Home
Guardian
Administrator Guide
Information and resources about the Administration section of Guardian, and the tasks that you can do in this part of the software.
Administration
Settings
Synchronization settings
The Synchronization settings page lets you customize the parameters related to Vantage or Central Management Console (CMC).

Guardian
- Introduction
  An overview of Guardian.
- Installation Guide
  Information and resources on how to install Guardian, and the different options and settings that are available.
- Administrator Guide
  Information and resources about the Administration section of Guardian, and the tasks that you can do in this part of the software.
  - Administration
    - Administration page
      The administration page lets a user with administrator privileges configure settings and do other tasks.
    - Settings
      - Security control panel
        The Security control panel page shows an overview of the current status of the learning process and lets you configure the features that manage the: learning, security profile, zones, alerts tuning, and alert closing options.
      - Features control panel
        The Features control panel page shows an overview of the current status of system features configuration and lets you fine tune specific values.
      - Users management
        The Users management page shows all the pages that you need to let you manage authentication and authorization policies for users and groups.
      - CLI
        The CLI page lets you change configuration parameters and perform troubleshooting activities.
      - Dashboards
        The Dashboards page lets you create and configure widget-based dashboards that provide information about your network. The dashboards created here will show on the Guardian home page, and give an overview of the monitored environment.
      - Threat Intelligence
        The Threat Intelligence page lets you manage packet rules, YARA rules, Sigma rules, structured threat information expression (STIX) indicators and vulnerabilities to provide detailed threat information.
      - Data model
        The Data model page lets you create a custom field to the Nodes (All-In-One CMC only) and Assets tables. A custom field lets you add information that might be relevant to your organization, and cannot be extracted from network traffic.
      - Data integration
      - Firewall integration
        The Firewall integrations page shows all the firewall integrations and lets you add new ones.
      - Credentials manager
        The Credentials manager is a tool that lets you centralize the management of monitored endpoints to make it easier to create, delete, or update the credentials that are needed to access those endpoints.
      - Zone configurations
        The Zone configurations page shows all the zone configurations in your environment and lets you add new zone configurations and edit them.
      - Synchronization settings
        The Synchronization settings page lets you customize the parameters related to Vantage or Central Management Console (CMC).
        Connect a sensor to CMC
        Connect one or more sensors to a Central Management Console (CMC).
      - Alert playbooks
    - System
- User Guide
  Information and resources about the main features of Guardian, and the tasks that you can do from the user interface (UI).
- Maintenance Guide
  Information about the maintenance tasks of Guardian, to help you administer and maintain the solution in a production environment.
- Print format documentation
  A list of all the print-format documentation that is available for Guardian.

Synchronization settings

The Synchronization settings page lets you customize the parameters related to Vantage or Central Management Console (CMC).

Synchronization settings page — Figure 1. Synchronization settings page

Sync token

To synchronize/replicate with another machine, you will need to copy the Sync token to the machine you want to synchronize with.

Sensor ID

This is the identifier (ID) of the current sensor.

General settings

The Sensor update policy has two options:

Update sensors
Do not update sensors

Upstream Connection

This section has a toggle that can be set to ON or OFF. When this is set to ON, you can select Check connection to make sure that the connection is okay.

The Use proxy connection checkbox lets you use an auxiliary system that provides a gateway between the sensor and the upstream sensor or connection.

The Host (CA-Emitted TLS Certificate) field is where you need to enter the internet protocol (IP) address of the machine that you want to connect to. This can be set to either:

Optional
Required

The Sync token field lets you enter the synchronization token for the upstream machine.