Configuring a new Cylance Endpoint Security tenant
- Default configuration settings for a new Cylance Endpoint Security tenant
- Export, import, or reset the configuration of a Cylance Endpoint Security tenant
Cylance Endpoint Security requirements
Accessing the management console and configuring authentication
Setting up administrators
Setting up zones to manage CylancePROTECT Desktop and CylanceOPTICS
- Add and configure a zone
Setting up CylancePROTECT Desktop
Setting up CylanceOPTICS
- Install the CylanceOPTICS agent on devices
  - Configuration requirements for macOS 11.x and later
  - OS commands for the CylanceOPTICS agent
- Enable and configure CylanceOPTICS
Managing updates for the CylancePROTECT Desktop and CylanceOPTICS agents
- Manage updates for the CylancePROTECT Desktop and CylanceOPTICS agents
Best practices for deploying CylancePROTECT Desktop on Windows virtual machines
Using RMM solutions to install the Cylance agents on devices
- Use Datto RMM to install or remove the Cylance agents
- Use Kaseya VSA 10 to install or remove the Cylance agents
Installing the BlackBerry Connectivity Node
Linking to your company directory
Adding users and devices
Setting up CylancePROTECT Mobile
Setting up CylanceGATEWAY
Enrolling CylancePROTECT Mobile and CylanceGATEWAY users
- Create an enrollment policy
- Supported enrollment email variables
Setting up CylanceAVERT
Connecting Cylance Endpoint Security to external services
- Integrating Cylance Endpoint Security with Okta
  - Prerequisites for adding an Okta connector
  - Add and configure an Okta connector
- Integrating Cylance Endpoint Security with Mimecast
  - Prerequisites for adding a Mimecast connector
  - Add and configure a Mimecast connector

Setting up the
CylanceGATEWAY
Connector

The

CylanceGATEWAY Connector

is a virtual appliance that you must install if you want to use

CylanceGATEWAY

to establish a secure tunnel between users' devices and your private networks. The

CylanceGATEWAY Connector

must be deployed and enrolled in part of network that has full access to addresses that you define when you Specify your private network. If you don't install a

CylanceGATEWAY Connector

, you can use

CylanceGATEWAY

only to block access to public Internet destinations and secure access to cloud applications using source IP pinning.

It is a best practice to install more than one

CylanceGATEWAY Connector

. Installing multiple instances provides load balancing to access separate segments or private clouds within your Defining your private network. When your network has multiple instances of the

CylanceGATEWAY Connector

installed and configured, client connections are distributed evenly across all healthy

CylanceGATEWAY Connector

s that are assigned to the same connector group, providing redundancy in the event that one instance may become unavailable or when troubleshooting issues.

Each tenant supports a maximum of eight connector groups.

Each connector group supports a maximum of eight

CylanceGATEWAY Connectors

BlackBerry

recommends that you specify a health check URL in each connector group to regularly monitor the status of each

CylanceGATEWAY Connector

. If you do not specify a health check URL,

CylanceGATEWAY

cannot confirm whether you have connectivity to your private network, and the Health check status column (Private Network > Gateway Connectors) for a connector will not display the DNS and HTTP information. For more information, see Manage CylanceGATEWAY Connectors.

Contact your BlackBerry sales representative, if you plan to install

CylanceGATEWAY

in an environment that requires different packaging.

To set up a

CylanceGATEWAY Connector

, perform the following actions.

Step	Action
	Review the Requirements: CylanceGATEWAY Connector.
	Install the CylanceGATEWAY Connector to your environment. The CylanceGATEWAY Connector is supported in the following environments. To see a walkthrough of how to install the CylanceGATEWAY Connector in your environment, see the Install the CylanceGATEWAY Connector workflow for your environment. vSphere environment ESXi environment Microsoft Entra ID environment Hyper-V environment AWS environment
	Configure the CylanceGATEWAY Connector in the VM environment (optional).
	Access the CylanceGATEWAY Connector using OpenSSH (optional).
	Configure your firewall for the CylanceGATEWAY Connector.
	Enroll the CylanceGATEWAY Connector with the BlackBerry Infrastructure.
	Configure the CylanceGATEWAY Connector (optional).
	Managing CylanceGATEWAY Connectors to set options and check connector status.