleshooting_00000E9585", "content.note_was_troubleshooting_00000FFF54", { "steps.steps_was_troubleshooting_000010A856": [ "step.step_was_troubleshooting_00001194BD", "content.p_was_troubleshooting_0000134B27", "content.p_was_troubleshooting_0000152C4C", "step.step_was_troubleshooting_000016580F", "content.p_was_troubleshooting_000019BFFD", "content.p_was_troubleshooting_00001C12DE", "content.p_was_troubleshooting_00001E5ABF", "step.step_was_troubleshooting_00001FFF96", "content.p_was_troubleshooting_0000219B38" ] }, "content.note_was_troubleshooting_0000254F91" ] }, "linux_authenticated_scanning-latest-en.json": { "title": "title_linux_authenticated_scan_04983", "title_linux_authenticated_scan_04983": "Linux authenticated scanning", "shortdesc": "shortdesc_linux_authenticated_scan_0A0C9", "shortdesc_linux_authenticated_scan_0A0C9": "Configuring Elements Exposure Management to run Linux authenticated scans using SSH for more detailed system information. ", "content.p_linux_authenticated_scan_02F03": "By default, WithSecure Elements Exposure Management runs scans over the network in an unauthenticated context and detects issues based on the exposed services on a given host. Although a lot of information can be collected over the network, it is not as detailed as gathering information from a so-called authenticated context. With Linux authenticated scanning, WithSecure Elements Exposure Management is able to authenticate using SSH and gather more detailed information about the system.", "content.title_linux_authenticated_scan_0A4D5": "Prerequisites", "content.p_linux_authenticated_scan_070DF": "The following WithSecure Elements Exposure Management components are required to perform Linux authenticated scanning:", "step.step_linux_authenticated_scan_01649": "WithSecure Elements Scan Node version 2.3.2.646 or higher. To check the version number, go to the tray application of the scan node, under Security Configurations, select Scans and then the Settings tab and find the SCANNODE.ScanNodeVersion key. You can also check the version number in WithSecure Elements Security Center by going to Scan nodes and expanding the details for a scan node.", "content.p_linux_authenticated_scan_0B171": "Linux authenticated scanning in WithSecure Elements Exposure Management supports the following distributions:", "step.step_linux_authenticated_scan_061A3": "CentOS", "subchoice.choice_linux_authenticated_scan_0BAF2": "Testing release (bookworm)", "subchoice.choice_linux_authenticated_scan_0B7DE": "Unstable release (sid)", "subchoice.choice_linux_authenticated_scan_0A344": "Debian 11 (bullseye)", "subchoice.choice_linux_authenticated_scan_01D4E": "Debian 10 (buster)", "subchoice.choice_linux_authenticated_scan_08146": "Debian 9 (stretch)", "subchoice.choice_linux_authenticated_scan_03260": "Debian 8 (jessie)", "subchoice.choice_linux_authenticated_scan_0CE88": "Debian 7 (wheezy)", "step.step_linux_authenticated_scan_0EF6C": "Debian", "step.step_linux_authenticated_scan_0E50A": "Oracle Linux (version 5 and higher)", "step.step_linux_authenticated_scan_013BF": "Red Hat", "step.step_linux_authenticated_scan_05606": "Ubuntu 6.06 LTS and above", "step.step_linux_authenticated_scan_09871": "Amazon Linux", "step.step_linux_authenticated_scan_0B15F": "SUSE Linux 10 and above", "step.step_linux_authenticated_scan_045CE": "AlmaLinux", "desc": [ "content.p_linux_authenticated_scan_02F03", "content.title_linux_authenticated_scan_0A4D5", "content.p_linux_authenticated_scan_070DF", { "steps.ul_linux_authenticated_scan_08784": [ "step.step_linux_authenticated_scan_01649" ] }, "content.p_linux_authenticated_scan_0B171", { "steps.ul_linux_authenticated_scan_0BB3E": [ "step.step_linux_authenticated_scan_061A3", "step.step_linux_authenticated_scan_0EF6C", { "subchoices.ul_linux_authenticated_scan_09F33": [ "subchoice.choice_linux_authenticated_scan_0BAF2", "subchoice.choice_linux_authenticated_scan_0B7DE", "subchoice.choice_linux_authenticated_scan_0A344", "subchoice.choice_linux_authenticated_scan_01D4E", "subchoice.choice_linux_authenticated_scan_08146", "subchoice.choice_linux_authenticated_scan_03260", "subchoice.choice_linux_authenticated_scan_0CE88" ] }, "step.step_linux_authenticated_scan_0E50A", "step.step_linux_authenticated_scan_013BF", "step.step_linux_authenticated_scan_05606", "step.step_linux_authenticated_scan_09871", "step.step_linux_authenticated_scan_0B15F", "step.step_linux_authenticated_scan_045CE" ] } ] }, "las_preparation-latest-en.json": { "title": "title_las_preparation_000001_DD4880E", "title_las_preparation_000001_DD4880E": "Preparation steps", "shortdesc": "shortdesc_las_preparation_000002_A4989BB", "shortdesc_las_preparation_000002_A4989BB": "WithSecure Elements Exposure Management ensures that the credentials needed to perform authenticated scans are stored in a safe manner. ", "content.p_las_preparation_00000F_854B38D": "Note that the steps in this section are only for setting up the secure credentials flow within WithSecure Elements Exposure Management; that is between the portal and a scan node. Credentials used for authentication to a target Linux system are described elsewhere in this documentation. Therefore, apart from this, you need to configure the authentication method as well.", "content.note_las_preparation_000012_478634E": "Note: While using the recommended key-based authentication, you need to secure a private key along with an optional passphrase. In an authenticated Linux scan, two key pairs are used: the first one is used to authenticate to the target system and the second one to secure the flow of the first key pair with the WithSecure Elements Exposure Management parts.", "content.p_las_preparation_000015_933958C": "Once credentials are sent to WithSecure Elements Exposure Management, they are encrypted with a public key and can only be decrypted directly on the scan node with a counterpart private key. This section describes how to configure the custom public/private keys.", "desc": [ "content.p_las_preparation_00000F_854B38D", "content.note_las_preparation_000012_478634E", "content.p_las_preparation_000015_933958C" ], "related": [ "las_authentication_methods-latest-en" ] }, "las_create_encryption_keys-latest-en.json": { "title": "title_las_create_encryption_ke_0544B", "title_las_create_encryption_ke_0544B": "Create new encryption keys", "shortdesc": "shortdesc_las_create_encryption_ke_0E163", "shortdesc_las_create_encryption_ke_0E163": "First, a public/private key pair has to be created and later installed in Elements Security Center and the scan node. ", "content.p_las_create_encryption_ke_0C50E": "The keys are used to establish an encrypted communication channel between Elements Security Center and the scan node in question.", "content.note_las_create_encryption_ke_0F40F": "Note: The steps given here are for creating the encryption keys on Windows computers. However, the same openssl commands for generating the keys should also work on Linux systems.", "step.step_las_create_encryption_ke_0ED9D": "Download the OpenSSL toolkit for Windows from the GnuWin32 OpenSSL package page.", "step.step_las_create_encryption_ke_06AE0": "Extract the zip file.", "content.p_las_create_encryption_ke_0FA00": "For example: cd x:\\openssl-{version}\\bin", "step.step_las_create_encryption_ke_0EFA0": "From the Windows command prompt, navigate to the bin directory inside the OpenSSL folder.", "content.p_las_create_encryption_ke_0ABEF": "Generate the private key:", "content.p_las_create_encryption_ke_05042": "openssl genpkey -algorithm RSA -out private_key.pem -pkeyopt rsa_keygen_bits:4096", "content.p_las_create_encryption_ke_0FAD1": "For older versions of OpenSSL, use the following command:", "content.p_las_create_encryption_ke_05A17": "openssl genrsa -out private_key.pem 