SOCaaP Sensor Admin Guide

Customer Health

Customer Health dashboard includes the total Customers, Alerts/Escalations, Endpoints Security, Cloud Security, Network Security, Web Security, Onboarding Status and Action.

Use the arrow in the column left to filter according to the customer needs.
You can filter the statistics for a specific customer by clicking the customer name from the displayed list or use the search bar to search the specified customer.

When you clicked on the selected customer name, details about the customer should be shown under Customer Health Card
The Customer Health Card displays the snapshot of Threats, Securities, Reports and Customer Health that were detected from selected customer networks from a defined period.

Customer Health
Column Header	Description
Customer	Indicates the customer on whose network the customer health was detected
Alerts / Escalations	Shows the counts of alerts / Escalations that received
Endpoint Security	Endpoint Manager discovers and enroll all assets of your customers instantly. The Endpoint Security contains 'Not Protected’, ‘Protected' and 'Managed' tile. You can check the stautus of the Endpoint Security .If the Onboard completes when it comes to 100 % ,to check the On-Boarding status select any specific customer. You can view the On-Boarding status of a particular customer. The status of the total enrolled endpoints is denoted in different colours. The 'Not Protected' displays in a red dotted colour, ‘Protected in Yellow dot and ‘Managed’ in green colour respectively. You can view the percentage or count of a not protected endpoint of a selected customer Click ‘Start Managed Protection’ to add the devices. Select Devices that you'd like to start managed/protected endpoints to add protection. It will show OS, device name, device state and action. Click the unprotected device check box name Click 'Manage' your endpoint will be protected now You can use the search bar to search the devices or select all devices to add. Click the 'Unmanage' option should be able to stop managing already managed endpoints. Click ‘Close' To add installation packages click ‘Deploy Agents’. Select the required Package Options according to your needs and click ‘Download Installer’.See Bulk Installation Package if you want more help with this.
Cloud Security	SOCaaP integrates with Cloud, provides one click integration to Office 365, Azure, Google Cloud so you can see threats beyond your endpoint and network. If O365 is connected, you should be able to see how many O365 accounts are monitored on each customer Click 'Revoke O365 Incident Management' to monitor any of the customers or if it is not connected To add the O365 Monitoring Click ‘Start Monitoring’ Enter the Client ID, Tenant ID and Secret Key of your 0365 account and click ‘Start 0365 Monitoring’
Web Security	Web security provide protection for websites, web applications and web servers against the increasing website hacking threats. The tile shows the risk status of your Web Security. Web security contains total count of ‘Managed hosting Sites, ‘Protected Web Assests' Click ‘Start Website Protection’ It will shows domain name, domain state and action. You can search using the domain name in the search bar or select a domain and click ‘Add Domain’. Web security contains 'Not Protected’, ‘Protected' and 'Managed' tile. You can view the percentage or count of the web security of a particular customer To protect your web click 'Not Protected' or ‘Start Website Protection’
Network Security	SOCaaP provides you with network security monitoring to detect threats on your customer’s network. This tile shows the risk status of your network security. The network security shows the logs log from your customer network Enrolled customers can download or activate the Log Sources/Sensor from the portal. Click ‘Download New Sensor’ to download a new one. You’ll automatically receive the download, If not click redownload option to download again.Refer to the given installation guide if you face any doubts while the installation process. Click the 'Activate a Sensor' copy the activation key and finish the setup. SOCaaP customers will be able to set up multiple sensors for a client so that they can collect events from different networks Click ‘Close’ after downloading the sensor
On Boarding Status	This indicates the total percentage of On-Boarding status. If the Onboard completes when it comes to 100 % ,to check the On-Boarding status select any specific customer. You can view the On-Boarding status of a particular customer.
SOC Security	SOC Security provides the the escalation contact helps to resolve issues of the customer that failed to address. Select any email address to set as escalation contact click 'Set Contact'. Click 'Remove' to remove a contact or you can set one or two as escalation contact for a customer.
Actions	Displays the overall action provided by the SOCaaP Sensor. Click the three dots symbol to select specific actions. Actions tab includes ‘Service Summary’, ‘Incidents overview’, ‘Log Collection Summary’, ‘Tickets’ and ‘Reporting’. Customer can view the specific action by selecting them. Each of them provides a detailed view of the ‘Actions’

To add a new customer

Click the 'New Customer' button at the bottom of the 'Customer Health' pane on the left
The 'New Customer' screen will be displayed

Enter the name of customer in the 'Name' field.
Enter the Email address in the ‘Contact Email’
Enter the address of the company or customer in the 'Address' field.
Add ‘Postal Code’
Enter Description if you need to add, it is not mandatory
Click 'Add Web Asssests' if you want to add your website. You can add multiple websites by clicking the 'Add Web Asset' link one by one.

Click ‘Save’
The customer will be added. You can view the added customer in the ‘Customer Health’ Section or use the ‘Search Customers’ Option at the top to search the newly added customers.
Repeat the process to add more customers

OR
Click the ‘Import from ConnectWise’ tab to import the customers.

Import from ConnectWise

The SOCaaP Sensor is Integrated with PSA tools, enables zero-time onboarding for the customers.

In the "Import Customers from ConnectWise" step, where you should be able to list all the customers fetched from Connect Wise.We can able to choose customers to add to SOCaaP when customers are imported from ConnectWise.

Enter the ‘Connect Wise Site’ URL of yours
Enter ‘ConnectWise Client ID’
Add your ‘ConnectWise Company name
Enter the ‘Public and Private Key’. These are the API keys that are generated by ConnectWise Manage for an integration account.
Click 'Next'

The "Import Customers from ConnectWise" lets you to synchronise the customers to SOCaaP

You can view the ConnectWise customers list.Select customers that you would like to start protection.

Use the checkbox to select all or specific customer to add SOCaaP
Each row contains the Customer name, Contact mail, Identifier, Status, etc.
Use the search box to search the particular customer via contact email or customer name
Click 'Import'

A success message displays 'Customers Successfully Imported'

SOCaaP

Version 2.2

English

Customer Health