The Enforcers tab displays all Enforcers that have been activated to your Threater account.
Navigate to Enforce > Enforcers in the left-hand navigation menu to view your organization's Enforce instances.
The following details display for each Enforcer:
|The name that is generally provided during activation time, but can be changed as needed. If no such name is available, a unique identifier is displayed.
|Enforce software subscription assigned to the Enforcer
|Three options including: Normal, Hardware Bypass and Unknown. Hardware Bypass indicates an Enforcer that is in hardware bypass mode. Unknown is displayed for any Enforcer running legacy software, or if the Enforcer's current state is unknown.
|Displays the Enforce software build the Enforcer is currently running. If the Enforcer is not on the latest build, the build number will display in red and a label will display indicating the number of builds the instance is behind.
|Indicates the date and time the Enforcer last connected to the Theater Portal. This should normally be within a few minutes of the present time.
The location of the Enforcer if available. A "-" will show if no location is provided.
Click on the hyperlinked Enforcer Name in the table to view additional details of the individual Enforce Instance. The additional data will display:
|Refers the Subscription Throughput section and see below for more details.
|Available to find administration IP to locally access Enforce or to troubleshoot with the Customer Success team
|The list of Networks managed by the specific Enforcer
Updating Enforce Software
The Portal provides customers the ability to install the latest Enforce software build onto their Enforcer(s). Users can access the latest build by selecting Enforce > Enforcers in the left-hand navigation menu.
Users have the option to perform an immediate update, or to schedule an update at a later time. Installing new software will force a reboot of the Enforce instance. The instance will be offline and in bypass mode during the install. If a new build becomes available between now and the Scheduled Date, the latest available build will be installed.
Note that unless otherwise stated in our Threater Enforce release notes, the Enforcer will always be updated from the existing version to the latest version, even if there are versions in between. The standard update will take approximately 10 minutes and at the end of the update there will be a brief disruption as the Enforcer reboots once to complete the installation. Any exception to this will be called out in the release notes.
The following information is displayed:
|The latest build number
|the release date of the latest build
|PDF of the build release notes that will open in a separate browser tab
|Displays at the top of the screen if the build is critical in nature, including important security-related updates, critical bug fixes, or new features critical to the operation of the Threater platform. Admins should install critical updates as soon as possible.
In the row of the Enforcer, select Update Now from the ellipsis menu to immediately install the latest build.
Select the Update button on the confirmation modal. The table will display Update Pending for the Enforcer until the build installation is complete and will automatically clear as soon as the associated Enforcer has begun the process of the update. The installation may take several minutes to finalize.
The table will display an “Update Pending” icon for the Enforcer until the build installation is complete. The “Update Pending” will automatically clear as soon as the associated Enforcer has begun the process of the update. Upon completion, which can take several minutes, the new build number will appear in the status.
Updates can be scheduled for one or more Enforcers. To schedule a build installation, select the Enforcer(s) in the table and provide desired date and time in the calendar.
The time selected is in the user's local timezone, but saved in the backend in UTC. If the user is located in New York City (EST) and selects 6:00PM, but the Enforcer is located in San Francisco (PST), the installation will begin at 6:00PM EST or 3:00pm PST.
Select the Schedule button and then Schedule on the Confirm Schedule Updates modal. The table will reflect the update schedules.
Cancel a Scheduled Update
In the row of the Enforcer, select Cancel from the ellipsis menu to cancel a scheduled update.
Select the Cancel button on the Confirm Cancel modal. The table will reflect the cancelation with the removed scheduled time.
Revert to Previous Build
Users may have the ability to revert to the previous software build that was installed on an Enforcer, if both the previous and current versions, as a pair, are revertible. Reverts must be scheduled and can be done by completing the following steps:
Select Schedule Revert to Build [#] from the ellipsis menu of the Enforcer.
Choose a date and time from the calendar (both hours and minutes). The time selected is in the user's local timezone, but saved in the backend in UTC. If the user is located in New York City (EST) and selects 6:00PM, but the Edge instance is located in San Francisco (PST), the installation will begin at 6:00PM EST / 3:00PM PST. Select the Revert button to finalize the scheduling.
Select Revert in the Confirm Scheduled Revert modal. The table will reflect the scheduled revert.
It is strongly recommended to utilize the automatic installation of Enforcer builds described in the above sections. Should a manual download of a build be required, please consult our Customer Success team for assistance. We do not recommend that you attempt Manual Downloads on your own without assistance. Use Threater's automated mechanism as previously described unless instructed otherwise by our Customer Success team.
To manage subscriptions from the Enforcers tab:
- Select (or remove) a subscription from the drop-down
- Make any additional necessary subscription updates to other Enforcers
- Select the Save Subscriptions button at the top of the table
Review the selected changes on the Save Changes modal and then select the Save button.
Subscription Status Indicators:
- Green - subscription is actively supported
- Yellow - support has lapsed; any Enforcee assigned a subscription in this state may not receive updated threat intelligence and as a result may be in an Allow-All state. You should contact our Customer Success team to review your subscription status.
Editing Enforcer Name and Location
Admins can edit the Name and/or Location of an Enforcer to help simplify and identify instances according to own network naming conventions.
Find the Enforcer in the table and select the pencil icon in the far right column. Enter the desired name or location and select Save.
The Subscription Throughput chart provides the past 30 days of an Enforcer's inbound and outbound throughput. Navigate to the individual Enforcer and then select the Subscription Throughput Bar to view throughput data.
The following throughput details will display at the top:
- % Subscription Throughput utilized for the past 30 days
- 95th Percentile for the past 30 days, via industry standard 95/5 measurements
- Current Outbound throughput (in bits)
- Current Inbound throughput (in bits)
The table in the top right corner shows the following inbound and outbound data:
- Current throughput (in bits per second)
- Average throughput (in bits per second)
- Maximum throughput (in bits per second)
The chart displays a graphical representation of the inbound and outbound throughput and the 95th percentile for the past 30 days. Click and drag within the plot area to zoom for a specific date and time.