Home
Central Management Console
Centralized on-premises visibility and monitoring of your sensors.
Administrator Guide
Information and resources about the Administration section of the Central Management Console (CMC), and the tasks that you can do in this part of the software.
Administration
Settings
Users management
The Users management page shows all the pages that you need to let you manage authentication and authorization policies for users and groups.
SAML
Nozomi Networks supports security assertion markup language (SAML) single sign-on (SSO) authentication.
Single sign-on in the CMC
A description of how a Central Management Console (CMC) needs to be configured for single sign-on (SSO).

Central Management Console
Centralized on-premises visibility and monitoring of your sensors.
- Introduction
  An overview of the Central Management Console (CMC).
- Installation Guide
  Information and resources on how to install the Central Management Console (CMC), and the different options and settings available.
- Administrator Guide
  Information and resources about the Administration section of the Central Management Console (CMC), and the tasks that you can do in this part of the software.
  - Administration
    - Administration page
      The administration page lets a user with administrator privileges configure settings and do other tasks.
    - Settings
      - Security control panel
        The Security control panel page shows an overview of the current status of the learning process and lets you configure the features that manage the: learning, security profile, zones, alerts tuning, and alert closing options.
      - Features
        The Features page shows an overview of the current status of system features configuration and lets you fine tune specific values.
      - Users management
        The Users management page shows all the pages that you need to let you manage authentication and authorization policies for users and groups.
        Users
        The Users page shows a list of users and lets you create and delete users, and change the password and/or username of existing users.
        Groups
        The Groups page shows a list of all the user groups.
        OpenAPI Keys
        The OpenAPI Keys page lets you manage the openAPI keys. You can use OpenAPI keys for bearer token authentication instead of basic authentication, which uses a username and password.
        Active Directory
        In addition to local users, you can configure existing Active Directory users for login.
        Configure Active Directory integration
        The Active Directory page lets you configure integration.
        LDAP
        The LDAP page shows a list of all the lightweight directory access protocol (LDAP) configurations.
        SAML
        Nozomi Networks supports security assertion markup language (SAML) single sign-on (SSO) authentication.
        Configure SAML integration
        The SAML page lets you add and configure security assertion markup language (SAML).
        Single sign-on in the CMC
        A description of how a Central Management Console (CMC) needs to be configured for single sign-on (SSO).
        Configure CMC for single sign-on (SSO)
        How to configure Central Management Console (CMC) to use it as an identity provider for sensors that are connected to it.
      - CLI
        The CLI page lets you change configuration parameters and perform troubleshooting activities.
      - Dashboards
        The Dashboards page lets you create and configure widget-based dashboards that provide information about your network. The dashboards created here will show on the Guardian home page, and give an overview of the monitored environment.
      - Threat Intelligence
        The Threat Intelligence page lets you manage packet rules, YARA rules, Sigma rules, structured threat information expression (STIX) indicators and vulnerabilities to provide detailed threat information.
      - Custom fields
        The Custom fields page lets you create a custom field to the Nodes (All-In-One CMC only) and Assets tables. A custom field lets you add information that might be relevant to your organization, and cannot be extracted from network traffic.
      - Data integration
      - Credentials manager
        The Credentials manager is a tool that lets you centralize the management of monitored endpoints to make it easier to create, delete, or update the credentials that are needed to access those endpoints.
      - Zone configurations
        The Zone configurations page shows all the zone configurations in your environment and lets you add new zone configurations and edit them.
      - Synchronization settings
        The Synchronization settings page lets you customize the parameters related to upstream or downstream machines.
      - Alert playbooks
    - System
- User Guide
  Information and resources about the main features of the Central Management Console (CMC), and the tasks that you can do from the user interface (UI).
- Maintenance Guide
  Information about the maintenance tasks of Central Management Console (CMC), to help you administer and maintain the solution in a production environment.

Single sign-on in the CMC

A description of how a Central Management Console (CMC) needs to be configured for single sign-on (SSO).

In installations with more than one Central Management Console (CMC) level:

Each CMC should be configured as an identity provider (IdP)
Each sensor should be configured to use the connected CMC as its IdP

For example, if a Guardian is connected to a mid-level CMC, that is connected to a top-level CMC, the following configurations allow single sign-on (SSO) from the Guardian:

The top-level CMC requires integration with the external SSO service on the Users Management page, and also requires configuration as an IdP
The mid-level CMC security assertion markup language (SAML) integration requires use of the top-level metadata file as its SSO IdP, and also requires configuration as an IdP
The Guardian’s SAML integration requires use of the mid-level CMC’s metadata file to allow the mid-level CMC to be used as an IdP

A login attempt from Guardian redirects the user through the mid-level CMC and the top-level CMC to the external SAML service.

Nozomi Networks recommends you use hypertext transfer protocol secure (HTTPS) as the protocol. However, you can also use hypertext transfer protocol (HTTP). The address can also be a fully qualified domain name (FQDN), or an internet protocol (IP) address.

Examples:

cmc identity_provider_url https://192.168.1.8
cmc identity_provider_url https://cmc.example.com