Overview Direct link to this section

The Onboarding Portal collects the essential information that Arctic Wolf needs to configure your customer profile.

This page walks you through all of the tasks in the Onboarding Portal that you must complete:

1. Access the Onboarding Portal
2. Add contacts
3. Add sites
4. Configure sensors
5. Configure physical scanners
6. Configure virtual scanner settings
7. Configure virtual sensor settings
8. Configure endpoints
9. Configure cloud sensors
10. Configure internet exposure information
11. Submit final data

Access the Onboarding Portal Direct link to this section

1. Navigate to the the Arctic Wolf Portal.
2. Select the Onboarding tab.

   Tip: This is the default tab that loads while you are onboarding. The tab disappears when you submit all information.

Contacts Direct link to this section

Use the Contacts section of the Onboarding Portal to identify the people in your organization that Arctic Wolf contacts for administrative or security purposes. The contacts in this section have different roles, depending on their relationship to Arctic Wolf.

There are three main types of contacts:

• User — A single user in your organization.
• Distribution list — A list of contacts who can be contacted simultaneously.
• Shipping contact — A contact who handles the shipment of Arctic Wolf products.

Contact List Direct link to this section

Use the Contact List to add contacts in your organization that Arctic Wolf will contact for administrative and security purposes.

Add a contact to the contact list Direct link to this section

1. Navigate to Contact List.
2. Click + Add Contact.
3. In the Information section, enter contact information for this contact.
4. In the Settings section, enter information about the categories that the contact belongs to. See Contacts categories for more information about different categories for contacts.

   Notes:

   • You cannot add shipping contacts to categories.
   • Some options in the Grant access to section may not be available, depending on which services your organization has purchased. To see a list of your purchased products, click your organization name in the menu bar and click Status Page. The Purchased Products list only appears on the page during onboarding.

5. If you want to:
   • Continue adding contacts — Click Save & Add.
   • Stop adding contacts — Click Save.
6. Once you are finished adding contacts, click Mark Complete.

Edit a contact Direct link to this section

To edit the information of a contact, click .

Contacts categories Direct link to this section

Once you add a contact to the contact list, they are automatically entered into the following categories based on their information:

• Primary Contact — The main contact authorized to make account changes. There can only be one primary contact.
• Secondary Contact — Secondary contacts authorized to make account changes.
• Executive Sponsors — Contacts who endorse Arctic Wolf as the security service provider for your organization.
• Basic Escalation Contacts — Contacts to be notified when a security incident is detected.
• Executive Report Recipients — Contacts who receive notifications for executive reports by email.
• Technical Report Recipients — Contacts who receive notifications for technical reports by email.
• Portal — Contacts who have access to the Arctic Wolf Portal.
• Risk Dashboard Access — Contacts who have access to the Risk Dashboard.
• Activate vLC Access — Contacts who can activate a vLC.

You can also manually add or remove contacts from categories.

Add contacts to categories Direct link to this section

1. Navigate to Contacts.
2. Click the list that you want to add a contact to.
3. Choose a contact from the list of existing contacts.

Remove contacts from categories Direct link to this section

1. Navigate to Contacts.
2. Click the list from which you want to remove a contact.
3. Click x on the contact you want to remove.

Site Configuration Direct link to this section

Use the Site List to identify the physical locations of your organization that are receiving an Arctic Wolf sensor for monitoring.

Site List Direct link to this section

Use the Site List to identify the physical locations of your organization that you want Arctic Wolf to monitor.

Add a site to the site list Direct link to this section

1. Navigate to Site List.
2. Click + Add Site.
3. In the Site Information section, enter information about the site.

   Notes: All site names must be unique.

4. In the Site Configuration section, under Active Directory Domain Controllers, enter the number of Active Directory Domain Controllers are in this site.
5. (Optional) In the Site Configuration section, enter other information about your site configuration in the appropriate category.
6. Fill in the required information in the Site Log Sources section.
7. Click Save.
8. Once you are finished adding sites, click Mark Complete.

Edit a site Direct link to this section

To edit the information of a site, click .

Remove a site Direct link to this section

To remove a site, click x.

Sensor List Direct link to this section

Use the Sensor List section to identify and configure the sensors that Arctic Wolf will provision and ship.

Configure a sensor Direct link to this section

1. Navigate to Sensor List.

2. Click + Configure Sensor.

3. Enter basic information about the sensor.

   Note: Different options appear depending on the model you select, such as Deployment Type, Transceiver type, or whether it is a Customer Configured Appliance.

4. Under IP Configuration, enter information about your IP configuration.

5. If you cannot provide a static IP address, select I can't provide a static IP address right now.

   If selected, a prompt appears asking you to enable DHCP override and noting that you will need to configure a static IP address prior to sensor installation.

   Note: If you are using a customer configured appliance, you must provide the static IP address using a console session.

6. Under Shipping Contact, enter the shipping contact information. You can choose an existing contact or create a new one.

