Reveal(x) 360 Setup and Administration Guide

The System and Access Administration privilege is granted to the email address that you provided during sign up.

1. Open your Welcome to ExtraHop Reveal(x) 360 email.
2. Click the URL link to your Reveal(x) 360 environment.
3. At the login page, enter your email address and temporary password included in the email.
4. Click Sign In.
5. On the Change Password screen, enter a new password in both password fields and then click Send.
6. From the Multi-Factor Authentication Setup page, scan the QR code or manually enter the code that appears into your authenticator app.
7. Enter the code provided by your authentication app into the Code field and then click Complete Setup.
8. On the Success page, click Continue.

1. From the Reveal(x) 360 Overview page, click System Settings and then click All Administration.
2. Click User Access.
3. In the Users section, click View Users.
4. Click Create.
5. Enter the email address, first name, and last name of the new user.
6. In the Privileges section, select one of the following privileges.

   Privilege	Description
   System and access administration	Create and modify all objects and settings, including Administration pages, in Reveal(x) 360.
   System administration	Create and modify objects and settings, excluding User Access and API Access on the Administration page.
   Full write	Create and modify all objects and settings, excluding Administration pages.
   Limited write	Create, modify, and share dashboards. Create and modify tuning rules. Create and modify detection and threat briefing notification rules.
   Personal write	Create personal dashboards and modify dashboards shared with the logged-in user.
   Full read-only	View objects in the ExtraHop system.
   Restricted read-only	View dashboards shared with the logged-in user.

7. In the Packet and Session Key Access section, select one of the following privileges:

   Privilege	Description
   Packets and session keys	Search and download packets and associated session keys.
   Packets only	Search and download packets.
   Packet slices only	Search and download the first 64 bytes of a packet.
   No access	No access to packets.

8. In the Detection Access section, select one of the following privileges.

   Privilege	Description
   Full access	Access to detections.
   No access	No access to detections.

9. Click Save.
   The user is sent an email that includes the URL of the Reveal(x) 360 environment and their temporary password. The temporary password expires in 7 days.
10. Click Done.

Control whether all users with limited write privileges can create and edit device groups. When this policy is selected, all limited write users can create device groups and add other limited write users as editors to their device groups.

1. From the Overview page, click System Settings, and then click User Access.
2. From the Global Privilege Policy section, click the Limited write users can create or edit device groups checkbox.
3. Click Save Changes.

Configure a list of IPv4 addresses and CIDR blocks that are allowed to access Reveal(x) 360.

1. From the Overview page, click System Settings and then click User Access.
2. In the Allow List section click, Enable Allow List.
3. Type a comma-separated list of the IPv4 addresses or CIDR blocks that are allowed to access the system. IPv6 addresses are not supported.
4. Click Save. It can take several minutes for the allow list to become active.

The System Time page displays the default system time settings and the default display time configured for your ExtraHop system.

1. From the Overview page, click System Settings and then click System Time.
2. From the Default System Time drop-down list, select the time zone you want.
3. From the Default Display Time for Users section, select one of the following options:
   • Browser time
   • System time
   • UTC
4. Click Save Changes.

Multi-factor Authentication (MFA) is a security enhancement that requires you to provide two forms of credentials when you log in to your account. In addition to your ExtraHop credentials, you must supply credentials from a 3rd-party authenticator app.

1. Choose a device, such as a computer or mobile device (phone or tablet), on which you can install apps.
2. Download and install an authentication app on the device. Here are some popular options:
   • Android and iOS: Google Authenticator, Authy
   • Windows and macOS: 1Password, OTP Manager
   • Chrome extensions: Authenticator
3. Open a new browser and sign in to your ExtraHop Reveal(x) 360 system.
4. Follow the instructions to scan or enter the code that appears on the ExtraHop Multi-Factor Authentication setup screen, and then enter the credentials provided by your authenticator app.

Administrators can upgrade sensors that are connected to Reveal(x) 360.

1. Log in to Reveal(x) 360.
2. Click the System Settings icon and then click Sensors.
   Sensors that are eligible for upgrade display an up arrow in the Sensor Version field.
   
3. Select the checkbox next to each sensor that you want to upgrade.
4. In the Sensor Details pane, select the firmware version from the Available Firmware drop-down list.

   The drop-down list only displays versions that are compatible with the selected sensors.

   Only the selected sensors that have a firmware upgrade available appear in the Sensor Details pane.

5. Click Install Firmware.

   When the upgrade completes, the Sensor Version field is updated with the new firmware version.