Cylance Endpoint Security requirements
Logging in to the management console
- Custom authentication
- Enhanced authentication sign in
  - Sign in to the Cylance Endpoint Security management console using enhanced authentication
Installing the BlackBerry Connectivity Node
Linking to your company directory
Setting up administrators
Adding users and devices
Enrolling CylancePROTECT Mobile and CylanceGATEWAY users
- Create an enrollment policy
- Supported enrollment email variables
Setting up zones to manage CylancePROTECT Desktop and CylanceOPTICS
- Add and configure a zone
Setting up CylancePROTECT Desktop
Setting up CylancePROTECT Mobile
Setting up CylanceOPTICS
- Install the CylanceOPTICS agent on devices
  - Configuration requirements for macOS 11.x and later
  - OS commands for the CylanceOPTICS agent
- Enable and configure CylanceOPTICS
  - CylanceOPTICS sensors
  - Data structures that CylanceOPTICS uses to identify threats
Setting up CylanceGATEWAY
Setting up CylanceAVERT
Managing updates for the CylancePROTECT Desktop and CylanceOPTICS agents
- Manage updates for the CylancePROTECT Desktop and CylanceOPTICS agents
Appendix: Best practices for deploying CylancePROTECT Desktop on Windows virtual machines

Setting up the
CylanceGATEWAY
Connector

The

CylanceGATEWAY Connector

is a virtual appliance that you must install if you want to use

CylanceGATEWAY

to establish a secure tunnel between users' devices and your private networks. The

CylanceGATEWAY Connector

must be deployed and enrolled in part of network that has full access to addresses that you define when you Specify your private network. If you don't install a

CylanceGATEWAY Connector

, you can use

CylanceGATEWAY

only to block access to public Internet destinations and secure access to cloud applications using source IP pinning.

It is a best practice to install more than one

CylanceGATEWAY Connector

. Installing multiple instances provides load balancing to access separate segments or private clouds within your Defining your private network. When your network has multiple instances of the

CylanceGATEWAY Connector

installed and configured, client connections are distributed evenly across all healthy

CylanceGATEWAY Connector

s that are assigned to the same connector group, providing redundancy in the event that one instance may become unavailable or when troubleshooting issues.

If an existing

CylanceGATEWAY Connector

(for example, an OVA file in a vSphere environment) is deployed on a single tenant, installing a second

CylanceGATEWAY Connector

instance using a different connector (for example, a VMDK file in an AWS environment) on the same tenant is not supported.

BlackBerry

recommends that you specify a health check URL in each connector group to regularly monitor the status of each

CylanceGATEWAY Connector

. If you do not specify a health check URL,

CylanceGATEWAY

cannot confirm whether you have connectivity to your private network, and the Health check status column (Private Network > Gateway Connectors) for a connector will not display the DNS and HTTP information. For more information, see Manage CylanceGATEWAY Connectors.

Contact your BlackBerry sales representative, if you plan to install

CylanceGATEWAY

in an environment that requires different packaging (for example, a

CylanceGATEWAY

Connector DEB file).

To set up a

CylanceGATEWAY Connector

, perform the following actions.

Step	Action
	Review the Requirements: CylanceGATEWAY Connector.
	Install the CylanceGATEWAY Connector to your environment. The CylanceGATEWAY Connector is supported in the following environments. To see a walkthrough on installing the CylanceGATEWAY Connector in your environment, see the Install the CylanceGATEWAY Connector workflow for your environment. vSphere environment ESXi environment Microsoft Azure environment Hyper-V environment AWS environment
	Configure the CylanceGATEWAY Connector in the VM environment (optional).
	Access the CylanceGATEWAY Connector using OpenSSH (optional).
	Configure your firewall.
	Enroll the CylanceGATEWAY Connector with the BlackBerry Infrastructure.
	Configure the CylanceGATEWAY Connector (optional).
	Managing CylanceGATEWAY Connectors to set options and check connector status.