Monitoring Akamai Guardicore

Overview

Add Guardicore devices to TOS to monitor and manage them. TOS monitors the devices for policy revision changes and provides ongoing visibility into configuration and compliance.

To monitor Guardicore devices, you must:

Add TOS user to Guardicore Centra account
Add the Guardicore device in TOS

See all Guardicore features in TOS.

Add Guardicore Centra user and Permission Scheme

Create the TOS user in the Guardicore Centra account and assign the correct Permission Scheme to monitor Guardicore devices in TOS.

Log in to Guardicore and go to System > User Management > Users.
Click + Create User.
Enter the user details and from the Permission Scheme list, select gc-support.
Save the user.

Akamai Guardicore device settings

General settings

The table below lists the General settings for Guardicore devices.

General Setting	Description
Device Type	Automatically populated.
Name for Display	The display name for the device.
Domain	The default domain, or in a multi-domain environment, the domain where you add the device.
ST Server	In distributed environments, the central or remote TOS cluster that monitors the device.
(From 5.2) Collect traffic logs for rule usage analysis	Select to collect traffic logs for Rule Viewer, and rule usage dashboards and reports.

Connection settings

The table below lists the Connection settings for Guardicore devices.

Connection Setting	Description
Username	The username of the Centra user account that TOS uses for API-based access. See Guardicore user Permission Scheme.
Password	The password for the Centra user account that TOS uses for API-based access.
Centra URL	The Centra management address that TOS uses to establish a Centra session in the format: https://<centra-url> . The URL can be an FQDN/hostname, an IP address, or a management address provided by your Centra platform owner.
Deployed as SaaS	Select for SaaS deployments. For on-premises deployments, leave unchecked.
Proxy	The proxy server and settings to connect to the cloud: IP/Hostname: Mandatory. The IP address or Hostname of the proxy server. Port: Mandatory. The port to use when connecting to the proxy server. Username: Optional. The username, if the proxy server requires authentication. Password and Confirm Password: Optional. The password, if the proxy server requires authentication. If the proxy performs TLS inspection, you must import the proxy’s trusted certificate into TOS before configuring the proxy. See Import a Proxy Certificate for TLS Inspection.
Retrieve certificate	Applicable only in on-premises environments. The action retrieves the certificate that SecureTrack uses to set up encrypted communication with Guardicore device and displays a confirmation message.

Monitoring settings

The table below lists the Monitoring settings for Guardicore devices.

Monitoring Setting	Description
Default	Monitors at 1-hour intervals using settings from the Timing page.
Custom	Uses Periodic Polling as configured. Select either Use timing page settings, or Custom settings and set the Polling frequency.

Prerequisites

Centra user with gc-support Permissions Scheme

Add a Guardicore device

In SecureTrack, go to Monitoring > Manage Devices.
Select Akamai > Guardicore.
Follow the instructions in the device wizard to configure settings. Review Akamai Guardicore device settings.
Click Save to add the device.

Managing Guardicore devices

After you add a Guardicore device, you have several options to manage the device, depending on your environment:

Edit configuration: Edit the device's configuration settings in the device wizard. See Akamai Guardicore device settings.
Delete the device: Delete the device from SecureTrack.
Migrate (ST servers): Available in distributed deployments. Select the server where the device will be monitored and click Migrate.
Migrate (Domains): Available in multi-domain deployments. Select the domain where the device will be monitored and click Migrate.