7. Under Shipping Address, enter the site that Arctic Wolf will provision and ship the sensor to. You can choose an existing sensor or create a new one.

8. Under Shipping Notes, enter any extra information about shipping that may be required.

9. If you want to:

   • Continue configuring sensors — Click Save & Add.
   • Stop configuring sensors — Click Save.

10. Once you are finished adding sensors, click Mark Complete.

Physical Scanner List Direct link to this section

Use the Physical Scanner List section to identify and configure the physical scanners that will be provisioned and shipped.

Configure a physical scanner Direct link to this section

1. Navigate to Physical Scanner List.
2. Click + Configure Scanner.
3. Enter basic information:
   • IP Configuration — Provide a static IP address.

     Notes:

     • Different options appear depending on the scanner model you select, such as if the scanner is a Customer Configured Appliance.
     • If you are using a customer configured appliance, you must provide the static IP address using a serial console session or follow the steps in the configuration email.
     • If you select I can't provide a static IP address right now, you are prompted to enable DHCP override and notified that you must configure the static IP address prior to scanner installation.
   • Shipping Contact — A contact who handles the shipment of Arctic Wolf products.
   • Shipping Address — The site for Arctic Wolf to ship the scanner to. You can choose an existing site or create a new site.
   • Shipping Notes — Enter any extra information about shipping that may be required.
4. If you want to:
   • Continue configuring scanners — Click Save & Add.
   • Stop configuring scanners — Click Save.
5. Once you are finished adding scanners, click Mark Complete.

Virtual scanner settings Direct link to this section

Use the Virtual Scanner Settings section to enter information on how virtual scanners are configured in your environment. The scanners themselves are downloaded separately. See Arcitc Wolf Virtual Appliances for installation instructions.

If you do not use any virtual scanners, select I don't want to use virtual scanners.

Configure a virtual scanner Direct link to this section

1. Navigate to Virtual Scanner Settings.
2. Under Hypervisor, select the hypervisor to deploy the virtual scanner on.
3. Select the acknowledgement of virtual scanner requirements.

Virtual sensor settings Direct link to this section

Use the Virtual Sensor Settings section to enter information on how virtual sensors are configured in your environment. The sensors themselves are downloaded separately. See Arcitc Wolf Virtual Appliances for installation instructions.

If you do not use any virtual sensors, select I don't want to use virtual sensors.

Configure a virtual sensor Direct link to this section

1. Navigate to Virtual Scanner Settings.
2. Under Hypervisor, select the hypervisor to deploy the virtual sensor on.
3. Select the acknowledgement of virtual sensor requirements.

Endpoint Configuration Direct link to this section

Use the endpoint configuration section to you provide your endpoint configuration estimates.

Configure endpoint security solutions Direct link to this section

To specify the endpoint protection platforms that your organization uses:

1. In the On-Premise Endpoint Security Solution section, if you are:
   • Using on-premise security solutions — Choose as many on-premise security solutions as apply.
   • Not using on-premise security solutions — Select I don’t have an on-premise security solution.
2. In the Cloud Endpoint Security Solution section, if you are:
   • Using cloud security solutions — Choose as many cloud security solutions as apply.
   • Not using cloud security solutions — Select I don’t have a cloud EPP.
3. In the Endpoint Notes section, provide additiona endpoint details, such as unsupported vendors and site-specific endpoint security solutions.
4. Select Mark Complete when you are finished your configuration.

Configure endpoint agent settings Direct link to this section

1. Under Windows Endpoints, choose an estimate of how many Windows endpoints are in your environment.
2. If applicable, select Sysmon will be installed on all Windows endpoints (required for full coverage).
3. Under Mac Endpoints, choose an estimate of how many Mac endpoints are in your environment.
4. Under Linux Endpoints, choose an estimate of how many Linux endpoints are in your environment.
5. Select Mark Complete when you are finished your configuration.

Cloud Sensor Configuration Direct link to this section

The Cloud Sensor Configuration section shows the cloud sensors that the you have purchased. You may need to provide configuration information, such as the services you have from a certain provider.

This section is not where you provide credentials for cloud sensors. See Cloud Detection and Response for cloud sensor configuration instructions.

Internet Exposure Direct link to this section

Use the Internet Exposure section to configure vulnerability scan details.

Configure external scan hosts Direct link to this section

1. Under Public IP Addresses/Ranges, list all public IP addresses to be scanned.

   Tip: IP addresses are comma separated. You can also provide a range marked by a - or use a CIDR block.

2. Under Public DNS Domains, list all public DNS domains to be scanned.

Configure vulnerability scans Direct link to this section

To configure vulnerability scans, acknowledge that the external IP ranges shown are correct.

Submit final data Direct link to this section

Once you mark all sections complete, submit your data:

1. Click Submit Information.
2. Click Confirm.

Arctic Wolf reviews the data before it is finalized.