Documentation forThreat Monitor

Additional information for MSSPs

This section contains additional information to help MSSPs get started with Threat Monitor.

Multitenancy and custom branding are only available to licensed customers.

Set up a multitenant environment

SolarWinds Threat Monitor supports multitenancy by allowing you to accommodate multiple tenants (customers) through a single instance of Threat Monitor software.

Each tenant maintains an individual share of this instance, which includes administrative functions such as UI configuration, user management, general setup and configuration, as well as log collection and management.

Even though tenants share the same infrastructure, data is segregated among tenants. No individual tenant data is accessible by other tenants. This is managed by adding multiple collectors to the MSSP environment. The MSSP Super Admin user can then determine collector access and restrictions per tenant.

To get started with multitenancy, SolarWinds needs the following:

Hostnames and domain names

Provide two different hostnames for the portals you plan to use: one for the web UI, and the other for authentication and access to the web UI when connecting from a new web browser or IP Address.

For example:

  • soc.<insertcompanydomain> — This is your main login page and is the URL for you and your staff to log in to the application.
  • access.<insertcompanydomain> — This page handles the transmission of the request token when a user logs in from a new location. The application automatically redirects to this URL when a new location is detected.

To ensure secure client/server communication, the Threat Monitor network environment uses an SSL certificate. To generate the SSL certificate, SolarWinds uses a Certification Signing Request (CSR), which requires the following point of contact information:

  • Email address
  • Organization name
  • City
  • State or Province
  • Country

SMTP server settings

SolarWinds configures the web UI with IP address, port, and authentication information for sending system-generated emails such as authentication tokens, reports, and alarms. There are two from addresses configured through the web UI: one for alerts, and the other for sending reports and authentication tokens. For example:

  • alerts@<insertcompanydomain>
  • socsupport@<insertcompanydomain>

The two addresses can also be the same.

Collector provisioning information

Provide the following provisioning information for the network (MSSP or customer) where you will deploy the collector:

After initial provisioning and setup of your first collector, provide this information for each customer collector.

  • Organization name
  • Network: MSSP or customer network
  • IP address: Static IP address assigned to the collector
  • Netmask: Subnet mask from the network
  • Gateway: Default gateway or router
  • DNS entries: DNS servers from your network, or another third party, for the collector
  • Search domain: Local domain name of the network environment

    For example: solarwinds.local

  • Time zone: Time zone relevant to the network
  • Virtual host type (virtual server for the network): VMWare or Hyper-V

After SolarWinds completes the collector provisioning, we will contact you to complete the collector setup.

Set up customers in Threat Monitor

  1. In Threat Monitor, navigate to Access > Companies, and then click New.
  2. Enter the client name and description, and then click Save.

    The Super Admin typically adds the company before the provisioning process. Otherwise, SolarWinds will add the company to the web UI during collector provisioning.

Add custom branding

SolarWinds allows you to apply your company logo and color scheme to the Threat Monitor UI to provide a familiar look for your customers.

SolarWinds applies company branding in three locations:

  • Splash background image for the login screen
  • Company logo for the login screen
  • Background for the main header that appears on the Threat Monitor UI

    You can choose a background image or select a single color. Most MSSPs choose a single-color header, but these settings are easily changeable. The header also displays the company logo image on the far left.

SolarWinds will customize the UI to your specifications, and then provide images for your final approval.

Branding requirements

  • Splash background Image: High-resolution JPG file or background color (1650 x 1120)
  • Logo: High-resolution PNG file (400 x 110)
  • Header: High-resolution PNG file or background color (400 x 110 or 40 x 40)

SolarWinds can also brand your access request email and add a support email address that appears at the bottom of the web UI. For example:

  • Email subject: <companyname> Login Request
  • Support contact: For issues, please contact support@<insertcompanydomain>
  • Time zone: Choose the time zone to be set in the web UI