Home
CMC
Administrator Guide
Information and resources about the Administration section of the Central Management Console (CMC), and the tasks that you can do in this part of the software.
Administration
Settings
Synchronization settings
The Synchronization settings page lets you customize the parameters related to upstream or downstream machines.
General
The General page lets you configure the upstream connection, high availability (HA) modes, and other general settings.
General settings
The General settings section lets you choose the context for the CMC, how sensors will be updated, and navigation settings.

CMC
- Introduction
  An overview of the Central Management Console (CMC).
- Installation Guide
  Information and resources on how to install the Central Management Console (CMC), and the different options and settings available.
- Administrator Guide
  Information and resources about the Administration section of the Central Management Console (CMC), and the tasks that you can do in this part of the software.
  - Administration
    - Administration page
      The administration page lets a user with administrator privileges configure settings and do other tasks.
    - Settings
      - Security control panel
        The Security control panel page shows an overview of the current status of the learning process and lets you configure the features that manage the: learning, security profile, zones, alerts tuning, and alert closing options.
      - Features control panel
        The Features control panel page shows an overview of the current status of system features configuration and lets you fine tune specific values.
      - Users management
        The Users management page shows all the pages that you need to let you manage authentication and authorization policies for users and groups.
      - CLI
        The CLI page lets you change configuration parameters and perform troubleshooting activities.
      - Dashboards
        The Dashboards page lets you create and configure widget-based dashboards that provide information about your network. The dashboards created here will show on the Guardian home page, and give an overview of the monitored environment.
      - Threat Intelligence
        The Threat Intelligence page lets you manage packet rules, YARA rules, Sigma rules, structured threat information expression (STIX) indicators and vulnerabilities to provide detailed threat information.
      - Data model
        The Data model page lets you create a custom field to the Nodes (All-In-One CMC only) and Assets tables. A custom field lets you add information that might be relevant to your organization, and cannot be extracted from network traffic.
      - Data integration
      - Credentials manager
        The Credentials manager is a tool that lets you centralize the management of monitored endpoints to make it easier to create, delete, or update the credentials that are needed to access those endpoints.
      - Zone configurations
        The Zone configurations page shows all the zone configurations in your environment and lets you add new zone configurations and edit them.
      - Synchronization settings
        The Synchronization settings page lets you customize the parameters related to upstream or downstream machines.
        General
        The General page lets you configure the upstream connection, high availability (HA) modes, and other general settings.
        General settings
        The General settings section lets you choose the context for the CMC, how sensors will be updated, and navigation settings.
        Upstream connection
        A description of the Upstream connection section of the General page.
        High Availability mode
        High Availability mode (HA) lets you replicate data between two Central Management Consoles (CMC).
        Connect a sensor to CMC
        Connect one or more sensors to a Central Management Console (CMC).
        Policy
        The Policy page lets you centrally configure the data synchronization settings for Central Management Consoles (CMC) and sensors.
        Tuning
        A description of how you can enable, or disable, data synchronization for entities in the Central Management Console (CMC).
      - Alert playbooks
    - System
- User Guide
  Information and resources about the main features of the Central Management Console (CMC), and the tasks that you can do from the user interface (UI).
- Maintenance Guide
  Information about the maintenance tasks of Central Management Console (CMC), to help you administer and maintain the solution in a production environment.
- Print format documentation
  A list of all the print-format documentation that is available for the Central Management Console (CMC).

General settings

The General settings section lets you choose the context for the CMC, how sensors will be updated, and navigation settings.

General settings — Figure 1. General settings

CMC context

This section has a toggle that lets you choose between two contexts:

Multicontext
All-In-One

Multicontext: is the default setting, and is suitable for most environments. Multicontext indicates that the data gathered from the sensors connected to the Central Management Console (CMC) will be collected and kept separately. In Multicontext mode, the user can focus on a single Guardian to access their data in their separate contexts. This is the default operational mode and it permits the highest scalability and supports multitenancy, which is ideal for Managed Security Service Provider (MSSP)s.

All-In-One: indicates that the information will be merged. In All-In-One mode, the user gets a unique, merged Environment section. This configuration is recommended for smaller and cohesive environments.

The Alerts and Assets pages are common to both modes.

Sensor update policy

This section has a toggle that lets you choose between:

Update sensors
Do not update sensors

This determines whether the sensors connected to the CMC will automatically receive updates when a new version of the software is available.

The Let the user perform the update on the sensors toggle lets you choose between:

Yes, or
No

Remote access to connected sensors

This section has a toggle that lets you choose between:

Allow, or
Deny

This lets you allow, or deny, the remote access to a sensor through the current CMC.