SOCaaP

• Introduction
  • Logging-in To The SOCaaP Console
• Dashboard Overview
  • Summary
  • Alerts,Incidents And Website Vulnerabilities
  • Customer Health
• SOCaaP Alerts/Escalations
  • Log-in To The Admin Console
  • The Home Screen
  • Service Summary
  • Incidents Overview
    • Incidents
    • Threat Summary
  • Log Collection Summary
  • Threat Communication Graph
  • Tickets
  • Reports
  • Notification Settings
  • Integrate Your Office 365 Account With SOCaaP
• SOCaaP SIEM
  • Log-in To The Admin Console
  • The Main Interface
  • The Dashboard
  • Customer Asset Management
    • Add Customers
    • Add Assets For Monitoring
      • Hard Assets
      • Soft Assets
    • Configure Nxlog And Rsyslog To Send Logs To SOCaaP Server
    • Edit Customers
  • Query Management
    • Configure Event Queries
    • Long Term Analysis
    • Configure Custom Dashboards
    • Event Field Selection Settings
  • Manage Rules
    • Manage Correlation Rules
    • Manage Tagged Rules
    • Manage Aggregation Rules
  • Incidents
    • Manage Incidents
    • Incident Category Management
    • Category Action Management
  • Lists
    • Manage Live Lists
    • Manage Live List Content
    • Manage Range List Content
    • Manage IP Range List Content
    • Manage Multiple Column List Content
  • Manage Reports
  • Administration
    • Event Collection
    • Phantom Settings
    • Manage Users
  • Appendix 1 – Field Groups And Event Items Description
  • Appendix 2 –SOCaaP Supported Logs
• SOCaaP Web Protection
  • Add Websites
  • The Main Interface
  • The Dashboard
  • Website Data And Settings
    • Website Overview
    • Security Scans
      • Website Scans
      • Website Files Security Scans
        • Malware Scan Settings
          • Automatic Configuration
          • Manual Configuration
        • Run A Scan And View Results
        • Notifications, Malware Removal And Scheduled Scans
      • Vulnerability Scans
        • CMS Vulnerability Scans
        • OWASP Top 10 Vulnerability Scans
    • Content Delivery Network
      • Activate CDN For A Website
      • CDN Settings
      • View CDN Metrics
    • Firewall
      • WAF Statistics
      • WAF Events
      • Configure WAF Policies
      • Manage Custom Firewall Rules
    • SSL Configuration
    • DNS Configuration
    • Add Trust Seal To Your Websites
    • Back Up Your Website
      • Backup Settings
      • On-Demand Backup
      • View Backup Records And File Statistics
      • Restore And Download Website Files
      • Delete Backups
  • Manage Your Profile
• Sensor Installation
  • Requirements
  • (Option 1) Create Installation Media
  • (Option 2) Deploy Virtual Machine Environment
    • Create A New Virtual Machine
    • Configure Memory Size
    • Configure Hard Disk
    • Configure Hard Disk File Type
    • Configure Storage On Physical Hard Disk
    • Configure Size Of Virtual Hard Disk
    • Configure Network Settings
    • Select VM Startup Disk
  • Sensor Installation Steps
  • Sensor Configuration Steps
    • Login To The Web Portal
    • User Settings
    • Configure Network
    • Configure Timezone
    • Key Activation
    • (Optional) Valkyrie Key Verdict
    • (Optional) Forward Log
• Frequently Asked Questions
• About Xcitium Security Solutions

Add Websites

 

• You need to add websites to SOCaaP Web Protection to enable protection and to use the content delivery network (CDN).

• The number of sites you can add depends on your license. 

• Once added, you can configure threat monitoring and CDN settings for each site.

Add a new domain

• Login to SOCaaP Web Protection at https://enterprise.platform.xcitium.com/login with your username and password.
  

The dashboard shows all protected websites as a tile. Each tile provides an at-a-glance summary of any problems on the site.

• Click the 'Add New Site' tile, or the 'Add Site' button at top-right.
  
  

The 'Add Websites' wizard starts:

The wizard has three steps:

• Step 1 - Register your website

• Step 2 - Select License

• Step 3 - Site Provisioning in Progress
  

Step 1 - Register your website

• Enter the domain name of the website you want to register. Do not include 'www' at the start.

 

• Click 'Continue Setup' to move to the next step.

Step 2 - Select License

Next, choose the type of license you want to activate on the site.

• SOCaaP Web Protection features vary according to license type. 
  

• The drop-down menu lets you select from all licenses you have purchased.

• Choose the type of license you wish to associate with the domain:

• Click 'Finish' to proceed

Step 3 - Finalization

 

The final stage is for SOCaaP Web Protection to provision your site:

 

You will see the following confirmation message when registration is complete:

• Next up is to enable SOCaaP Web protection on the site

• Click 'Get Started' to open the 'Overview' page for the website

• The overview page lets you configure malware and vulnerability scans, firewall rules, CDN settings, and more

• This is covered in more detail in the Website Overview section.

Important Note: SOCaaP Web Protection generates a CNAME DNS record for the website you just enrolled You need to add this record to the DNS entry for your domain to route site traffic through the CDN To view the CNAME record: Select a website in the drop-down at top-left of the dashboard Select the 'DNS' tab (or click the hamburger button and select 'DNS') The CNAME DNS record is shown under 'DNS' Your web host may be able to help you add the CNAME. Guidance is also available at https://support.google.com/a/topic/1615038?hl=en. Tip: You can skip this step for now and add the CNAME to DNS later. See DNS Configuration for help with this.

• Repeat the process to add more websites.

Remove Websites

You can remove any site that you no longer want to protect with SOCaaP Web Protection.

• Select the website from the drop-down at top-left of the dashboard

• Click the 'Overview' tab (or click the hamburger button and select ''Overview')

• Click 'Remove Site' at the bottom-left of the interface:

 

A warning message is shown.

• Enter the URL of the site you want to delete. For example, my-website.com

• Click 'Remove Site'.

Note: Removing a website will delete all its data from SOCaaP Web Protection. The site's traffic will no longer be routed through the CDN You should manually revert the name servers in the site's DNS settings to their default servers The site license will become available for use on a different website