4096", "content.p_las_create_encryption_ke_03FC6": "Extract the public key:", "content.p_las_create_encryption_ke_0F678": "openssl rsa -pubout -in private_key.pem -out public_key.pem", "step.step_las_create_encryption_ke_051B3": "Generate a public/private key pair by running the following commands:", "content.p_las_create_encryption_ke_0907B": "Next, upload the public key to Elements Security Center.", "desc": [ "content.p_las_create_encryption_ke_0C50E", "content.note_las_create_encryption_ke_0F40F", { "steps.steps_las_create_encryption_ke_006D4": [ "step.step_las_create_encryption_ke_0ED9D", "step.step_las_create_encryption_ke_06AE0", "step.step_las_create_encryption_ke_0EFA0", "content.p_las_create_encryption_ke_0FA00", "step.step_las_create_encryption_ke_051B3", "content.p_las_create_encryption_ke_0ABEF", "content.p_las_create_encryption_ke_05042", "content.p_las_create_encryption_ke_0FAD1", "content.p_las_create_encryption_ke_05A17", "content.p_las_create_encryption_ke_03FC6", "content.p_las_create_encryption_ke_0F678" ] }, "content.p_las_create_encryption_ke_0907B" ] }, "las_upload_public_key-latest-en.json": { "title": "title_las_upload_public_key_0000FCB7", "title_las_upload_public_key_0000FCB7": "Upload encryption keys to WithSecure Elements Security Center", "shortdesc": "shortdesc_las_upload_public_key_0000F5E5", "shortdesc_las_upload_public_key_0000F5E5": "Once the public/private key pair has been created, the public key can be uploaded to WithSecure Elements Security Center. ", "content.p_las_upload_public_key_00006F79": "You have already created the public/private key pair.", "content.p_las_upload_public_key_00001079": "Elements Security Center stores the public key and matches it by name to the corresponding private key uploaded to the scan node.", "step.step_las_upload_public_key_00001E62": "Log in to Elements Security Center.", "step.step_las_upload_public_key_0000145A": "Under Management, select Vulnerability Settings > General settings.", "step.step_las_upload_public_key_0000F064": "Open Encryption keys and click Add encryption key.", "content.note_las_upload_public_key_000036E4": "Note: The public key name that you enter in WithSecure Elements Security Center must match the name entered for the private key name on the scan node. Also, the entered name can only be a combination of numbers, letters and underscore characters (\"_\"). Other types of characters are not allowed. The key file names do not need to match the entered name value. However, the extension .pem is obligatory for both.", "content.p_las_upload_public_key_00005C4A": "This information is needed whenever you upload a new public key. The name value is used to identify which public and private keys belong together. We recommend using a descriptive name, as it helps you to distinguish the keys from other key pairs that you may want to use for other purposes.", "step.step_las_upload_public_key_0000F7B1": "Specify a name and a description (optional) for the public key.", "step.step_las_upload_public_key_0000069E": "Click Browse and select the file to upload.", "desc": [ "content.p_las_upload_public_key_00006F79", "content.p_las_upload_public_key_00001079", { "steps.steps_las_upload_public_key_0000BF42": [ "step.step_las_upload_public_key_00001E62", "step.step_las_upload_public_key_0000145A", "step.step_las_upload_public_key_0000F064", "step.step_las_upload_public_key_0000F7B1", "content.note_las_upload_public_key_000036E4", "content.p_las_upload_public_key_00005C4A", "step.step_las_upload_public_key_0000069E" ] } ] }, "las_upload_private_key-latest-en.json": { "title": "title_las_upload_private_key_000BE6F", "title_las_upload_private_key_000BE6F": "Upload encryption keys to WithSecure Elements VM scan node", "shortdesc": "shortdesc_las_upload_private_key_000CE9B", "shortdesc_las_upload_private_key_000CE9B": "After uploading the public key, you also need to upload the private key to the scan node that you want to use. ", "content.p_las_upload_private_key_00019E6": "You have already uploaded the public key to Elements Security Center.", "content.p_las_upload_private_key_0001ED5": "Elements Security Center only needs the public key; the scan node that runs the scan needs the matching private key to authenticate to Linux targets.", "step.step_las_upload_private_key_0001CCF": "Log in to the WithSecure Elements Vulnerability Management scan node.", "content.p_las_upload_private_key_0001E67": "You can find this via the Start Menu after unfolding the WithSecure group, or by launching F-Secure Radar.Scan.Daemon.Tray.exe, located in the scan node installation directory.", "content.note_las_upload_private_key_0008BD0": "Warning: Control Center has to be opened by a local administrator or have at least a SeImpersonatePrivilege to encrypt the private key.", "substep.substep_las_upload_private_key_000E62A": "Start the WithSecure Elements VM Scan Node - Control Center.", "substep.substep_las_upload_private_key_0003B27": "Go to the Encryption Keys tab and click Add.", "content.note_las_upload_private_key_000C8F1": "Note: The names of the public key and private key must match for the authentication to work.", "content.note_las_upload_private_key_0002BB9": "Note: Encryption keys are stored safely in a user account context. You will be asked for credentials to the account on which the scan node service is running, as this account might be different from the account that the Scan Node Control Center is running.", "substep.substep_las_upload_private_key_000B6FF": "Enter the same key name as used in Elements Security Center, upload the private key and click Save.", "step.step_las_upload_private_key_0002BA8": "For Windows scan nodes:", "content.note_las_upload_private_key_00095A4": "Note: Replace NameOfTheKeyPair with the name of your encryption keys from Elements Security Center.", "content.p_las_upload_private_key_0000A44": "cd /opt/f-secure/radar-scannodeagent
sudo ./ScanNodeAgent add-private-key NameOfTheKeyPair ./private_key.pem", "substep.substep_las_upload_private_key_000A366": "Run the following commands to apply an already generated private key, saved as ./private_key.pem:", "step.step_las_upload_private_key_000EC7A": "For Linux scan nodes:", "desc": [ "content.p_las_upload_private_key_00019E6", "content.p_las_upload_private_key_0001ED5", { "steps.steps_las_upload_private_key_000943B": [ "step.step_las_upload_private_key_0001CCF", "step.step_las_upload_private_key_0002BA8", { "substeps.substepsalpha_lasalpha_uploadalpha_privatealpha_keyalpha_0007FD4": [ "substep.substep_las_upload_private_key_000E62A", "content.p_las_upload_private_key_0001E67", "content.note_las_upload_private_key_0008BD0", "substep.substep_las_upload_private_key_0003B27", "substep.substep_las_upload_private_key_000B6FF", "content.note_las_upload_private_key_000C8F1", "content.note_las_upload_private_key_0002BB9" ] }, "step.step_las_upload_private_key_000EC7A", { "substeps.substepsalpha_lasalpha_uploadalpha_privatealpha_keyalpha_00039F1": [ "substep.substep_las_upload_private_key_000A366", "content.note_las_upload_private_key_00095A4", "content.p_las_upload_private_key_0000A44" ] } ] } ] }, "las_prepare_user_account-latest-en.json": { "title": "title_las_prepare_user_account_05A7A", "title_las_prepare_user_account_05A7A": "Prepare the user account for Linux authenticated scanning", "shortdesc": "shortdesc_las_prepare_user_account_0EF15", "shortdesc_las_prepare_user_account_0EF15": "To allow WithSecure Vulnerability Management to log on to a target Linux system, it is recommended to create a specific user account on each target to be scanned. ", "content.p_las_prepare_user_account_0D1B6": "This means that such a user account would be used only for scanning purposes.", "content.p_las_prepare_user_account_0F42E": "To create the user