Risk Intelligence Admin Guide

148 Pages·2017·6.31 MB·English

by  Susan Murray

Risk Intelligence
Admin Guide
LastUpdated:Tuesday,March12,2019--------------©2018
CONTENTS
Getting Started 1
UsefulLinks 1
What'sNew? 2
AccessingRiskIntelligence 4
LoggingIn 4
LoggingInasaNewUser 4
SupportedBrowsersandOperatingSystems 5
SupportedBrowsers 5
SupportedOperatingSystems 6
ApplicationOverview 7
PlatformBar 7
NavigationPanel 8
ManageyourProfile 8
UserandAPIAccessSettings 9
Account Management 10
AccountTypes 10
ViewAccountOrganizationStructure 14
AccountSettings 14
AccountInfoTab 16
InfoPanel 17
BrandingPanel 17
ConfigurationOptionsPanel 18
AdministrationOptionsPanel 18
BillingTab 19
UsersTab 20
ScanConfigurationKeysTab 21
AddNewAccount 21
AddNewPartnerAccount 22
AddNewCustomerUnderPartner 23
LicensingandBilling 25
PartnerLicensingandBilling 25
RetailandEnterpriseLicensingandBilling 26
TrialLicenses 26
ViewPartnerLicensingandBillingDetails 26
ViewRetail/EnterpriseLicensingandBillingDetails 27
AllocateLicensestoOrganizations 28
Add/RemoveLicenses 30
IncreaseMaximumDeviceLicenses 31
DecreaseMaximumDeviceLicenses 31
RemoveAllLicenses 31
ChangeBillingContactEmail 31
UpgradeTrialCustomertoPaid 32
UpgradeCustomerAccounttoPartnerAccount 33
DeleteAccount 34
ViewSub-organizationAccountRenewalDetails 34
ToEnable/DisableAutoRenew 34
UserManagement 36
Add/EditUser 36
Edituser 36
ResetUserPassword 37
DeleteUser 38
ConfigureUserSettings 38
Dashboard 39
AddaWidgettotheDashboard 39
ChangeWidgetName 40
RemoveWidgetfromDashboard 40
ViewNotifications 40
Scanning 41
SupportedFileTypes,OSandApplications 41
ScanConfigurations 42
Toviewscanconfigurations: 42
CreateCustomScanConfiguration 42
EditScanConfiguration 44
ScanTypes 44
SingleScans 44
CombinedScans 44
SpecifyFolderforanyDataScanConfiguration 45
SpecifyFilePatternsandFileHashesforFileFinderScanConfiguration 45
UsingDataRulesetstoFindSensitiveData 46
CustomizeRule 47
ResetRulesetstoDefault 48
CreateNewCustomRuleset 48
EditCustomRuleset 49
RemoveRuleset 49
ScanComputers 49
ChoosingaScanDeliveryMethod 50
ChoosingtheSolarWindsMSPN-CentralDeliveryMethod 51
CLIScannerDeploymentScenarios 51
Step1ConfigureDistributionPointfortheCommandLineExecutable 56
Step2-LaunchServerManager 57
Step3-OpenGroupPolicyManagement 57
Server2008/2008R2 57
Server2012/2012R2 57
Step4-NavigatetotheGroupPolicyObject 58
Step5-EdittheDomainPolicy 58
Step6-OpenScheduledTasks 60
Step7-CreateaNewScheduledTask 61
Step8-ConfiguretheTask(forServer2016) 61
Step9-ScheduletheTask 62
Step10-CheckScanProgress 63
Troubleshooting 63
AdditionalReading 63
ViewIndividualDeviceScanResults 63
ScanResultsReport 66
ExpandedDataBreachRiskScanReportforIndividualHost 66
SummaryInfo 66
DetailedInformation 67
DataBreachRiskScanReportforIndividualHost 69
SecurityScanResultsReportforIndividualHost 70
PANScanResultsReportforIndividualHost 71
PCIScanResultsReportforIndividualHost 72
PCIandPANScanResultsReportforIndividualHost 73
PCIScanPCIDSSRequirementsComplianceChecks 73
DataDiscoveryScanReportforIndividualHost 75
FileFinderScanResultsReportforIndividualHost 76
CreateFileRemovalScripttoDeleteUnprotectedDataFilesfromDevice 77
RuntheRenamedFile/Script 78
ViewSuspectDataFileUserAccessPermissions 78
PatchPolicyandVulnerabilitySeverityRatingandCVSSScore 79
