First 3 weeks
What's a good goal for your first three weeks with an Access Gate
Phase 1: Discovery & Visibility (Day 1)
- Passive network listening
- Active discovery
- Asset profiling
- Populate Asset tab
Phase 2: Deploy Access Control with Enclaves (Week 1)
- Create an enclave
- Add assets and principals
- Grant permissions
- Test access workflows
- Begin logging and alerting
Phase 3: Log, Monitor & Respond (Week 2)
- Collect audit logs
- Connect your log collection to your SIEM
- Run risk audit & Generate compliance reports
At the end of three weeks, you should reach:
- ✓ Complete asset inventory (AC.CM-1, AC.CM-2)
- ✓ Identity-based access control (AC.L2-3.1.1, AC.L2-3.1.2)
- ✓ Network segmentation (SC.L2-3.13.1)
- ✓ Encrypted connections (SC.L2-3.13.11)
- ✓ Audit logging (AU.L2-3.3.1 through AU.L2-3.3.9)
- ✓ Incident response capability (IR.L2-3.6.1)