📙 You will learn

About the various System Administration functions and options available in ThreadFix.

Prerequisites

Audience: IT Professional or End User
Difficulty: Basic
Time needed: Approximately 5 minutes
Tools required: N/A

The System Administration functions of ThreadFix are managed from the Administration sub-menu’s items found within the Global collapsible dropdown menu in the navigation side bar.

Administrative Options

System Settings

The System Settings page provides users with a multitude of selectable global settings across a range of categories.

• Login Settings allow users to adjust default login settings for users as well as include LDAP and/or SAML settings

• Report Settings provide customization for which and how reports display on several user pages

• Scanner Settings allow for the prioritization of the order of Scanner Vulnerabilities being displayed.

• Export Settings' custom CSV Configuration gives users the ability to selectively organize what available information is exported in CSV format reports

• Other Settings hosts a variety of user settings and options ranging from Proxy and Email Settings, toggling of individual Remote Providers or Defect Trackers. Additional selectable options are also available.

• Scan File Settings options allow users to select the desired File Upload Location as well as create customized Scanner Retention Policies

Identity Management

Identity Management allows users to manage varying aspects user access and roles.

• Through Manage Users and Manage Groups, users can add and edit users or groups, add Team or Application roles, add Pen Test Teams, and select Notification Settings. API Keys can also be added, edited, and deleted as well.

• Manage Roles allows users to selectively enable or disable permission settings across ThreadFix for individual Users or Groups

• Manage Pen Test Teams gives users the means to manage access for users and groups that are part of a Pen Test Team

• User Audit makes it easy for users to export reports detailing user access including associated Groups and Roles
  

API Keys

The API Keys page allows users to quickly create, edit, or delete API Keys.

Email Reports

Scheduled Email Reports helps users schedule email reports with selectable Teams, Severity Threshold, scheduling method, frequency, and Time.

Email Lists

Email Lists allows users to create, edit, and delete lists of email addresses with the option to to reference when configuring email reports.

Queue Management

Queue Management displays tasks that are in the process of being executed or in a queue to be processed. This applies to Vulnerabilities, Scheduled Tasks, as well as Defects.