ExcludeFilesfromDataScansonIndividualHosts 80
ExcludeFilesGloballyfromDataScans 80
FileExclusionExamples 81
ViewYourOrganizations'ScanShortCodes 81
ViewDevicesScanned 82
ScanMobileDevices 83
Option1-DistributeviaEmailorTextMessage 84
Option2-DistributeviaWebApporSingleSign-On 84
Reporting 86
ReportTypes 88
SecurityandDataBreachReports 88
OtherReports 90
ViewReports 91
DownloadReportinCSVFormat 94
CreateNewReport 95
SpecifyReportConditions 96
FindOrganizationID 99
CreateaDataBreachRiskReport 100
CreateaPatchandVulnerabilityReport 103
RunReport 105
RunaNewReportfortheFirstTime 105
RunExistingReportUsingMostRecentScannedData 106
EditReport 107
EditReportConditions 108
EditReportSchedule 109
EditReportRecipients 109
DeleteReport 110
DeleteReportInstanceListedintheReportHistory 110
DeleteOriginalReport 111
Branding 112
CustomizeLogoonScanResultsReports 112
CustomizetheLinkfromtheLogo 113
AddCustomTexttoReportOutput 113
Customizethe'HelpwithReport'URLinScanResultsReports 115
UseCustomCSStoDefineColorsandStylesofReportOutput 116
Appendix 117
SoftwareServicesAgreement 117
SecurityandPrivacyGuide 128
UserRoles 153
LicenseReport-TypesofLicenseChangesDisplayed 168
ReportConditions 170
Third-partyAcknowledgements 171
pdftotext 171
Index 173
Getting Started
RiskIntelligenceworksbyuncoveringsensitivedata,vulnerabilitiesandinappropriateaccess
permissionsinyournetworkandshowsthecostoftheliabilityyouarecarryinginyoursystems.
ThisguidedescribeshowtosetupyourorganizationsandusersinRiskIntelligenceandthengo
ontomonitoryourdevicesusingRiskIntelligence'sadvancedscanning,analysisandreporting
features.
n QuickStart Guide for MSPs
n QuickStart Guide -ExpandedData BreachRisk
n Useful Links-LinkstohelpfulresourcesincludingotherRiskIntelligenceguides.
n AccessingRiskIntelligence-Howtoaccesstheapplication
n ApplicationOverview-Aquickoverviewoftheapplicationinterface
n Account Management-Setupandmanageyourorganizations'accountsincludingbilling
details,usersandscanconfigurations
n User Management-Add,editanddeletesystemusers
n Dashboard-ViewandcustomizethesystemDashboard
n Scanning-Setupandscancomputersandmonitorindividualdeviceresults
n Reporting-Setupyourreportsandreportonscanneddataondevicesinyourorganization
(s)
n Branding-Customizeyoursystemandreportoutputtosuityourbrandingrequirements
Useful Links
PDFs
RiskIntelligence AdminGuide
RiskIntelligence QuickStart Guide for MSPs
RiskIntelligence QuickStart Guide -ExpandedData BreachRisk
OnlineHelp
RiskIntelligence AdminHelp
RiskIntelligence QuickStart Helpfor MSPs
RiskIntelligence QuickStart Help-Data BreachRisk
OtherResources
RiskIntelligence API Documentation
Software Services Agreement
Security andPrivacy Guide
RiskIntelligence -1-
What's New?
December11th2018
n ScanTimeout value todefine whenscantimeout shouldoccur-Anewscantimeout
valueintheScanOptionspageintheScanConfigurationwizardallowsyoutodefinethe
maximumamountofsecondsthescanwillrunbeforeittimesout.SeetheMaximum
numberofseconds forscantorunfieldinCreate Custom ScanConfiguration.
November13th2018
n ImprovedReport CategoryselectioninCreate Report Wizard-Thenumberofreport
categoriesavailableintheCreateReportwizardisreducedtotwo:SecurityandData
BreachReportsandLicense reports.Thisistoreduceclutterandsimplifythereport
creationprocess.SeeCreate NewReport.
