How to add a domain discovery

  • 2 minute(s) read
Prev Next

This guide explains how to register a Domain-type discovery on the Segura platform, enabling automatic detection of assets related to Active Directory, such as accounts, devices, and services.

Access path

  1. Click Management in the left-hand menu.
  2. Select Discovery.
  3. Click Add and select Domain.

Fill in the initial settings

  1. Enter a unique name in the Name field.
  2. Select the Domain.
  3. Fill in the DN Base field.
  4. Set the Active option to Yes or No.
  5. Click Continue.

Configure access credentials

  1. Under Access using credential from vault, do the following:
    • Select the Access credential stored in the vault.
    • Choose the Network Connector if applicable.
    • Provide the Configuration password (ex: enable) if needed.
    • Enable Force sudo use if privileged commands are required.
  2. Under Access using pool of credentials, click Add and select one or more available pools.
  3. Click Continue.

Select search objects

  1. Choose the objects you want to discover:
    • Search for credentials
    • Search for device groups
    • Search for certificates
    • Find DevOps artifacts
    • Monitor unauthorized access (1-hour intervals)
    • Identify accounts in application pool (IIS)
    • Search FQDN on Windows devices
  2. Click Continue.

Define search parameters

  1. Select the Account form.
  2. Fill in the DN filters if needed:
    • DN of the credential filter (leave blank to use DN Base)
    • DN of the device filter (leave blank to use DN Base)
  3. Configure the LDAP attributes:
    • Account name attribute*
    • Hostname attribute
    • Account domain*
    • Account domain (Short Name)
  4. Set the toggles as needed:
    • Use SSL?
    • Bind requires DN?
    • Member is DN?
  5. Fill in DN Bind if applicable.
  6. Click Continue.

Apply search filters

  1. Under Credential filter, click Add to set filters.
  2. Under Device filter, click Add to define specific rules.
  3. Under Plugins for discovery, click Add to configure plugins and ports.
  4. Click Continue.

Configure Windows asset collection

  1. Select the components to discover:
    • Managed service accounts
    • Accounts linked to Windows service accounts
    • Scheduled tasks
    • IIS application pools
    • SCOM Run As account
    • COM+ applications
  2. Click Continue.

Select Active Directory objects

  1. Choose which AD objects to include:
    • Search user accounts
    • Search managed service accounts
    • Search credentials used as service accounts
    • Search security groups
    • Search domain controllers
    • Search computers (devices)
  2. Click Continue.

Set execution rules

  1. Enable Keep scan active after import? if desired.
  2. Select the Days allowed for execution.
  3. Select the Periods allowed for execution.
  4. Set the Minimum interval between executions (in hours).
  5. Click Continue.

Configure import settings

  1. Enable Create exclusive glossary for this discovery if needed.
  2. Fill in the Device configuration fields:
    • Site, Vendor, Type, Product, and Tags
  3. Under Credential configuration, set the default and privileged credential types.
  4. Under Device import, choose whether to enable automatic import.
  5. Under Credential import, click Add to define usernames for import.
  6. Click Continue.

Additional tabs displayed based on search options

When you enable Search certificates or Search DevOps artifacts, additional tabs appear to configure specific search parameters.

Certificates tab

Configure the certificate discovery options:

  • Certificates origin: Apache, Nginx, Tomcat, IIS, Workstation Windows, IBM Websphere, Microsoft CA, Palo Alto, Kubernetes, NetScaler.
  • Search certificates in directories
  • Search certificates without login
  • Import all certificates automatically
  • Extra settings for F5/BigIP: Configure the SOAP port.

DevOps tab

Configure DevOps tool integration:

  • Ansible

    • Enable service
    • Search playbooks
    • Search roles
    • Search hosts

  • Jenkins

    • Enable service
    • Access token
    • Access port
    • Search jobs
    • Search nodes
    • Search users

  • Kubernetes

    • Enable service
    • Select credential
    • Access port
    • Search secrets
    • Bearer token

Review the configuration

  1. In the Review tab, confirm all information entered in the previous steps.
  2. After reviewing, click Save to register the discovery.