Akamai Guardicore Segmentation (formerly Guardicore Centra) Setup for Workbench

Step 1: Enable Console Access for Expel

Having read-only access to the interface of your technology allows Expel to dig deeper during incident investigations. Our device health team uses this access to investigate potential health issues with your tech. For more information, see Why Expel Asks for Console Access.

1. Log in to Guardicore Segmentation Centra and navigate to Administration > User Management > Users and then click + Add User.

2. Complete the fields as follows:

   • Username - type Expel.

   • Email Address - leave blank.

   • Description (optional) - leave blank or enter a description of your choice.

   • Permission Scheme - select Administrator.

   • Create a Temporary Password.

   • Do NOT select Enable 2-Step Verification.

   • Do NOT select Enable user to view passwords used in security incidents.

3. Click Save.

4. Log in to Guardicore Segmentation Centra using the user credentials you just created and set a new Password. Make a note of the new password for later use.

Step 2: Add Akamai Guardicore Segmentation as a Security Device in Workbench

Now that you have the correct access configured and noted the credentials, you can integrate your tech with Workbench.

1. Log in to Workbench.

2. Fill in these fields:

   • Name - type "Expel API Access".

   • Location - type the geographic location of the server (or "cloud" for cloud servers).

   • Server - type the server URL address.

   • Username - type the username you created in Step 1.

   • Password - type the new (not temporary) password you created in Step 1.

   
3. Click Save.

Your device should be created successfully within a few seconds. A few reminders:

• After your connection is healthy, it will take some time for your device to begin polling and receiving data.

• To check on the status, select the downward arrow for your device in the first column and choose View details.

• Polling will happen first; data will be received after that. You must refresh the page to see updates.

• If your device does not begin polling within 15 minutes, and does not begin receiving data within 30 minutes, contact our support team for help.

• To check if alerts are coming through, navigate to Dashboards > Alert Analysis. Scroll to the device you want to check, and select the Expel Alerts tab to reveal more alert information. It can take 36 to 72 hours for alerts to appear after setup, as we tune your device.