October30th2018
n Edit ScanConfigurationProcess Improved-Wheneditinganexistingscanconfiguration,
youcannolongerchangethescantypeinStep1- Select ScanType.Theeditwizard
beginsatStep2.SeeEdit ScanConfiguration.
n Renewals, Domains andResources sections removed-TheremovaloftheDomains
sectionmeansthatyoucannowdeletesub-organizationsdirectlywithouthavingtogoto
theDomainspage.TheResourcessectionpreviouslycontainedlinkstothevarioususer
guides,theSoftwareServicesAgreementandtheSecurityandPrivacyGuide.Theseare
nowallavailablefromtheSupportPortalwhichcanbeaccessedbyclickingthehelpiconin
thePlatformBar.SeeApplicationOverview.
October2018
n Improvedmethodofselectingrulesets inscanconfigurations-Whenaddingrulesets
totheDataDiscoveryorDBRSscanconfigurations,youcannowselectmultipleatonetime
usingnewcheckboxesinsteadofselectingindividually.SeeCreate Custom Scan
ConfigurationandUsingData Rulesets toFindSensitive Data.
September2018
n SSOLogin-NewSingleSignOn(SSO)processwhenaccessingthesystem-See
AccessingRiskIntelligence.
n New Platform Bar-ThenewPlatformBarimprovesaccesstoorganizationalaccount
settings,usersettings,changepassword,enable2FAandalinktooursupport
documentation(includingOnlineHelpandKnowledgeBasearticles)-SeeApplication
Overview.
n Organization/Domaincontext link movedtoNavigationPanel-Thelinkdisplayingthe
organization/domaininfocus,whichwhenclickedallowsyoutochangethecontext,now
sitsatthebottomoftheNavigationPanelinsteadofthePlatformBar-SeeApplication
Overview.
July2018
n Columnsortingnow available inAccount Settings - Users tab-Youcannowsorton
theFull Name,EmailorLast LoggedincolumnsinthelistofusersintheUserstab.See
Users Tab.
-2- RiskIntelligence
June2018
n Improvedscanconcurrency-Youcannowinitiateascanwhileanotherisrunning.The
secondscanisqueueduntilthefirstcompletes.SeeScanComputers.
n New read-onlyuserrole-Youcannowapplythenewread-onlyuserroletoyouraccount
users.SeeUser Roles.
May2018
n New ExpandedData BreachRisk Scan(ExDBRS)available-DevelopedforMSPsand
theircustomers,thisreportaddsanewcomponenttotheoriginalDataBreachRiskScan
whichtestsfor18baselineWindowsend-pointconfigurations.SeeScanTypesandalso
RunExpandedData BreachRiskScanfrom the CLI.
April 2018
n All analytic reports now show a rolling1-yeartime period.Thisreducesthevolumeand
improvesthefocusofscandataaddedtothereports.
July 2017
n NewtopiclistingthefiletypessupportedbyscanningandtheproductswecheckforOS
andApplicationpatching.SeeSupportedFile Types, OS andApplications.
Forafulllistofenhancementsandbugfixes,seehttps://status.solarwindsmsp.com/release-
notes/
Version2017.5.2
May 2017
Forafulllistofenhancementsandbugfixes,seehttps://status.solarwindsmsp.com/
Version2017.5.1
May2017
n ScanResultsReport-ImprovedExclusionAdding-Youcannowselectexclusionsacross
multiplepagesintheUnprotectedDataDetailslistofaScanResultsReport,thenaddthem
toyourexclusionlistinone-ratherthanselectingthemandaddingthempage-by-page.
SeeExclude Files from Data Scans onIndividual Hosts.
n UserscannowchoosetoviewtheirdashboardandReportamounts(e.g.DataBreachRisk
Reportliabilityamount)intwonewcurrencies-SwedishKrona(Kr)andSouthAfrican
Rand(R).YoucanchooseyourpreferredcurrencyintheAccount InfoTab.
Forafulllistofenhancementsandbugfixes,seehttps://status.solarwindsmsp.com/
Version2017.2.1
February2017
n Newdescriptive text clarifies the CurrencySymbol andSecurityLiabilityAmount
options inAccount Settings - ConfigurationOptions. See Account InfoTab.
Forafulllistofenhancementsandbugfixes,seehttps://status.solarwindsmsp.com/
RiskIntelligence -3-