account:", "content.p_las_prepare_user_account_04805": "sudo useradd radar-user -m", "step.step_las_prepare_user_account_0FCB1": "Run the following command to create a new account:", "content.p_las_prepare_user_account_0A0DF": "radar-user ALL=(ALL) NOPASSWD: ALL", "step.step_las_prepare_user_account_08801": "Add the following line to the /etc/sudoers file to avoid the user form asking for a password:", "content.p_las_prepare_user_account_01FBA": "Defaults:radar-user !requiretty", "step.step_las_prepare_user_account_0F811": "Disable the requiretty option by adding the following line to the /etc/sudoers file:", "step.step_las_prepare_user_account_0F968": "Start the SSH service.", "content.p_las_prepare_user_account_0AE62": "The user account is ready to be used for authenticated scanning.", "desc": [ "content.p_las_prepare_user_account_0D1B6", "content.p_las_prepare_user_account_0F42E", { "steps.steps_las_prepare_user_account_004CB": [ "step.step_las_prepare_user_account_0FCB1", "content.p_las_prepare_user_account_04805", "step.step_las_prepare_user_account_08801", "content.p_las_prepare_user_account_0A0DF", "step.step_las_prepare_user_account_0F811", "content.p_las_prepare_user_account_01FBA", "step.step_las_prepare_user_account_0F968" ] }, "content.p_las_prepare_user_account_0AE62" ] }, "las_authentication_methods-latest-en.json": { "title": "title_las_authentication_metho_04976", "title_las_authentication_metho_04976": "Authentication methods", "shortdesc": "shortdesc_las_authentication_metho_07247", "shortdesc_las_authentication_metho_07247": "The scan nodes can log on to Linux systems using passwords or keys (recommended).", "content.p_las_authentication_metho_0F7EC": "Linux authenticated scanning supports two authentication methods: password authentication and key-based authentication. Key-based authentication is recommended. Configure the method that matches your environment.", "desc": [ "content.p_las_authentication_metho_0F7EC" ] }, "las_password_authentication-latest-en.json": { "title": "title_las_password_authenticat_04866", "title_las_password_authenticat_04866": "Set up password-based authentication", "shortdesc": "shortdesc_las_password_authenticat_07718", "shortdesc_las_password_authenticat_07718": "You need to configure all the Linux systems that should be scanned to allow password authentication over SSH. ", "content.p_las_password_authenticat_0511C": "You have already created the dedicated Linux user account for scanning and, if required, set up the credential encryption key in Elements Security Center.", "content.p_las_password_authenticat_008C0": "Password-based authentication is a less secure alternative to key-based authentication for Linux authenticated scanning; use it only when key-based authentication isn't an option.", "content.p_las_password_authenticat_051A0": "PasswordAuthentication yes", "step.step_las_password_authenticat_044B2": "Make sure that the following line is present in the /etc/ssh/sshd_config file:", "content.p_las_password_authenticat_0A520": "sudo passwd radar-user", "step.step_las_password_authenticat_02388": "Run the following command:", "step.step_las_password_authenticat_08867": "Under Security Configurations, select Scan Templates > Network scan templates.", "step.step_las_password_authenticat_0F152": "Create a new scan template or edit an existing one.", "step.step_las_password_authenticat_00D00": "Enable Linux authenticated scanning using a password as authentication method by selecting SSH with password and entering the target SSH port. Then, specify the credential encryption key, user name and password that were set up in the preparation steps.", "step.step_las_password_authenticat_0C25B": "Save the template.", "step.step_las_password_authenticat_094DA": "Under Security Configurations, select Scans > Network scans and in the Group view, find the scan group that you want to set up for authenticated scanning.", "step.step_las_password_authenticat_0F49E": "Click the menu icon and select Edit scan group.", "step.step_las_password_authenticat_00567": "Configure the scan group to use the scan node and template that has been prepared for Linux authenticated scanning.", "content.p_las_password_authenticat_05F84": "The scan group is configured for Linux authenticated scanning.", "step.step_las_password_authenticat_0440C": "Save the changes.", "desc": [ "content.p_las_password_authenticat_0511C", "content.p_las_password_authenticat_008C0", { "steps.steps_las_password_authenticat_03751": [ "step.step_las_password_authenticat_044B2", "content.p_las_password_authenticat_051A0", "step.step_las_password_authenticat_02388", "content.p_las_password_authenticat_0A520", "step.step_las_password_authenticat_08867", "step.step_las_password_authenticat_0F152", "step.step_las_password_authenticat_00D00", "step.step_las_password_authenticat_0C25B", "step.step_las_password_authenticat_094DA", "step.step_las_password_authenticat_0F49E", "step.step_las_password_authenticat_00567", "step.step_las_password_authenticat_0440C", "content.p_las_password_authenticat_05F84" ] } ], "related": [ "las_preparation-latest-en" ] }, "las_setup_ssh_keys-latest-en.json": { "title": "title_las_setup_ssh_keys_000001_4368", "title_las_setup_ssh_keys_000001_4368": "Set up SSH keys on the Linux system", "shortdesc": "shortdesc_las_setup_ssh_keys_000002_82AA", "shortdesc_las_setup_ssh_keys_000002_82AA": "Create an SSH key pair and configure the target Linux system to allow key-based login before setting up Linux authenticated scanning in Elements Security Center.", "content.p_las_setup_ssh_keys_00000D_9CDB": "You have already created the dedicated Linux user account for authenticated scanning and can log on to the target system with it.", "content.p_las_setup_ssh_keys_000014_05F9": "", "content.note_las_setup_ssh_keys_000015_8918": "Note: With OpenSSH version 7.8 or newer, use following command: ssh-keygen -t rsa -b 4096 -m PEM -f targetKey", "step.step_las_setup_ssh_keys_00000F_0C10": "Log on to the Linux system with the WithSecure Elements Exposure Management user account and create a new key pair using the following command: ssh-keygen -t rsa -b 4096 -f targetKey", "content.p_las_setup_ssh_keys_000020_02D8": "cd /home/radar-user/.ssh", "content.p_las_setup_ssh_keys_000022_F122": "touch authorized_keys", "content.p_las_setup_ssh_keys_000024_0E58": "chmod 600 authorized_keys", "content.p_las_setup_ssh_keys_000026_4F02": "cat targetKey.pub >> authorized_keys", "content.note_las_setup_ssh_keys_000029_7F19": "Note: To use the same key on several systems, you need to copy targetKey.pub there and repeat this step on each target.", "step.step_las_setup_ssh_keys_00001D_8D67": "Use the following command to add the new public key to the authorized_keys file:", "content.p_las_setup_ssh_keys_00002E_3785": "You can do this on Windows machines with the PuTTY app or on Linux by running the following command: ssh -i targetKey.pem radar-user@<target-ip>.", "step.step_las_setup_ssh_keys_00002B_4D14": "Verify that the key-based authentication works by logging in from a different system using the private key targetKey.pem.", "content.p_las_setup_ssh_keys_000017_A79C": "The file name of the private key must include the .pem extension. The key is generated in the correct format, so you only have to rename the file to add the extension: mv targetKey targetKey.pem.", "content.p_las_setup_ssh_keys_00001A_FC0A": "We recommend protecting the key with a passphrase.", "content.note_las_setup_ssh_keys_00001B_A7FC": "Tip: Alternatively, you can use the openssl command to create the encryption keys.", "content.p_las_setup_ssh_keys_000030_F9B7": "Key-based SSH login to the Linux system works.", "desc": [ "content.p_las_setup_ssh_keys_00000D_9CDB", { "steps.steps_las_setup_ssh_keys_00000E_307D": [ "step.step_las_setup_ssh_keys_00000F_0C10", "content.p_las_setup_ssh_keys_000014_05F9", "content.note_las_setup_ssh_keys_000015_8918", "step.step_las_setup_ssh_keys_00001D_8D67", "content.p_las_setup_ssh_keys_000020_02D8", "content.p_las_setup_ssh_keys_000022_F122", "content.p_las_setup_ssh_keys_000024_0E58", "content.p_las_setup_ssh_keys_000026_4F02", "content.note_las_setup_ssh_keys_000029_7F19", "step.step_las_setup_ssh_keys_00002B_4D14", "content.p_las_setup_ssh_keys_00002E_3785" ] }, "content.p_las_setup_ssh_keys_000017_A79C", "content.p_las_setup_ssh_keys_00001A_FC0A", "content.note_las_setup_ssh_keys_00001B_A7FC", "content.p_las_setup_ssh_keys_000030_F9B7" ], "related": [ "las_key_authentication-latest-en" ] }, "las_key_authentication-latest-en.json": { "title": "title_las_key_authentication_0008B68", "title_las_key_authentication_0008B68": "Configure key-based authentication in Elements Security Center", "shortdesc": "shortdesc_las_key_authentication_00013F9", "shortdesc_las_key_authentication_00013F9": "Enable key-based authentication for Linux authenticated scanning in Elements Security Center using the SSH key you created.", "content.p_las_key_authentication_00088B7": "You have set up SSH keys on the Linux system and verified that key-based login works.", "step.step_las_key_authentication_000BF5F": "Under Security Configurations, select Scan Templates > Network scan templates.", "step.step_las_key_authentication_0001D04": "Create a new scan template or edit an existing one.", "step.step_las_key_authentication_0008869": "Enable Linux authenticated scanning using keys as authentication method by selecting SSH with keys and entering the target SSH port. Then, specify the credential encryption key and the user name that were set up in the preparation steps. Finally, upload the private key that you created when you set up SSH keys on the Linux system, and enter its passphrase if available (in the SSH key password field).", "step.step_las_key_authentication_000B274": "Save the template.", "step.step_las_key_authentication_0003001": "Under Security Configurations, select Scans > Network scans and in the Group view, find the scan group that you want to set up for authenticated scanning.", "step.step_las_key_authentication_000EE92": "Click the menu icon and select Edit scan group.", "step.step_las_key_authentication_00065D1": "Configure the scan group to use the scan node and template that has been prepared for Linux authenticated scanning.", "content.p_scan_group_saved": "The scan group is configured for Linux authenticated scanning.", "step.step_las_key_authentication_0003D50": "Save the changes.", "desc": [ "content.p_las_key_authentication_00088B7", { "steps.steps_las_key_authentication_00000A6": [ "step.step_las_key_authentication_000BF5F", "step.step_las_key_authentication_0001D04", "step.step_las_key_authentication_0008869", "step.step_las_key_authentication_000B274", "step.step_las_key_authentication_0003001", "step.step_las_key_authentication_000EE92", "step.step_las_key_authentication_00065D1", "step.step_las_key_authentication_0003D50", "content.p_scan_group_saved" ] } ], "related": [ "las_preparation-latest-en" ] }, "las_troubleshooting-latest-en.json": { "title": "title_las_troubleshooting_000001EA07", "title_las_troubleshooting_000001EA07": "Troubleshooting", "shortdesc": "shortdesc_las_troubleshooting_0000022B23", "shortdesc_las_troubleshooting_0000022B23": "After a scan has completed with Linux authenticated scanning turned on, the scan report will contain an Informational finding, stating whether the scanning succeeded or failed. In the event of a failure, the Findings shows details about why the authenticated scanning failed.", "content.p_las_troubleshooting_0000124C34": "When a scan with Linux authenticated scanning finishes, open the Informational finding in the scan report. Check whether authentication succeeded. If it failed, the Findings details explain the reason. Correct the authentication configuration and run the scan again.", "desc": [ "content.p_las_troubleshooting_0000124C34" ] }, "concept_was_ssh_configuration-latest-en.json": { "title": "title_was_ssh_configuration_0000C44B", "title_was_ssh_configuration_0000C44B": "Configuring Windows authenticated scanning (SSH)", "shortdesc": "shortdesc_was_ssh_configuration_000097BF", "shortdesc_was_ssh_configuration_000097BF": "Windows authenticated scanning over SSH requires configuration on both the target host and each scan node.", "content.note_was_ssh_configuration_0000F3A8": "Note: Before applying changes, we recommend that you discuss all potential changes with the network administrator.", "content.p_was_ssh_configuration_0000C21A": "Enabling SSH authenticated scanning for Windows has these requirements:", "subchoice.choice_was_ssh_configuration_0000CA12": "The OpenSSH Server feature must be enabled on the target host.", "step.step_was_ssh_configuration_00003D57": "Target host configuration requirements:", "subchoice.choice_was_ssh_configuration_0000661B": "Add the private key to each scan node that runs Windows SSH authenticated scans, on both Linux and Windows scan nodes. The scan node uses the key to decrypt the scan credentials that the Elements Security Center portal sends.", "step.step_was_ssh_configuration_000020D8": "Scan node configuration requirements:", "desc": [ "content.note_was_ssh_configuration_0000F3A8", "content.p_was_ssh_configuration_0000C21A", { "steps.ul_was_ssh_configuration_0000DF52": [ "step.step_was_ssh_configuration_00003D57", { "subchoices.ul_was_ssh_configuration_00009A51": [ "subchoice.choice_was_ssh_configuration_0000CA12" ] }, "step.step_was_ssh_configuration_000020D8", { "subchoices.ul_was_ssh_configuration_000024C7": [ "subchoice.choice_was_ssh_configuration_0000661B" ] } ] } ], "related": [ "las_preparation-latest-en" ] }, "task_was_ssh_enable_openssh-latest-en.json": { "title": "title_was_ssh_enable_openssh_000D83F", "title_was_ssh_enable_openssh_000D83F": "Enable the OpenSSH Server on the target host", "shortdesc": "shortdesc_was_ssh_enable_openssh_000673E", "shortdesc_was_ssh_enable_openssh_000673E": "Enable the OpenSSH Server feature on each Windows target host before you run SSH authenticated scans.", "content.p_was_ssh_enable_openssh_000B5BC": "Windows Server 2019 and later include the OpenSSH Server as a built-in feature. Use these steps to install the feature if it is missing, start the service, and allow SSH traffic through the firewall.", "content.p_was_ssh_enable_openssh_0002050": "Get-WindowsCapability -Online | Where-Object Name -like 'OpenSSH.Server*'", "step.step_was_ssh_enable_openssh_000EA43": "Open PowerShell as an administrator and check whether the OpenSSH Server feature is available:", "content.p_was_ssh_enable_openssh_000AE3E": "Add-WindowsCapability -Online -Name OpenSSH.Server~~~~0.0.1.0", "step.step_was_ssh_enable_openssh_000B68A": "If the state is NotPresent, add the feature:", "content.p_was_ssh_enable_openssh_0005FCB": "Start-Service sshd
Set-Service -Name sshd -StartupType Automatic", "step.step_was_ssh_enable_openssh_000FD23": "Start the SSH service and set it to start automatically at startup:", "content.p_was_ssh_enable_openssh_0003405": "New-NetFirewallRule -Name \"OpenSSH-Server\" `
-DisplayName \"OpenSSH Server (sshd)\" `
-Enabled True `
-Direction Inbound `
-Protocol TCP `
-Action Allow `
