Getting Started with Web Security - Console

Updated 3 hours ago by admin

Follow this guide to set up Web Security in the TrustLayer console. Sign in at console.clouduss.com to get started. Each step has a short animated walkthrough and a link to the full article.

New to the console? Start with the Dashboard tour. It's also available at any time from the Help (?) menu ⟶ Getting Started.

1. Add administrators

  1. Click Administrators in the left-hand menu (under Settings) and click Add.
  2. Enter the Full name, Email address and Role.
  3. Click Add user. The new administrator is emailed a link to activate their account.
Animated walkthrough

For details of each role, see Roles. For more about managing administrators, see Administrators.

2. Connect Microsoft Entra ID

Connecting Microsoft Entra ID lets you use your Entra ID users and groups in rules.

  1. Click User Directory in the left-hand menu.
  2. Click the arrow next to Add and choose Microsoft Entra ID.
  3. Enter a Directory name and your Microsoft tenant domain (usually ending in onmicrosoft.com).
  4. Optionally, under Synchronization scope, limit which users and groups are imported.
  5. Click Create directory. A Microsoft administrator will need to approve read access to your directory.
Animated walkthrough

For more information, see User Directory (Active Directory and Entra ID).

3. Set up a Windows agent profile

Setting the right Username Capture Type makes sure your user and group rules are applied: SAM Account Name for on-premise Active Directory, or User Principal Name (UPN) for Entra ID.

  1. Click Browse ⟶ Agent Configuration and choose the Windows tab.
  2. Click the profile to open it.
  3. Open Identification and choose the Username Capture Type.
  4. Click Apply Changes.
Animated walkthrough

For all profile settings, see Agent Configuration Profiles.

4. Deploy the Windows agent

You can't register an agent with an administrator account that has two-factor authentication turned on. Create an administrator with the Agent Installer role, without 2FA, for registering agents (see step 1).
  1. Click Browse ⟶ Deployment.
  2. Click the download button and choose Windows Agent.
  3. Run the installer on the computer and sign in with your Agent Installer account when asked, to register the agent to your account.
  4. The agent then appears in the Deployment list.
Animated walkthrough

For other deployment methods, such as Intune or Group Policy, see Deployment.

5. Create web security rules

  1. Click Browse ⟶ Rule Builder and click Create Rule.
  2. Enter a Rule name, choose the Final action (Allow, Block, Warn, Redirect or Quota) and the rule's Position.
  3. Click Create Rule. The rule editor opens.
  4. Add Conditions, Matches and Actions from the Toolbox by double-clicking or dragging the tiles.
Animated walkthrough

For more information, see Rule Builder.

6. Web Security reporting

  1. Click Analytics and open Web Activity.
  2. Optionally, click Filters to narrow the results.
  3. Choose a Timespan and click Run Report.
  4. Use the ⋮ menu to Download the results or Save Report.
  5. To email a saved report regularly, click Scheduler under Analytics, then New Schedule.
Animated walkthrough

For more information, see Activity Reports and Schedules.

As a best practice, turn on two-factor authentication (2FA) for your administrator account. Keep a separate Agent Installer account without 2FA for registering agents.

  1. Click Security at the bottom of the left-hand menu.
  2. Under Two-Factor Authentication, click Enable for SMS, Email or App and follow the prompts.
  3. Super Users can require 2FA for all administrators from Administrators ⟶ 2FA Settings.
Animated walkthrough

For more information, see Account Security Guidelines.

How did we do?