Help CenterBeginning with Portal version 1.8.2, we have introduced the feature to allow ThreatLocker administrators to add custom notes or custom banners to the portal. This will apply a banner to the top of the page containing information that ThreatLocker administrators may need to be aware of. Based on the type of note and where it is applied, restrictions are placed on the actions of computer maintenance modes until the note, or banner, is acknowledged.
You can find the Custom Note feature in three places in the portal:
-
Organizations Page – Located under the ‘Actions’ column to the right of the Organization Name.
-
Devices Page – Under the ‘Actions’ column on the right side of the page.
-
Computers Page > Groups – Under the ‘Actions’ column to the right of the ‘Delete’ button.
Organizations Page:
Devices Page:
Devices Page > Groups:
By selecting the 'Add Notes’ button, a popout window will display titled ‘Custom Notes - (Organization Name)’. From here, you will see all options to configure your custom note.
-
The ‘Applies To’ dropdown provides all possible computers and groups that exist within your organization. Selecting from the dropdown will apply the note to appear when it is relevant to that level.
-
- Example: A note applied to the Workstations group for Detect alerts will appear whenever a machine from the Workstations group generates a Detect alert.
-
The ‘Type’ dropdown allows you to choose what type of banner you are creating. The three possible options are:
-
-
Detect Alerts – Displays inside of Detect alerts if the ‘Applies To’ configuration is fulfilled.
-
-
-
Approval Requests – Displays inside of Approval Requests if the ‘Applies To’ configuration is fulfilled.
-
-
-
Enable/Disable Maintenance Mode – Displays in areas where Maintenance Modes can be changed (Computer Details sidebar) if the ‘Applies To’ configuration is fulfilled. This banner can be applied to all computer groups and individual workstations, but it cannot be applied to ‘Entire Organization’.
-
-
The ‘Severity’ dropdown allows you to choose what level of importance your banner will be at. There are three levels of severity:
-
-
Information - Banner is blue in color. Information banners provide information only and will not prevent administrators from performing actions on pages where this banner is applied.
-
-
-
Warning - Banner is yellow in color. This option requires the administrator to acknowledge the banner before allowing an action to be performed.
-
-
-
Severe - Banner is red in color. This option requires the administrator to acknowledge the banner before allowing an action to be performed.
-
Note: Notes take a priority order based on the severity level. Severe will always display on top and must be acknowledged before other banners are displayed. Warning will display next, and Information notes take least priority in displaying. They must be acknowledged in that order if more than one exists.
-
The ‘Expiration’ section allows you to set a date and time for when your note will no longer be displayed. By default, the note will have no expiration, but you can select the ‘Set Note Expiration’ option to customize when the note expires if the information you’re providing is not permanent.
-
The ‘Note’ section is where you put the text that will appear in the banner.
-
Select the ‘Add Note’ button once all information has been put in.
Below this is a section called ‘Existing Notes’ which shows you all notes that are active per what is selected in the ‘Applies To’ section. From here, you can see all the parameters relating to the individual notes. You can also delete the notes here prior to their expiration date or if they have no expiration.
Acknowledging Severe or Warning notes is required prior to actioning what is relevant to the banner type (i.e. Approval Request type banners must be acknowledged before approving the request). This makes sure that administrators are aware of important information before making a change.
Relevant System Audit logs will be recorded upon acknowledgement of banners.