Capture Client Getting Started Guide

Configuration

When you navigate to a new tenant for the first time in the management console, an automatic popup shows asking if you would like to configure the Tenant settings before you get started.

You can choose to dismiss this or get started. If you dismiss it, you can revisit these settings any time by either editing the tenant from the Scope Selector at the top or by navigating to Management > Tenant Settings in the specific Tenant scope.

When you choose to edit the Tenant settings it launches the Configure Tenant Settings wizard:

To set TENANT CUSTOMIZATION
1. In the Report Logo section, click the Edit icon.
2. Click Choose File.
3. Select the logo file and click Open.
  
  Make sure that the image is 128x128 pixels in size for best results. Images of other sizes are scaled.
4. To include a custom note in the Capture Client interface, enter appropriate text in the Client Customization box.
To define TENANT SETTINGS
1. To schedule device upgrades, in the TENANT SETTINGS section click the Edit icon next to Perform Upgrades At.
2. Set the schedule as required.
3. Click Save.
4. To enabling device file fetch, click the Device File Fetch Feature button.
5. Click Next.
To enable the email settings for notification
1. Enable Enable Email Settings toggle button.
  
  By default, the email notification settings will be inherited from the account scope for the new tenants. For the existing tenants, you can enable or disable the email and notifications settings into inherit from the account scope. Even when the Inheritance option is enabled, you can update the email recipient list and timezone for the Tenant.
2. Type the email addresses of the email recipients in the field provided. Separate email addresses by a comma (,) or semicolon (;).
3. Select the default Time Zone from the drop-down list.
4. If you want to include the tenant name in the subject line of the alert, enable that option. This option is only available to administrators of multiple tenant sites.
  
  From step 3d to 7f, you can update the settings only if the Inheritance is disabled for the Tenant. If enabled, it will be inherited from the Account scope.
5. Enable the Send Email in plaintext format toggle button, if intended to send email without including the header, footer, banner and all marketing/branding content.
6. Set up the Notification Settings for the following: Threats, Device Events, License, and Management.
To setup notifications for threats
1. Under the NOTIFICATION SETTINGS heading, select the Threats tab.
2. Slide the switch under ENABLED section to green for each type of threat you want to be notified about. The options include:
  - Threat Detected
  - Threat Killed and Quarantined/Remediated
  - Suspicious Activity Detected
  - Suspicious Activity K&Q/Remediated
3. Slide the switch under SEND EMAIL section to green for each type of threat for which you want to send email.
4. Slide the switch under CREATE ALERT section to green for each type of threat for which you want to create an alert.
5. Under the ALERT SEVERITY section select the severity level of the threats from the drop-down list. The options are:
  - Critical (dark red)
  - High (bright red)
  - Major (orange)
  - Minor (yellow)
  - Low (light yellow)
  - Normal (green)
  - Info (blue)
To setup notifications for device events
1. Under the NOTIFICATION SETTINGS heading, select the Device Events tab.
2. Slide the switch under ENABLED section to green for each type of device event you want to be notified about. The options include:
  - Infected Device
  - Device Offline
  - Scan Started
  - Scan Completed Successfully
  - Scan Completed with Errors
  - Other Devices Event
  - Found Application Vulnerability
  - Need Reboot
3. Slide the switch under SEND EMAIL section to green for each type of device event you want to send email.
4. Slide the switch under CREATE ALERT section to green for each type of device event you want to create an alert.
5. Under the ALERT SEVERITY section select the severity level of the device events from the drop-down list. The options are:
  - Critical (dark red)
  - High (bright red)
  - Major (orange)
  - Minor (yellow)
  - Low (light yellow)
  - Normal (green)
  - Info (blue)
6. Under the Notes section set the Notify After(days) by incrementing or decrementing the count and the Minimum Severity of the device events from the drop down list. The options are:
  - Critical (dark red)
  - High (bright red)
  - Major (orange)
  - Minor (yellow)
  - Low (light yellow)
  - Normal (green)
  - Info (blue)
Alert Severity is a notification alert level which will show in the email notification whereas Minimum Severity is a threshold value. An email notification will be sent for all events with Alert Severity level higher than this threshold(Minimum Severity). This feature is only applicable to "Other Device Events".
To setup notifications for licensing
1. Under the NOTIFICATION SETTINGS heading, select the License tab.
2. Slide the switch under ENABLED section to green for each type of license you want to be notified about. The options include:
  - License Expiring Soon
  - License Expired
3. Slide the switch under SEND EMAIL section to green for each type of license you want to send email.
4. Slide the switch under CREATE ALERT section to green for each type of license you want to create an alert.
5. Under the ALERT SEVERITY section select the severity level of the license from the drop-down list. The options are:
  - Critical (dark red)
  - High (bright red)
  - Major (orange)
  - Minor (yellow)
  - Low (light yellow)
  - Normal (green)
  - Info (blue)
To setup notifications for licensing
1. Under the NOTIFICATION SETTINGS heading, select the Management tab.
2. Slide the switch under ENABLED section to green for each type of management activity you want to be notified about. The options include:
  - Global Notification
  - Planned Maintenance
  - New Version Available
  - Incompatible versions
  - End of Support
  - Invalid Release
  - Other Console Event
  - Report Ready to Download
3. Slide the switch under SEND EMAIL section to green for each type of management activity you want to send email.
4. Slide the switch under CREATE ALERT section to green for each type of management activity you want to create an alert.
5. Under the ALERT SEVERITY section select the severity level of the management activity from the drop-down list. The options are:
  - Critical (dark red)
  - High (bright red)
  - Major (orange)
  - Minor (yellow)
  - Low (light yellow)
  - Normal (green)
  - Info (blue)
6. Under the Notes section set the Minimum Severity of the management activity from the drop down list. The options are:
  - Critical (dark red)
  - High (bright red)
  - Major (orange)
  - Minor (yellow)
  - Low (light yellow)
  - Normal (green)
  - Info (blue)
  Alert Severity is a notification alert level which will be shown in the email notification whereas Minimum Severity is a threshold value. An email notification will be sent for all events with Alert Severity level higher than this threshold(Minimum Severity). This feature is only applicable to "Other Console Event".
To set up notifications for SysLog settings:
1. Slide the switch under SysLog section to green.
  
  If you select the Enable Inheritance option, you cannot edit the SysLog settings as the parent scope SysLog settings changes are automatically enforced.
2. Specify the Host Name.
3. Select the TLS checkbox to enable TLS Secure Connection.
4. Select the Information Format options.
Click Confirm to review the policy.
This shows the current state of the tenant, indicating that all policies are inherited by default from a parent element. This has best practices enabled for Malware protection, but other settings are likely empty. You can also pivot to create groups for your tenant that allows further customization of policies.
Review the policy and , click Done.

< Prev Section

Next Section >

Capture Client Getting Started Guide

Table of Contents

Configuration