RootSecure Sensor SetupScheduled+Scanning+v1.pdf · a. Host Identification Scans b. Vulnerability...

5
Note: Please pay close attention to the areas highlighted in blue. To enable scanning: 1) Login to the RootSecure dashboard: https://dashboard.rootsoc.com ROOTSECURE SENSOR SET UP

Transcript of RootSecure Sensor SetupScheduled+Scanning+v1.pdf · a. Host Identification Scans b. Vulnerability...

Page 1: RootSecure Sensor SetupScheduled+Scanning+v1.pdf · a. Host Identification Scans b. Vulnerability Scanning i. The picture below represents the state that both Host Identification

Page | 1

Note: Please pay close attention to the areas highlighted in blue. To enable scanning:

1) Login to the RootSecure dashboard: https://dashboard.rootsoc.com

ROOTSECURE SENSOR SET UP

Page 2: RootSecure Sensor SetupScheduled+Scanning+v1.pdf · a. Host Identification Scans b. Vulnerability Scanning i. The picture below represents the state that both Host Identification

Page | 2

2) Under the “Config” dropdown, click “Sensor Config”

a. This will be located on the left-hand side of the page and is highlighted in blue below:

Page 3: RootSecure Sensor SetupScheduled+Scanning+v1.pdf · a. Host Identification Scans b. Vulnerability Scanning i. The picture below represents the state that both Host Identification

Page | 3

3) Navigate to the bottom of the page and select both:

a. Host Identification Scans b. Vulnerability Scanning

i. The picture below represents the state that both Host Identification Scans and Vulnerability Scanning should be in after performing steps “a” and “b”.

4) Select the “Update Sensor Configuration” button to confirm your changes.

Page 4: RootSecure Sensor SetupScheduled+Scanning+v1.pdf · a. Host Identification Scans b. Vulnerability Scanning i. The picture below represents the state that both Host Identification

Page | 4

To Blacklist IPs:

1) To Blacklist any IPs that you do not want the RootSecure sensor to scan:

a. Login to the RootSecure dashboard. b. Under the “Config” dropdown, click “Sensor Config”. c. Add any IP you do not want the sensor to scan in the “Blacklist IP/Networks” text-area.

“The blacklisted IP will display as green if it has been inputted correctly and red if there is an error”.

Page 5: RootSecure Sensor SetupScheduled+Scanning+v1.pdf · a. Host Identification Scans b. Vulnerability Scanning i. The picture below represents the state that both Host Identification

Page | 5

To Whitelist/Schedule IP Addresses for Scanning:

1) Login to the RootSecure dashboard. 2) Under the “Config” dropdown, click “Sensor Config”. 3) Find the “Sensor Scanning Schedule” section near the bottom of the page. 4) Fill in the form to set a schedule.

a. In the Target field, add the IP address range you would like to set the schedule for; using CIDR notation.

b. In the “Type” field, select the interval time you like to scan at (i.e. Daily, Weekly, Monthly). i. Select the “Continuously” option to *whitelist* an IP address/network. ii. By default, the RootSecure sensor will scan the network it is currently on.

c. In the Time field, provide a time for when the scan will occur at each interval; using a 24-hour clock.

5) Select the “Create Scheduled Scan” button to add the scanning schedule.

Section a.

Section b.

Section c.