Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
19 changes: 17 additions & 2 deletions docs/1secure/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,21 @@ sidebar_position: 1
---

# Netwrix 1Secure Documentation
Netwrix 1Secure is a simple SaaS application that helps you analyze both on-premises and cloud environments. The application collects data within the IT infrastructure and notifies you on any actions made to the organization. These actions may include account creation or deletion, changes to group memberships, changes to the organization, etc.

Netwrix 1Secure allows Managed Service Providers to generate a variety of reports to investigate incidents and suspicious activities across the IT environment.
Netwrix 1Secure is a Microsoft Azure-hosted, multi-tenant SaaS application that provides a single location to monitor and audit both on-premises and cloud environments. The application collects data from your IT infrastructure and notifies you of actions made to the organization, such as account deletions, account additions, group membership changes, and configuration changes.

Netwrix 1Secure serves Managed Service Providers (MSPs) who manage multiple client organizations. MSPs use 1Secure to run reports, investigate incidents, detect suspicious activity, and analyze security risks across all managed organizations.

## Key capabilities

- [**Dashboard**](/docs/1secure/admin/dashboard/overview.md) — A unified dashboard showing alerts, risk levels, and health status across all managed organizations.
- [**Incident investigation**](/docs/1secure/admin/searchandreports/overview.md) — Flexible search and custom reports to find who changed what, when, and where across Active Directory, Microsoft Entra ID, Computer, Exchange Online, and SharePoint Online environments.
- [**Risk assessment**](/docs/1secure/admin/riskprofiles/riskprofiles.md) — Risk profiles with configurable thresholds to identify vulnerabilities such as inactive accounts and stale permissions across managed organizations.
- [**Alert profiles**](/docs/1secure/admin/alerts/overview.md) — Configurable alerts that detect suspicious activity on-premises and in the cloud and deliver notifications by email or through ticketing systems.
- [**Third-party integrations**](/docs/1secure/integration/overview.md) — Connects to ConnectWise and ServiceNow for ticket management, with support for report delivery to SharePoint Online.

```mdx-code-block
import DocCardList from '@theme/DocCardList';

<DocCardList />
```
12 changes: 5 additions & 7 deletions docs/1secure/requirements/CloudAgentRequirements.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ sidebar_position: 20
# Netwrix Cloud Agent Requirements

:::warning
Deploy only one Netwrix Cloud Agent per audited on-premises AD domain. If both Netwrix Auditor and Netwrix 1Secure audit the same domain, ensure that at most one product has network traffic compression service enabled for any of the audited sources.
Deploy only one Netwrix Cloud Agent per audited on-premises AD domain. If both Netwrix Auditor and Netwrix 1Secure audit the same domain, enable network traffic compression for at most one product across the shared sources.
:::


Expand All @@ -29,7 +29,7 @@ Netwrix Cloud Agent requires the following software:
- Windows Installer 3.1 or later
- Windows PowerShell 3.0 or later

The machine where you plan to deploy the agent must meet the following requirements.
The agent host must meet the following hardware requirements.

| Hardware component | Evaluation, PoC, or starter environment | Regular environment (up to 1m Activity Records/day) | Large environment (1-10m Activity Records/day) | XLarge environment (10m Activity Records/day or more) |
| ------------------ | -------------------------------------- | --------------------------------------------------- | ---------------------------------------------- | ----------------------------------------------------- |
Expand All @@ -38,12 +38,10 @@ The machine where you plan to deploy the agent must meet the following requireme
| Disk space | 200 GB—System drive | 200 GB—System drive | 2 TB—System drive | 1 TB + 1 TB per year —System drive |
| Others | — | — | Network capacity 1 Gbit | Network capacity 1 Gbit |

## Requirements for outbound communications with a Netwrix Cloud Agent
## Outbound communication requirements

To review the security incorporated by the agent in your system, examine the target URL in the
Configuration.xml file, which is located on the agent host at:
To review agent security settings, examine the target URL in Configuration.xml, located on the agent host at:

`C:\ProgramData\Netwrix Cloud Agent\AgentCore\ConfigServer\Configuration.xml`

You must also open the outbound TCP port 443 on the server where the Netwrix Cloud Agent resides.
See the [Install Agent](/docs/1secure/install/installagent.md) topic
Open outbound TCP port 443 on the agent host. See [Install Agent](/docs/1secure/install/installagent.md) for installation steps.
11 changes: 6 additions & 5 deletions docs/1secure/requirements/overview.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,9 +6,10 @@ sidebar_position: 20

# Requirements

This topic provides the requirements for installing Netwrix Cloud Agent and the prerequisites for
configuring data sources to collect data from various environments.
Review the Netwrix Cloud Agent software requirements and the prerequisites for each data source you plan to monitor.

