Web Security.Cloud migration during registration

book

Article ID: 171338

calendar_today

Updated On:

Products

Web Security Service - WSS

Issue/Introduction

You will be enrolling a new Web Security Service (WSS) account and will also migrate Web Security.Cloud policies.

Resolution

Requirements:

  • Admin credentials for the Security Web.Cloud account.
  • A Subscription ID, which was sent in a Welcome email by Symantec.
  • A Primary Administrator email address. Your Web Security Service portal account will be tied to this address.
  • Norton Secure Login (NSL) credentials are required to confirm your registration. If you do not have an account, go to https://login.symantec.com to create one.
  • Understand that this method sets the Default Policy (provides malware scanning plus blocks access to the most common questionable content, such as mature) to Standard.

  • Decide—Migrate static location IP addresses along with the web use policies.

    If you are migrating static IP web routes, have an understanding of the available Web Security Service Access Methods: Firewall/VPN (IPsec), Proxy Forwarding, and Explicit Proxy.

 


Procedure - Register as Admin

1. In a browser, enter  https://portal.threatpulse.com/register.

 

  1. Enter the Email Address that will be the primary Web Security Service administrator.
  2. Enter your Subscription ID.

  3. Click Register.

    The portal displays a dialog informing you to check the newly-registered email account.



 

In that mail, click Get Started.

  1. The link opens the Symantec Secure Login page. Symantec's NSL is the password facilitator. Enter your NSL credentials.

  2. The Web Security Service begins the first phase of an initial configuration wizard.

    The first page prompts you to define your Administrator password and password recovery security question.

    Symantec recommends not using the Broken Bones challenge; it is easy to guess.

    Complete and click Next (bottom-right corner).

  3. The next page prompts you to define the Administrator's First and Last Name.

    1. Complete and click Continue to Product Setup.
    2. Click OK to close the confirmation dialog.

Procedure - Migrate Phase 1: Onboarding and Static Web Routes

The Web Security Service begins the second initial configuration phase, the first of which is Product Configuration.

 

  1. Locate the Web Security product line and click the Configure link, which is in the Action column.

  2. The Web Security Service service displays the Default Policy page.


    Select Import.

    1. Click Next.
  3. The next screen is Mobile Users; click Next.

  4. The next screen is Static Location.

    If you are not importing the Web.cloud location IP addresses and are only performing policy imports during registration, skip this step.

Click Import Web Routes from Web Security.cloud. The portal displays a credential challenge dialog.

Enter your Web Security.Cloud admin credentials and click Connect.

The Web Security Service connects to your Security Web.Cloud account and displays the Import Locations page.

 
 
From the Access Method drop-down list, select the web route method that is equivalent to what you had configured in Security Web.Cloud—Firewall/VPN (IPsec), Proxy Forwarding, Explicit Proxy.
  1. Select the Country and Time Zone for that Access Method Location. This helps Symantec assure that there is adequate processing resource in each geographic datacenter.

  2. The portal displays the Available Web Route IPs. Select the ones that you want to be associated with this Access Method and click Add to move them to the Import as Locations area.

    The portal grays out any IPs that are currently In Use by the service; these are not selectable.

  3. If you employing more than one static Access Method, repeat Steps c, d, and e.

  4. Click Import to close the dialog.

    The portal adds these new locations to the Static Location wizard screen.

  5. Click Next.
  6. The next screen is Auth ConnectorSetup. Advanced Web Security Service admins will understand what these configurations are, but you can configure the Authentication method at a later time. Furthermore, the wizard does not support SAML authentication configuration. Click Next.
  7. The final wizard screen completes the On-boarding. Proceed to the next section to begin policy migration.

 

  1. The next screen is Auth ConnectorSetup. Advanced Web Security Service admins will understand what these configurations are, but you can configure the Authentication method at a later time. Furthermore, the wizard does not support SAML authentication configuration. Click Next.
  2. The final wizard screen completes the On-boarding. Proceed to the next section to begin policy migration.

Procedure - Migrate Phase 2: Policy

The second wizard-based phase is to migrate web use policies.

  1. On the final On-boarding screen, click Finish and Import Policy.

    If you bypassed the static web route migration step, the portal displays a credential challenge dialog. Enter your Web Security.Cloud admin credentials and click Connect.

    The Web Security Service connects to your Security Web.Cloud account, retrieves the policy rules and runs a compatibility analysis. The portal displays a result matrix.

    The Web Security Service and Security Web.Cloud policies do not perfectly align. For example, the Web Security Service does not support Quota-based policies. Based on the analysis, the portal displays any differentiation.

    • At this time, you can elect to analyze the discrepancies offline and potentially adjust Security Web.Cloud policies before returning to complete the import. You can click Download Report to save a local HTML file of the matrix.

    • If you elect to continue with the policy import and will adjust the policies after they have been imported to the Web Security Service portal, click Import to continue.

  2. Click Import.

    The portal displays a progress bar as the import occurs.

  3. Upon import completion, the portal displays a results dialog.

    • If the result is a green check mark, the policy successfully migrated. To view them, navigate to Solutions mode > Content Filtering > Policy (after this registration process completes). Proceed to Step 4.

    • If there are discrepancies, the portal informs you that you can navigate to Service mode > Account Maintenance > Web Security.Cloud to review (after this registration process completes).

  1. Click Close. The portal returns to you the Product Configuration page.
  2. Click Continue (lower-right corner) to enter the Web Security Service portal.

Attachments

Powered by Wolken Software