Access MSP Admin Topics

From the navigation menu, select Support > MSP Admin Topics.

Create New Client Account

IMPORTANT:

Before you can create a client account, ensure you have all required information components:

  • An active Fortra VM account for the MSP’s organization and account creator

  • The name and email address of the employee on your team in charge of the account, if not yourself

  • The signed agreement with listed services from the client

  • The client’s primary contact name and email address

  • The client’s physical address

  • While not required for initial account creation, a completed PAQ document from the client

  1. From the navigation menu, select Client Ops > Accounts.

  2. Select + New Account. A new window opens.

  3. In the Account name box, enter the name of the client as it appears on the signed agreement.
  4. Leave the Account type as General.
  5. In the Account Owner box, enter your organization’s name (the MSP).
  6. In the Time Zone box, enter the client’s time zone.
  7. In the Theme box, enter your organization’s name.
  8. Under Account Admin, enter the primary contact information of the client account in the Full Name and Email boxes.

  9. Select Create.

    10. NOTE: If you select ✉ Create and send invite at this point, the user will receive an email but since the creation of the account is not complete, the content will be empty.

  1. Once the account has been created, Fortra VM automatically opens Account > Account Profile on the menu. Select Client Advocate, and then enter the name of the person within your organization responsible for overseeing this account.
    See Super Account Settings for more information.

  2. Under Reports & Branding, enter the client's address into the Address box.

  3. Select Save. A message will appear at the top of your screen informing you that the account info is being saved.

    NOTE: To complete this section, refer to the signed agreement for the list of services to which the client has subscribed.

  4. From the navigation menu, select Account > Service Subscriptions.

  5. Choose Vulnerability Scanning, and then select + Add Service.

  6. The New Subscription dialog appears. Populate each field according the client's contract.

    NOTE: You can toggle the state of subscriptions to be Active or Inactive. Only one subscription per service offering (or edition in some instances) may be active at a time. These are used in conjunction with scan workflows to both show subscription usage breakdowns and limit usage when applicable.
    TIP: If you don't want client accounts to expire automatically at the end of their contract, select Evergreen for length of contract. This will require the MSP to manually to terminate or extend their account.

  7. Select OK.

Continue to add Service Subscriptions as dictated by the client contract.

IMPORTANT: Ensure the correct client account is engaged when adding users. The client’s account name should be displayed in the upper left corner. Users added in this account context will have permissions for that client account only. To add users to your super account, no account context should be displayed, signifying that you are on the top-level account.
  1. From the navigation menu, select Account > Users.
  2. Select + New user.
  3. Complete the Full Name and Email boxes.
  4. Leave the Role as User unless otherwise instructed by the client’s primary contact.
  5. Select Create. This will also send out an invitation to the User.
NOTE: Change user settings as appropriate, and assign a new rule.

For more information on how to create, assign, change or delete a role, go to Users and Roles.

Before setting up the RNA Scanners, you will need to allocate tokens.

  1. From the navigation menu, select Account > Settings and scroll down to the Scanner and Agent Provisioning section. Enter the number of tokens needed as specified in the client contract.
NOTE: The tokens expire 48 hours after activation and the client will have to request additional tokens. It might be a good idea to add a couple extra, just in case. RNA Provisioning is only part of the initial set up. There is no physical option for international users at this time, only virtual.

The next step is to set up the internal and external scanning.

External Scanner Set-up

  1. From the navigation menu, select Client Ops > RNA Management.

  2. In the search bar, enter external or find the scanner from the list, and then select the scanner. A new window opens.

  3. Scroll until you find Account Associations, and then select Manage Associations.

  4. Under Associate an Account, select the appropriate account, and then select Associate Account.

  5. Ensure the Create new scanner profile checkbox is selected.

  6. From the navigation menu, select Client Ops > Accounts.
  7. Select the client account.
  8. Select Scan Settings > Scanner Profiles.
  9. Select the intended scanner. Go to each tab and enter the relevant information for IPs & Ports and Blackout Times.

    10. See Install RNA Virtual Scanner Appliance for a systematic guide of the RNA installation and configuration process, including system and platform requirements. It is important that you familiarize yourself with this process.

    If you have questions about anything listed in these steps, contact your Client Advocate.

    You cannot complete the client set up until the RNA is set up, configured, and actively connected from the client’s network to Fortra’s network. If the client has any issues you cannot answer, contact your Client Advocate.

    NOTE: This process can take a few minutes and will automatically restart when completed. The new scanner will display in the Scanner list with the others.

Internal Scanner Set-up

IMPORTANT: Internal scanning is conducted via the FVM Reconnaissance Network Appliance (RNA). The client will need to download and configure the RNA using the Install RNA Virtual Scanner Appliance guide. Client set up cannot be completed until the RNA is set-up, configured, and actively connected from the client’s network to Fortra's network. If the client has any issues you cannot address, contact your Client Advocate for further assistance.

Once the RNA is connected from the client's network to Fortra's network, follow the steps below to add scan targets.

  1. From the navigation menu, select Client Ops > Accounts.

  2. Select the client account.

  3. Select Scan Settings > Scanner Profiles.

  4. Select the intended scanner. Go to each tab and enter the relevant information for IPs & Ports and Blackout Times.

    TIP: You can add IP addresses to the scanner profile while creating scans or asset groups by using the "auto-add IPs" checkbox.

RNA Confirmation

The amount of RNAs visible will depend on the client agreement. For clients that have both internal and external scanning, you should be able to view at minimum two RNAs. One will have the external name and the other should have a name that relates to, but is not exactly the client name within Fortra VM. If additional activations were allowed per the client agreement, those RNAs should be visible as well.

Once the client has appropriately installed and configured the RNA, confirmation is required.

  1. From the navigation menu, select Scan Settings > Scanners.
  2. You should be able to view at minimum (depending on number of activations allowed by the client agreement) two RNAs. One will have the external name and the other should have a name that relates to, but is not exactly the client name within Fortra VM.
NOTE: Ensure the circle to the left of the scanner name is Green. If it is not, this means there is a connection issue and needs to be remediated before continuing. Refer to the RNA Troubleshooting guide to resolve any issues. Contact your Client Advocate if you need assistance.

  1. From the navigation menu, select Scan Settings > Asset Groups.

  2. Select + New asset group.

  3. In the Asset group name box, enter Full Internal Network.

  4. Select Save.

  5. Select IPs & Ports, and then select Scanner Profiles. The client can enter their own IPs & Ports, or you can.

  6. Select +Add Rule.

    NOTE: If you cannot select +Add Rule after entering the IP addresses or ranges, the IP addresses or ranges may be written in a way that the system does not recognize. Re-enter the addresses in a different format.

  1. From the navigation menu, select Scan Settings > Asset Groups.

  2. Select + New asset group.

  3. In the Asset group name box, enter Full External Network.

  4. Select Save.

  5. Select IPs & Ports, and then select Scanner Profiles. The client can enter their own IPs & Ports, or you can.

    IMPORTANT: If your client is using an AWS RNA to scan external targets, a request must be submitted to AWS to not block port 25 to prevent the scanner from missing those assets.

  6. Select +Add Rule.

    NOTE: If you cannot select +Add Rule after entering the IP addresses or ranges, the IP addresses or ranges may be written in a way that the system does not recognize. Re-enter the addresses in a different format.

Continue to Schedule Scans to complete client account set up.