-LocalPort 22", "step.step_was_ssh_enable_openssh_000039A": "Allow inbound SSH connections on the default port (TCP 22) by creating a firewall rule:", "content.p_was_ssh_enable_openssh_000A52C": "Get-Service -Name sshd", "content.p_was_ssh_enable_openssh_0006AE3": "The status must be Running.", "step.step_was_ssh_enable_openssh_000DF33": "Check that the service is running:", "content.p_was_ssh_enable_openssh_0008981": "ssh <username>@<server-ip> For example: ssh administrator@192.168.1.10", "step.step_was_ssh_enable_openssh_000681A": "From a remote machine, connect to confirm SSH access:", "content.p_was_ssh_enable_openssh_0004D7F": "", "content.note_was_ssh_enable_openssh_0003FE4": "Note: Standard users use the personal C:\\Users\\<username>\\.ssh\\authorized_keys file. For accounts with administrator permissions, use the global administrators_authorized_keys file instead.", "step.step_was_ssh_enable_openssh_000BBC8": "We recommend that you set up key-based authentication. Generate an SSH key pair or use an existing one, then append the public key to the C:\\ProgramData\\ssh\\administrators_authorized_keys file:", "content.p_was_ssh_enable_openssh_000F7F8": "Confirm that the correct key is present and that the file is formatted correctly:", "content.p_was_ssh_enable_openssh_000D18B": "ssh-keygen -l -f \"C:\\ProgramData\\ssh\\administrators_authorized_keys\"", "content.note_was_ssh_enable_openssh_0001D0B": "Important: Use only Unix line endings (\\n) in the key file.", "content.p_was_ssh_enable_openssh_0002344": "Check that the file permissions are correct:", "content.p_was_ssh_enable_openssh_00019F5": "icacls \"C:\\ProgramData\\ssh\\administrators_authorized_keys\"", "content.p_was_ssh_enable_openssh_000BB7E": "The output must show only these two entries:", "content.p_was_ssh_enable_openssh_000BF2A": "NT AUTHORITY\\SYSTEM:(F)
BUILTIN\\Administrators:(F)", "content.p_was_ssh_enable_openssh_000EFAF": "Confirm that key authentication works:", "content.p_was_ssh_enable_openssh_000C049": "ssh -i <private_key> <username>@<server-ip>", "content.p_was_ssh_enable_openssh_000B9B5": "For example: ssh -i .ssh/id_ecdsa administrator@192.168.1.10", "desc": [ "content.p_was_ssh_enable_openssh_000B5BC", { "steps.steps_was_ssh_enable_openssh_000BC97": [ "step.step_was_ssh_enable_openssh_000EA43", "content.p_was_ssh_enable_openssh_0002050", "step.step_was_ssh_enable_openssh_000B68A", "content.p_was_ssh_enable_openssh_000AE3E", "step.step_was_ssh_enable_openssh_000FD23", "content.p_was_ssh_enable_openssh_0005FCB", "step.step_was_ssh_enable_openssh_000039A", "content.p_was_ssh_enable_openssh_0003405", "step.step_was_ssh_enable_openssh_000DF33", "content.p_was_ssh_enable_openssh_000A52C", "content.p_was_ssh_enable_openssh_0006AE3", "step.step_was_ssh_enable_openssh_000681A", "content.p_was_ssh_enable_openssh_0008981", "step.step_was_ssh_enable_openssh_000BBC8", "content.p_was_ssh_enable_openssh_0004D7F", "content.note_was_ssh_enable_openssh_0003FE4" ] }, "content.p_was_ssh_enable_openssh_000F7F8", "content.p_was_ssh_enable_openssh_000D18B", "content.note_was_ssh_enable_openssh_0001D0B", "content.p_was_ssh_enable_openssh_0002344", "content.p_was_ssh_enable_openssh_00019F5", "content.p_was_ssh_enable_openssh_000BB7E", "content.p_was_ssh_enable_openssh_000BF2A", "content.p_was_ssh_enable_openssh_000EFAF", "content.p_was_ssh_enable_openssh_000C049", "content.p_was_ssh_enable_openssh_000B9B5" ] }, "concept_was_ssh_scan_settings-latest-en.json": { "title": "title_was_ssh_scan_settings_00000AAB", "title_was_ssh_scan_settings_00000AAB": "Scan settings for Windows update sources", "shortdesc": "shortdesc_was_ssh_scan_settings_00007609", "shortdesc_was_ssh_scan_settings_00007609": "When you configure a Windows SSH authenticated scan, choose how WithSecure Elements Exposure Management checks the host for missing updates.", "content.p_was_ssh_scan_settings_00005121": "The Windows Update Agent (WUA) gets the list of available patches from one of these sources:", "content.dt_was_ssh_scan_settings_00000605": "Windows Server Update Services (WSUS)", "content.dd_was_ssh_scan_settings_00001848": "Checks the host against the WSUS server that manages it. WSUS reports only the updates that it has approved, so the results match what WSUS would install. The host must be set to use a WSUS server and able to reach it.", "content.dt_was_ssh_scan_settings_0000D7E9": "Windows Update Server", "content.dd_was_ssh_scan_settings_0000F9CE": "Checks the host online against Microsoft's update service. On its own, it reports only Windows operating-system updates. The host needs internet access to Microsoft Update. Use this option for hosts that a WSUS server does not manage.", "content.dt_was_ssh_scan_settings_0000B800": "Check for other Microsoft products", "content.dd_was_ssh_scan_settings_00005965": "Extends the online check to other Microsoft products alongside Windows, such as Office, SQL Server, Exchange, and .NET. If the target is not set up to receive these updates, Elements Exposure Management enables the required update source automatically. This option applies only when you select Windows Update Server.", "content.dt_was_ssh_scan_settings_00000869": "Use Microsoft Updates database file", "content.dd_was_ssh_scan_settings_00004D4E": "Performs an offline check using Microsoft's update catalog file (wsusscn2.cab). Elements Exposure Management uploads the file to the host over the existing SSH connection using SFTP, so no extra firewall rules are needed. It then checks for missing updates and removes the file. The host needs no WSUS server or internet access, so this is the best choice for isolated or air-gapped systems. It is the slowest of the three methods, and it requires scan nodes that are deployed on Windows.", "content.title_was_ssh_scan_settings_0000F30D": "When all options are selected", "content.p_was_ssh_scan_settings_000083D4": "The methods are not combined. They are tried in priority order, and the first one that succeeds is used:", "step.step_was_ssh_scan_settings_000045E1": "WSUS", "step.step_was_ssh_scan_settings_0000637C": "Windows Update Server", "step.step_was_ssh_scan_settings_000096E5": "Microsoft Updates database file", "content.p_was_ssh_scan_settings_0000D60B": "If a method cannot run, Elements Exposure Management falls back to the next one. For example, the host might have no WSUS server or no internet access. The database file is the final fallback for hosts that can reach neither WSUS nor Microsoft Update.", "content.p_was_ssh_scan_settings_000019A1": "Selecting all three gives the widest coverage and the best chance of getting patch results from every host. The reported results depend on which method succeeded. WSUS reports only the updates approved on the WSUS server, while Windows Update Server reports all updates available from Microsoft.", "desc": [ "content.p_was_ssh_scan_settings_00005121", { "dl.dl_was_ssh_scan_settings_0000E439": [ { "dlentry.dlentry_was_ssh_scan_settings_000028B5": [ "content.dt_was_ssh_scan_settings_00000605", "content.dd_was_ssh_scan_settings_00001848" ] }, { "dlentry.dlentry_was_ssh_scan_settings_0000600C": [ "content.dt_was_ssh_scan_settings_0000D7E9", "content.dd_was_ssh_scan_settings_0000F9CE" ] }, { "dlentry.dlentry_was_ssh_scan_settings_00008351": [ "content.dt_was_ssh_scan_settings_0000B800", "content.dd_was_ssh_scan_settings_00005965" ] }, { "dlentry.dlentry_was_ssh_scan_settings_0000C427": [ "content.dt_was_ssh_scan_settings_00000869", "content.dd_was_ssh_scan_settings_00004D4E" ] } ] }, "content.title_was_ssh_scan_settings_0000F30D", "content.p_was_ssh_scan_settings_000083D4", { "steps.ol_was_ssh_scan_settings_0000869C": [ "step.step_was_ssh_scan_settings_000045E1", "step.step_was_ssh_scan_settings_0000637C", "step.step_was_ssh_scan_settings_000096E5" ] }, "content.p_was_ssh_scan_settings_0000D60B", "content.p_was_ssh_scan_settings_000019A1" ] }, "toc-latest-en.json": { "toc": [ "concept_eppproductwebhelp-latest-en", { "withsecure_elements_help-latest-en": [ { "getting_started-2-latest-en": [ "quick_start_guide_for_security_center-latest-en", { "logging_in-latest-en": [ "logging_in_to_non_federated_domains-latest-en", "logging_in_to_a_federated_domain-latest-en", { "mfa-latest-en": [ "concept_k4l_nv5_m1c-latest-en", "setting_up_2fa-latest-en", "task_qc3_vmh_k1c-latest-en", "using_device_biometrics-latest-en" ] } ] }, { "user_management-latest-en": [ { "access_rights-latest-en": [ "access_rights_by_role-latest-en" ] }, "using_scope_selector-2-latest-en", { "identity_and_access_management_roles-latest-en": [ "elements_iam_role_properties-latest-en", "concept_iw3_twq_ydc-latest-en" ] }, "add_admin_account_company-latest-en", "add_sep_account-latest-en", "edit_admin_account-latest-en", "managing_api_clients-latest-en", "deleting_api_client-latest-en", "recover_password-latest-en", "task_changing_account_details-latest-en" ] }, "task_changing_view_mode-latest-en", { "about_product_subscriptions-latest-en": [ "managing_company-latest-en", "adding_subscription_key-latest-en", "ordering_products_existing_company-latest-en", "adding_company-latest-en", "viewing_subscriptions-latest-en", "changing_subscription_key-latest-en", { "upgrade-latest-en": [ "upgrading_options-latest-en" ] } ] }, { "federated_single_sign_on-latest-en": [ { "federated_sso_prereqs-latest-en": [ "sso_considerations-latest-en" ] }, "setting_up_federated_single_sign_on-latest-en", "linking_user_identities-latest-en", "removing_federated_domain-latest-en" ] }, { "add_managing_devices_company-latest-en": [ { "adding_devices-latest-en": [ "adding_device-latest-en", "download_software-latest-en", "manage_automatic_deletion-latest-en" ] }, "managing_invites-latest-en" ] }, { "enhancing_device_management_with_custom_labels-latest-en": [ "adding_device_labels-latest-en" ] }, { "manage_devices_in_portal-latest-en": [ { "managing_asset_groups-latest-en": [ "creating_asset_groups-latest-en", "adding_devices_asset_groups-latest-en" ] }, "managing_devices-latest-en", "automatically_deleting_computers-latest-en", "viewing_devices_ad-latest-en", "customizing_devices_view-latest-en", "request_diagnostics-latest-en" ] }, "elements_data_recovery-latest-en" ] } ] }, { "introduction-6-latest-en": [ "concept_nl3_hzx_51c-latest-en", "concept_w15_vfl_51c-latest-en", "keyfeatures-2-latest-en", "attack_surface_coverage-latest-en" ] }, { "concept_xmgettingstarted-latest-en": [ "quick_start_guide_for_xm-latest-en", "task_xmcreatingwsbusinessaccount-latest-en", "logging_in_to_s-latest-en", "creating_new_admins-latest-en", "giving_exposure_management_access_role_to_existing_users-latest-en" ] }, { "concept_wvr_l52_cbc-latest-en": [ { "concept_om4_44t_cbc-latest-en": [ "activating_scanning_in_existing_elements_installation-latest-en", { "task_vm5_svt_cbc-latest-en": [ "enabling_disabling_ea_scan_on_devices-latest-en", "changing_frequency_endpoint_status_updates-latest-en" ] }, { "devices_without_agent-latest-en": [ "setting_up_labeling_for_unmanaged_devices-latest-en" ] }, { "concept_r1p_wpx_dbc-latest-en": [ "task_xgq_s4x_dbc-latest-en", "verify_installation_scan_nodes-latest-en", "configuring_scan_nodes-latest-en" ] }, { "installing_scan_nodes_linux-latest-en": [ "installation_steps_scan_nodes_linux-latest-en", "verify_installation_linux_scan_nodes-latest-en", "linux_scan_node_paths-latest-en", "editing_scan_node_configuration-latest-en", "applying_scan_node_license_manually-latest-en", "set_up_encryption_keys_authenticated_scanning-latest-en", "redirecting_traffic_proxy_server-latest-en", "disabling_ssl_cert_validation-latest-en", "installing_local_ca_certificate-latest-en", "limiting_simultaneous_scans-latest-en", "updating_scan_engines_manually-latest-en", "resetting_scan_engines-latest-en" ] } ] }, { "concept_hvd_jcy_bbc-latest-en": [ "adding_azure_tenant-latest-en", "task_connecting_identity_inventory_for_tenants-latest-en", { "adding_azure_cloud_accounts-latest-en": [ "azure_prerequisites-latest-en", "task_tl1_x5n_g3c-latest-en", "onboarding_azure_cloud_account-latest-en", "running_azure_onboarding_script-latest-en" ] }, "adding_aws_account-latest-en", "deploying_aws_iam_role-latest-en", "validating_cloud_account_status-latest-en" ] }, { "concept_py4_312_2bc-latest-en": [ "task_ecw_jr2_2bc-latest-en" ] }, "concept_qzk_jby_dbc-latest-en" ] }, { "scanning-latest-en": [ { "scanning_devices-latest-en": [ { "discovery_scan-latest-en": [ "adding_discovery_scan-latest-en", "configuring_discovery_scan_template-latest-en", "running_discovery_scan-latest-en", "viewing_discovery_scan_results-latest-en" ] }, { "system_scan-latest-en": [ "adding_system_scan-latest-en", { "configuring_system_scan_template-latest-en": [ "system_scan_config_options-latest-en" ] } ] } ] }, { "scanning_cloud_accounts-latest-en": [ { "adding_new_scan-latest-en": [ "creating_rule_group-latest-en" ] }, "running_scan-latest-en" ] }, { "scanning_networks-latest-en": [ "finding_internet_facing_systems-latest-en", "external_attack_surface_scans-latest-en", "cloud_scan_nodes-latest-en" ] }, "scanning_identities-latest-en" ] }, { "taking_xm_into_use-latest-en": [ "exposude_dashboard-latest-en", { "recommendations-latest-en": [ "recommendation_values-latest-en" ] }, "findings-latest-en", "management_for_ot-latest-en" ] }, { "reporting-latest-en": [ "creating_reports-latest-en", "task_addingwidgetstomyreport-latest-en", "vulnerability_management_reporting-latest-en", "creating_exposure_management_reports-latest-en", "task_xmconfiguringemailnotifications-latest-en", "task_creatingcustomviewforxmrecommendations-latest-en", "editing_the_settings_of_an_existing_report-latest-en", "cloning_an_existing_report-latest-en", "updating_an_existing_report-latest-en", "viewing_executive_summary-latest-en", "deleting_reports-2-latest-en" ] }, { "management-latest-en": [ { "asset_management-latest-en": [ { "viewing_assets-latest-en": [ "tracking_asset_changes-latest-en" ] }, "managing_asset_attributes-latest-en", "managing_asset_tags-latest-en", "updating_notes-latest-en", "deleting_assets-latest-en", "deleting_archived_assets-latest-en" ] }, { "scan_nodes-latest-en": [ "adding_scan_nodes-latest-en", { "scan_node_uninstallation-latest-en": [ "uninstalling_scan_nodes-latest-en", "uninstalling_scan_nodes_linux-latest-en" ] }, "debugging_scan_nodes-latest-en" ] }, "task_t3k_sgy_bbc-latest-en", "user_management-2-latest-en", "settings-latest-en" ] }, "xm_troubleshooting-latest-en", { "concept_ezq_xbz_bbc-latest-en": [ "using_terraform-latest-en", "using_cloudformation-latest-en" ] }, { "authenticated_scanning-latest-en": [ { "windows_authenticated_scanning_winrm-latest-en": [ { "was_winrm_configuration-latest-en": [ "was_updating_powershell-latest-en", "was_winrm_create_account-latest-en", "was_configuring_winrm_http-latest-en", "was_configuring_winrm_http_gpo-latest-en", "was_configure_winrm_service-latest-en", "was_configure_winrm_service_certificate-latest-en", "was_configure_winrm_cert_legacy_os-latest-en", "was_create_export_certificate_legacy_os-latest-en" ] }, "was_troubleshooting_winrm-latest-en" ] }, { "windows_authenticated_scanning-latest-en": [ { "was_configuration-latest-en": [ "was_create_domain_account-latest-en", "was_disable_admin_approval-latest-en", { "was_configure_gpo_policy-latest-en": [ "was_create_gpo-latest-en", "was_allow_traffic_rpc_endpoint_mapper-latest-en", "was_allow_traffic_rpc_dynamic_ports-latest-en", "was_allow_traffic_smb_cifs_rpc-latest-en", "was_enable_remote_registry-latest-en", "was_grant_read_access_registry_keys-latest-en", "was_adding_scan_node-latest-en" ] }, "was_configure_security_center-latest-en" ] }, "was_troubleshooting-latest-en" ] }, { "linux_authenticated_scanning-latest-en": [ { "las_preparation-latest-en": [ "las_create_encryption_keys-latest-en", "las_upload_public_key-latest-en", "las_upload_private_key-latest-en", "las_prepare_user_account-latest-en" ] }, { "las_authentication_methods-latest-en": [ "las_password_authentication-latest-en", "las_setup_ssh_keys-latest-en", "las_key_authentication-latest-en" ] }, "las_troubleshooting-latest-en" ] }, { "concept_was_ssh_configuration-latest-en": [ "task_was_ssh_enable_openssh-latest-en", "concept_was_ssh_scan_settings-latest-en" ] } ] } ], "concept_eppproductwebhelp-latest-en": "WithSecure Exposure Management ", "quick_start_guide_for_security_center-latest-en": "Get started with WithSecure Elements Security Center", "logging_in_to_non_federated_domains-latest-en": "Log in to non-federated domains", "logging_in_to_a_federated_domain-latest-en": "Log in to federated domains", "concept_k4l_nv5_m1c-latest-en": "MFA methods", "setting_up_2fa-latest-en": "Choose multi-factor authentication", "task_qc3_vmh_k1c-latest-en": "Remove a multi-factor authentication", "using_device_biometrics-latest-en": "Use device biometrics", "mfa-latest-en": "Multi-factor authentication", "logging_in-latest-en": "Logging in", "access_rights_by_role-latest-en": "Access rights by role", "access_rights-latest-en": "About access rights", "using_scope_selector-2-latest-en": "Move between the managed companies", "elements_iam_role_properties-latest-en": "Elements IAM role properties", "concept_iw3_twq_ydc-latest-en": "Frequently asked questions about IAM roles", "identity_and_access_management_roles-latest-en": "Elements Identity and Access Management (IAM) role", "add_admin_account_company-latest-en": "Add a new administrator", "add_sep_account-latest-en": "Add a new service partner", "edit_admin_account-latest-en": "Edit or remove administrators", "managing_api_clients-latest-en": "Create an API client", "deleting_api_client-latest-en": "Delete an API client", "recover_password-latest-en": "Recover your password", "task_changing_account_details-latest-en": "Change your account details", "user_management-latest-en": "User management", "task_changing_view_mode-latest-en": "Change the view mode", "managing_company-latest-en": "Adding a customer company", "adding_subscription_key-latest-en": "Assign a subscription key for a customer company", "ordering_products_existing_company-latest-en": "Order products for an existing customer company", "adding_company-latest-en": "Order products for a new customer company", "viewing_subscriptions-latest-en": "View available product subscriptions", "changing_subscription_key-latest-en": "Change the subscription key", "upgrading_options-latest-en": "Upgrading your subscriptions", "upgrade-latest-en": "Upgrading your subscriptions", "about_product_subscriptions-latest-en": "Taking Elements products into use", "sso_considerations-latest-en": "Before implementing single sign-on (SSO)", "federated_sso_prereqs-latest-en": "Prerequisites", "setting_up_federated_single_sign_on-latest-en": "Set up federated single sign-on with Microsoft Entra ID", "linking_user_identities-latest-en": "Link user identities", "removing_federated_domain-latest-en": "Remove federation from a domain", "federated_single_sign_on-latest-en": "Federated single sign-on", "adding_device-latest-en": "Send an installation link via email", "download_software-latest-en": "Download software from Elements Security Center", "manage_automatic_deletion-latest-en": "Manage automatic deletion of devices", "adding_devices-latest-en": "Distributing WithSecure software", "managing_invites-latest-en": "Manage invitations", "add_managing_devices_company-latest-en": "Adding devices for management", "adding_device_labels-latest-en": "Add device labels", "enhancing_device_management_with_custom_labels-latest-en": "Enhancing device management with custom labels", "creating_asset_groups-latest-en": "Create asset groups", "adding_devices_asset_groups-latest-en": "Add devices to asset groups", "managing_asset_groups-latest-en": "Managing asset groups", "managing_devices-latest-en": "Remotely manage a device", "automatically_deleting_computers-latest-en": "Automatically delete devices", "viewing_devices_ad-latest-en": "View devices based on the Active Directory structure", "customizing_devices_view-latest-en": "Customize the Devices view", "request_diagnostics-latest-en": "Request diagnostic data", "manage_devices_in_portal-latest-en": "Managing devices in Elements Security Center", "elements_data_recovery-latest-en": "Elements data recovery", "getting_started-2-latest-en": "Using WithSecure Elements Security Center", "withsecure_elements_help-latest-en": "Introduction to the WithSecure Elements solution", "concept_nl3_hzx_51c-latest-en": "Why Exposure Management matters", "concept_w15_vfl_51c-latest-en": "Understanding WithSecure Elements Exposure Management", "keyfeatures-2-latest-en": "Key features", "attack_surface_coverage-latest-en": "Attack surface coverage", "introduction-6-latest-en": "Elements Exposure Management overview", "quick_start_guide_for_xm-latest-en": "Get started with WithSecure Elements Exposure Management", "task_xmcreatingwsbusinessaccount-latest-en": "Create the first WithSecure business account", "logging_in_to_s-latest-en": "Log in to Elements Security Center and start asset onboarding", "creating_new_admins-latest-en": "Create administrator accounts", "giving_exposure_management_access_role_to_existing_users-latest-en": "Grant existing users the Exposure Management role", "concept_xmgettingstarted-latest-en": "Getting started with WithSecure Elements Exposure Management", "activating_scanning_in_existing_elements_installation-latest-en": "Existing WithSecure Elements Agents", "enabling_disabling_ea_scan_on_devices-latest-en": "Turn on or off WithSecure Elements Agent scanning on devices", "changing_frequency_endpoint_status_updates-latest-en": "Change the frequency for endpoint status updates", "task_vm5_svt_cbc-latest-en": "Install new WithSecure Elements Agents", "setting_up_labeling_for_unmanaged_devices-latest-en": "Set up labeling rules for unmanaged devices", "devices_without_agent-latest-en": "Devices without WithSecure Elements Agent", "task_xgq_s4x_dbc-latest-en": "Install a scan node on Windows", "verify_installation_scan_nodes-latest-en": "Verify installation", "configuring_scan_nodes-latest-en": "Configure scan nodes", "concept_r1p_wpx_dbc-latest-en": "Installing scan nodes on Windows server", "installation_steps_scan_nodes_linux-latest-en": "Install a scan node on Linux", "verify_installation_linux_scan_nodes-latest-en": "Verify Linux scan node installation", "linux_scan_node_paths-latest-en": "Linux scan node paths", "editing_scan_node_configuration-latest-en": "Configure Linux scan nodes", "applying_scan_node_license_manually-latest-en": "Apply the scan node license manually", "set_up_encryption_keys_authenticated_scanning-latest-en": "Set up encryption keys for authenticated scanning", "redirecting_traffic_proxy_server-latest-en": "Redirect traffic to a proxy server", "disabling_ssl_cert_validation-latest-en": "Disable SSL certificate validation", "installing_local_ca_certificate-latest-en": "Install a local CA certificate", "limiting_simultaneous_scans-latest-en": "Limit the maximum number of simultaneous scans", "updating_scan_engines_manually-latest-en": "Update scan engines manually", "resetting_scan_engines-latest-en": "Reset scan engines", "installing_scan_nodes_linux-latest-en": "Installing scan nodes on Linux servers", "concept_om4_44t_cbc-latest-en": "Device onboarding ", "adding_azure_tenant-latest-en": "Add an Azure tenant", "task_connecting_identity_inventory_for_tenants-latest-en": "Connect Identity Inventory for a tenant", "azure_prerequisites-latest-en": "Azure prerequisites", "task_tl1_x5n_g3c-latest-en": "Connect and activate Cloud Security Posture Management for a tenant", "onboarding_azure_cloud_account-latest-en": "Add an Azure subscription in Elements Security Center", "running_azure_onboarding_script-latest-en": "Run the Azure onboarding script", "adding_azure_cloud_accounts-latest-en": "Adding