Users – SGBox Next Generation SIEM & SOAR

Group panel – functionalities and usage

SGBox — Tue, 21 May 2024 09:40:17 +0000

The group panel allows you to manage the groups.

Main Page

The Main Page displays the name, the description and the various permissions of the profiles.

Actions box
- Select All: Selects all the profiles in the table.
- Multiple Editing: Opens a dialog for multiple editing of selected profiles.
- Remove: Opens a dialog for profiles removal.

Filter box
- Input field: Filters the entire table based on the entered value, which is compared with all the cells.
- Pin Icon: Pins the filter after a hypothetical reload.

Table Actions box:
- Plus icon: Opens a dialog to add a new profile
- .CSV: Downloads the table in CSV format.
- .XLS: Downloads the table in XLS format.

Edit icon: Opens a container for Profile Editing

Trash icon: Select the group for the Profile Removal

New Group

This dialog allow for adding a group. The user needs to enter the name (1) and choose at least one module which must be on . If desired, the user can insert the description (2) yet.

Name: it is the name of the group.

Description: It is the description of the group.

Pages Section: This section allows you to choose one or more modules to be associated to the group.

Edit Group

The operation is exactly the same as the New Group. You can change any field.
In order to apply the changes click on the Save button.

Multiple Editing

Multiple Editing allows you to modify the description and the associated permissions. It shows a “Used for” popover containing the associated groups as a reminder.
In order to apply the changes, click on the Save button.

Delete Groups

To delete multiple groups, first select one of the groups using the Remove icon (1), then press the select all button (2). Once you’ve selected one or more groups, the Remove button (3) will activate.

After clicking the remove button on the main page, a container will appear, allowing you to complete the deletion
It displays the selected groups as a reminder.
Click remove to apply the deletion.

Profile Panel – functionalities and usage

SGBox — Tue, 21 May 2024 07:35:47 +0000

The profile panel allows you to manage the profiles.

Main Page

The Main Page displays the name and the description of the profiles.

Actions box
- Select All: Selects all the profiles in the table.
- Multiple Editing: Opens a dialog for multiple editing of selected profiles.
- Remove: Opens a dialog for profiles removal.
Filter box
- Input field: Filters the entire table based on the entered value, which is compared with all the cells.
- Pin Icon: Pins the filter after a hypothetical reload.
Table Actions box:
- Plus icon: Opens a dialog to add a new profile
- .CSV: Downloads the table in CSV format.
- .XLS: Downloads the table in XLS format.
Edit icon: Opens a container for Profile Editing

New Profile

This dialog allow for adding a profile. The user needs to enter the name and choose at least one page . If desired, the user can insert the description yet.

Name: it is the name of the profile.
Description: It is the description of the profile.
Pages Section: This section allows you to choose one or more pages to be associated to the profile. You can use the switch (4) to enable all the pages of the level below.

You can select the pages by clicking on the page rows. If you want to create some spaces, you can click on the module, and their visibility will toggle.

Edit Profile

The operation is exactly the same as the New Profile. You can change any field.
In order to apply the changes click on the Save button.

Multiple Editing

Multiple Editing allows you to modify the description and the associated pages. It shows a “Used for” popover containing the associated profile as a reminder.
In order to apply the changes, click on the Save button.

Delete Profile

To delete multiple profiles, first select one of the profiles using the Remove icon (1), then press the select all button (2). Once you’ve selected one or more profiles, the Remove button (3) will activate.

After clicking the remove button on the main page, a container will appear, allowing you to complete the deletion
It displays the selected profiles as a reminder.
Click remove to apply the deletion.

Show SGBox SCMID

SGBox — Wed, 14 Apr 2021 16:30:09 +0000

The SCMID in the unique identifier for each SGBox machine. It’s necessary to generate the license or open a ticket with the SGBox support

On Deploy Machine

Web Interface Wizard

The Wizard is displayed and the SCMID is shown.

VM Console

SCMID could also be shown the fist time you deploy the OVF template. After found the SGBox, you can connect to the WebUI.

Web Interface

If you have an SGBox version equal or greater than 5.1.3 you can see your SCMID from WebUI:
Go to SGBOX > SCM > Users > License

SCMID is the 32 byte alfanumeric code

CLI Interface

If your is SGBox has a version lower than 5.1.3, you can see your SCMID from CLI interface:
Connect to SGBox to the SSH terminal with any software (eg. Putty)

user: cli pass: CL1changePW
Select Show this SGBox ID option

The SCMID is shown.

Configure Strong Authentication

SGBox — Tue, 13 Apr 2021 13:52:15 +0000

Log in to SGBox using an Strong Authentication

This article explains how to configure SGBox to use Strong Authentication during the user login. SGBox use Google Authentication as authentication provider.

Loging to the SGBox Web interface:
Go to SCM > Users > Users

Create new local user, in our example:

user: otpuser
pass: Pass1234

Enable the Strong Authentication for this user

Download Google Authenticator app on your phone and scan the QR code. A new SGBox profile will be added.

The new logon logon credential based on our example will be:
user: otpuser
pass: Pass1234679387

The OTP will expire after few seconds and a new one will be generated.

Configure AD/LDAP Server

SGBox — Mon, 23 Sep 2019 10:42:40 +0000

Log in to SGBox using an Active Directory or LDAP Server

This article explains how to configure SGBox to use AD or LDAP Server in order to check authentication during the users login.

Loging to the SGBox Web interface:
Go to SCM > Users > Users

Click on Settings in a top right corner.

Click on New Server in a bottom left corner, and a new window appears. Enter:

Select in Authentication Type if your server is an AD or Open LDAP
Server description: A common name to identify your server
Primary Address: The IP Address of your server
Connection string
Specify user and password
Click TEST to apply

For AD, if you need to filter users belonging to a specific group, you can change:

the ‘Connection String’ to ‘CN=Users,DC=uno,DC=local’
‘User filter’ to ‘(&(objectClass=person)(memberOf=CN=GroupName,CN=Users,DC=uno,DC=local))’.

After configured, click on Import and select your server from the list.

The list of the user appears. Select the user you want import and click on Import the bottom left corner.

Click on Users list to see the list of the users.
The users has been imported without permissions. Now you have to assign profile and groups by editing the user settings.

You can now log in with your remote user.