Cylance Endpoint Security requirements
Logging in to the management console
- Custom authentication
- Enhanced authentication sign in
  - Sign in to the Cylance Endpoint Security management console using enhanced authentication
Installing the BlackBerry Connectivity Node
Linking to your company directory
Setting up administrators
Adding users and devices
Enrolling CylancePROTECT Mobile and CylanceGATEWAY users
- Create an enrollment policy
- Supported enrollment email variables
Setting up zones to manage CylancePROTECT Desktop and CylanceOPTICS
- Add and configure a zone
Setting up CylancePROTECT Desktop
Setting up CylancePROTECT Mobile
- Create a CylancePROTECT Mobile policy
Setting up CylanceOPTICS
- Install the CylanceOPTICS agent on devices
  - Configuration requirements for macOS 11.x and later
  - OS commands for the CylanceOPTICS agent
- Enable and configure CylanceOPTICS
  - CylanceOPTICS sensors
  - Data structures that CylanceOPTICS uses to identify threats
Setting up CylanceGATEWAY
Setting up CylanceAVERT
Integrating Cylance Endpoint Security with Microsoft Intune to respond to mobile threats
- Connect Cylance Endpoint Security to Intune
- Create a risk assessment policy
Managing updates for the CylancePROTECT Desktop and CylanceOPTICS agents
- Manage updates for the CylancePROTECT Desktop and CylanceOPTICS agents
Appendix: Best practices for deploying CylancePROTECT Desktop on Windows virtual machines

Setting up the
CylanceGATEWAY
Connector

The

CylanceGATEWAY Connector

is a virtual appliance that you must install if you want to use

CylanceGATEWAY

to establish a secure tunnel between users' devices and your private network. The

CylanceGATEWAY Connector

must be deployed and enrolled in a part of network that has full access to the addresses that you define when you specify your private network. If you don't install a

CylanceGATEWAY Connector

, you can use

CylanceGATEWAY

only to block access to public Internet destinations and secure access to cloud applications using source IP pinning.

It is a best practice to install more than one

CylanceGATEWAY Connector

. Installing multiple instances provides load balancing to access separate segments or private clouds within your defined private network. When your network has multiple instances of the

CylanceGATEWAY Connector

installed and configured, client connections are distributed evenly across all healthy

CylanceGATEWAY Connector

s, providing redundancy in the event that one instance may become unavailable or when troubleshooting issues.

If an existing

CylanceGATEWAY Connector

(for example, an OVA file in a vSphere environment) is deployed on a single tenant, installing a second

CylanceGATEWAY Connector

instance using a different connector (for example, a VMDK file in an AWS environment) on the same tenant is not supported.

BlackBerry

recommends that you specify a health check URL to regularly monitor the status of each

CylanceGATEWAY Connector

. If you do not specify a health check URL,

CylanceGATEWAY

cannot confirm whether you have connectivity to your private network and will display an error status. A reminder alert will be displayed on the Connectors screen to add a health check URL. Error messages for failed DNS and HTTP checks are also displayed. For more information, see Manage CylanceGATEWAY Connectors.

Contact your BlackBerry sales representative, if you plan to install

CylanceGATEWAY

in an environment that requires different packaging (for example, a

CylanceGATEWAY

Connector DEB file).

To set up a

CylanceGATEWAY Connector

, perform the following actions.

Step	Action
	Review the hardware requirements.
	Install the CylanceGATEWAY Connector to your environment. The CylanceGATEWAY Connector is supported in the following environments. To see a walkthrough on installing the CylanceGATEWAY Connector in your environment, see the Install the CylanceGATEWAY Connector workflow for your environment. vSphere environment ESXi environment Microsoft Azure environment Hyper-V environment AWS environment
	Configure the CylanceGATEWAY Connector in the VM environment (optional).
	Access the CylanceGATEWAY Connector using OpenSSH (optional).
	Configure your firewall.
	Enroll the CylanceGATEWAY Connector with the BlackBerry Infrastructure.
	Configure the CylanceGATEWAY Connector (optional).
	Managing CylanceGATEWAY Connectors to set options and check connector status.