See the following topics for additional information:
- [Agent Software Requirements](/docs/1secure/requirements/CloudAgentRequirements.md)
- [Prerequisites for Data Sources](/docs/1secure/requirements/prerequisitesfordatasources.md)
```mdx-code-block
import DocCardList from '@theme/DocCardList';

<DocCardList />
```
10 changes: 5 additions & 5 deletions docs/1secure/requirements/prerequisitesfordatasources.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,12 +6,12 @@ sidebar_position: 10

# Prerequisites for Data Sources

This section lists platforms and systems that can be monitored with Netwrix 1Secure.
The following table lists the platforms and versions that Netwrix 1Secure can monitor.

| Data source | Supported Versions |
| --- | ---|
| Active Directory (including Logon Activity) | Domain Controller OS versions: <br /><ul><li> Windows Server 2022</li><li>Windows Server 2019</li><li>Windows Server 2016</li><li>Windows Server 2012 R2</li></ul> |
| Microsoft Entra ID | Microsoft Entra ID version provided within Microsoft Office 365 Depending on the authentication method you use to collect Azure AD and Office 365 data, additional configuration steps may be required. See the [App Registration and Configuration in Microsoft Entra ID](/docs/1secure/configuration/registerconfig/registerconfig.md) topic for additional information. |
| Computer (Windows File Server) | <ul><li>Windows Server OS<ul><li>Windows Server 2022</li><li>Windows Server 2019</li><li>Windows Server 2016</li><li>Windows Server 2012 R2</li></ul></li><li>Windows Desktop OS (32 and 64-bit)<ul><li>Windows 10</li><li>Windows 8.1</li><li>Windows 7</li></ul></li></ul>Consider the following: <br /><ul><li>To collect data from 32-bit operating systems, network traffic compression must be disabled.</li><li>To collect data from Windows Failover Cluster, network traffic compression must be enabled.</li><li>Scale-Out File Server (SOFS) cluster isn't supported.</li></ul>|
| SharePoint Online | Azure Active Directory version provided within Microsoft Office 365 Depending on the authentication method you use to collect SharePoint Online and OneDrive for Business data, additional configuration steps may be required. See the [App Registration and Configuration in Microsoft Entra ID](/docs/1secure/configuration/registerconfig/registerconfig.md) topic for additional information. |
| Exchange Online | Azure Active Directory version provided within Microsoft Office 365 Depending on the authentication method you use to collect Exchange Online data, additional configuration steps may be required. See the [App Registration and Configuration in Microsoft Entra ID](/docs/1secure/configuration/registerconfig/registerconfig.md) topic for additional information.
| Microsoft Entra ID | Microsoft Entra ID, as provided within Microsoft 365. Depending on your authentication method, you may need additional configuration. See [App Registration and Configuration in Microsoft Entra ID](/docs/1secure/configuration/registerconfig/registerconfig.md) for details. |
| Computer (Windows File Server) | <ul><li>Windows Server OS<ul><li>Windows Server 2022</li><li>Windows Server 2019</li><li>Windows Server 2016</li><li>Windows Server 2012 R2</li></ul></li><li>Windows Desktop OS (32 and 64-bit)<ul><li>Windows 10</li><li>Windows 8.1</li><li>Windows 7</li></ul></li></ul><br />Additional requirements:<br /><ul><li>Disable network traffic compression for 32-bit operating systems.</li><li>Enable network traffic compression for Windows Failover Cluster.</li><li>Netwrix 1Secure doesn't support Scale-Out File Server (SOFS) clusters.</li></ul>|
| SharePoint Online | Microsoft Entra ID, as provided within Microsoft 365. Depending on your authentication method, you may need additional configuration. See [App Registration and Configuration in Microsoft Entra ID](/docs/1secure/configuration/registerconfig/registerconfig.md) for details. |
| Exchange Online | Microsoft Entra ID, as provided within Microsoft 365. Depending on your authentication method, you may need additional configuration. See [App Registration and Configuration in Microsoft Entra ID](/docs/1secure/configuration/registerconfig/registerconfig.md) for details. |
Loading
Loading