Azure subscriptions", "adding_aws_account-latest-en": "Add an AWS account in Elements Security Center", "deploying_aws_iam_role-latest-en": "Deploy the IAM role to AWS", "validating_cloud_account_status-latest-en": "Validate cloud account status", "concept_hvd_jcy_bbc-latest-en": "Cloud account onboarding", "task_ecw_jr2_2bc-latest-en": "Add a new network asset", "concept_py4_312_2bc-latest-en": "Network asset onboarding", "concept_qzk_jby_dbc-latest-en": "Identity onboarding", "concept_wvr_l52_cbc-latest-en": "Asset onboarding", "adding_discovery_scan-latest-en": "Add discovery scans", "configuring_discovery_scan_template-latest-en": "Configure discovery scan templates", "running_discovery_scan-latest-en": "Run discovery scans", "viewing_discovery_scan_results-latest-en": "View the discovery scan results", "discovery_scan-latest-en": "Discovery scans", "adding_system_scan-latest-en": "Add system scans", "system_scan_config_options-latest-en": "System scan configuration options", "configuring_system_scan_template-latest-en": "Configure system scans", "system_scan-latest-en": "System scans", "scanning_devices-latest-en": "Device scans", "creating_rule_group-latest-en": "Create a new rule group", "adding_new_scan-latest-en": "Add cloud account scans", "running_scan-latest-en": "Scan cloud accounts", "scanning_cloud_accounts-latest-en": "Cloud account scans", "finding_internet_facing_systems-latest-en": "Identify internet-facing systems", "external_attack_surface_scans-latest-en": "External attack surface scans", "cloud_scan_nodes-latest-en": "Cloud scan nodes", "scanning_networks-latest-en": "Network asset scans", "scanning_identities-latest-en": "Identity scans", "scanning-latest-en": "Managing scans", "exposude_dashboard-latest-en": "Exposure dashboard", "recommendation_values-latest-en": "Recommendation impact, effort, and status", "recommendations-latest-en": "Recommendations", "findings-latest-en": "Findings", "management_for_ot-latest-en": "Exposure management for operational technology", "taking_xm_into_use-latest-en": "Managing exposures", "creating_reports-latest-en": "Create vulnerability management reports", "task_addingwidgetstomyreport-latest-en": "Add widgets to My report", "vulnerability_management_reporting-latest-en": "View vulnerability management reports", "creating_exposure_management_reports-latest-en": "Create exposure management reports", "task_xmconfiguringemailnotifications-latest-en": "Configure email reports", "task_creatingcustomviewforxmrecommendations-latest-en": "Create a custom view for security events", "editing_the_settings_of_an_existing_report-latest-en": "Edit the settings of an existing report", "cloning_an_existing_report-latest-en": "Clone an existing report", "updating_an_existing_report-latest-en": "Update contents of existing reports", "viewing_executive_summary-latest-en": "View Executive summary", "deleting_reports-2-latest-en": "Delete reports", "reporting-latest-en": "Reporting", "tracking_asset_changes-latest-en": "Tracking asset changes", "viewing_assets-latest-en": "View device assets", "managing_asset_attributes-latest-en": "Manage device asset attributes", "managing_asset_tags-latest-en": "Manage asset tags", "updating_notes-latest-en": "Update notes", "deleting_assets-latest-en": "Delete device assets", "deleting_archived_assets-latest-en": "Delete archived assets", "asset_management-latest-en": "Device assets", "adding_scan_nodes-latest-en": "Add new scan nodes", "uninstalling_scan_nodes-latest-en": "Uninstall scan nodes from Windows", "uninstalling_scan_nodes_linux-latest-en": "Uninstall scan nodes from Linux", "scan_node_uninstallation-latest-en": "Uninstalling scan nodes", "debugging_scan_nodes-latest-en": "Troubleshooting scan node issues", "scan_nodes-latest-en": "Scan nodes", "task_t3k_sgy_bbc-latest-en": "Delete cloud accounts", "user_management-2-latest-en": "Users", "settings-latest-en": "Settings", "management-latest-en": "General management", "xm_troubleshooting-latest-en": "Troubleshooting", "using_terraform-latest-en": "Implement infrastructure with Terraform", "using_cloudformation-latest-en": "Implement infrastructure with CloudFormation", "concept_ezq_xbz_bbc-latest-en": "Using Infrastructure-as-Code tools", "was_updating_powershell-latest-en": "Update PowerShell", "was_winrm_create_account-latest-en": "Create a dedicated user account", "was_configuring_winrm_http-latest-en": "Configure the WinRM service to use HTTP on individual hosts", "was_configuring_winrm_http_gpo-latest-en": "Configure the WinRM service to use HTTP through GPO", "was_configure_winrm_service-latest-en": "Configure the WinRM service to use HTTPS with a publicly signed certificate", "was_configure_winrm_service_certificate-latest-en": "Configure the WinRM service to use HTTPS without a publicly signed certificate", "was_configure_winrm_cert_legacy_os-latest-en": "Configure the WinRM service to use HTTPS without a publicly signed certificate on older Windows versions", "was_create_export_certificate_legacy_os-latest-en": "Create and export a certificate for a legacy Windows target", "was_winrm_configuration-latest-en": "Preparing for Windows authenticated scanning (WinRM)", "was_troubleshooting_winrm-latest-en": "Troubleshoot Windows authenticated scanning (WinRM)", "windows_authenticated_scanning_winrm-latest-en": "Windows authenticated scanning (WinRM)", "was_create_domain_account-latest-en": "Create a Windows domain account", "was_disable_admin_approval-latest-en": "Disable Admin Approval Mode", "was_create_gpo-latest-en": "Create a new Group Policy object", "was_allow_traffic_rpc_endpoint_mapper-latest-en": "Add rule to allow traffic to the RPC Endpoint Mapper", "was_allow_traffic_rpc_dynamic_ports-latest-en": "Add rule to allow traffic to the RPC Dynamic Ports", "was_allow_traffic_smb_cifs_rpc-latest-en": "Add rule to allow traffic to SMB/CIFS and RPC", "was_enable_remote_registry-latest-en": "Enable Remote Registry service", "was_grant_read_access_registry_keys-latest-en": "Grant read access to registry keys", "was_adding_scan_node-latest-en": "Add a scan node to the domain", "was_configure_gpo_policy-latest-en": "Group Policy best practices for authenticated scanning", "was_configure_security_center-latest-en": "Configure a network scan template for Windows authenticated scanning", "was_configuration-latest-en": "Preparing for Windows authenticated scanning (RPC)", "was_troubleshooting-latest-en": "Troubleshoot Windows authenticated scanning (RPC)", "windows_authenticated_scanning-latest-en": "Windows authenticated scanning (RPC)", "las_create_encryption_keys-latest-en": "Create new encryption keys", "las_upload_public_key-latest-en": "Upload encryption keys to WithSecure Elements Security Center", "las_upload_private_key-latest-en": "Upload encryption keys to WithSecure Elements VM scan node", "las_prepare_user_account-latest-en": "Prepare the user account for Linux authenticated scanning", "las_preparation-latest-en": "Preparation steps", "las_password_authentication-latest-en": "Set up password-based authentication", "las_setup_ssh_keys-latest-en": "Set up SSH keys on the Linux system", "las_key_authentication-latest-en": "Configure key-based authentication in Elements Security Center", "las_authentication_methods-latest-en": "Authentication methods", "las_troubleshooting-latest-en": "Troubleshooting", "linux_authenticated_scanning-latest-en": "Linux authenticated scanning", "task_was_ssh_enable_openssh-latest-en": "Enable the OpenSSH Server on the target host", "concept_was_ssh_scan_settings-latest-en": "Scan settings for Windows update sources", "concept_was_ssh_configuration-latest-en": "Configuring Windows authenticated scanning (SSH)", "authenticated_scanning-latest-en": "Authenticated scanning" } }