<h3>Overview</h3>The purpose of this document is to fulfill your requirements by applying a systematic approach to know how and when to use the necessary tools within SITE Support Portal.<h3>Access to SITE Support</h3><pre><code class="language-plaintext"> 1.1: Support Website can be accessed through this link: https://support.cloud.site.sa 
</code></pre>1.2: After Accessing the website click on “Clients”. <img src="https://docs.cloud.site.sa/media/figure_2_0_373d219a9c.png" alt="figure(2.0).png">1.3: Insert your credentials “Email and Password”<img src="https://docs.cloud.site.sa/media/figure_2_1_fcaafefdd2.png" alt="figure(2.1).png">1.4: Click on Registration, and scan the code to enroll in using any authenticator app.(Ensure that the registration process only happens at the first time you log in)<img src="https://docs.cloud.site.sa/media/figure_2_2_7a5c8076ca.jpg" alt="figure(2.2).jpg">1.5: Scan the code.<img src="https://docs.cloud.site.sa/media/figure_2_3_653a44ef3c.jpg" alt="figure(2.3).jpg">1.6: Enter the code.<img src="https://docs.cloud.site.sa/media/figure_2_4_a7d3e7f90f.jpg" alt="figure(2.4).jpg"><h3>Support Portal Guidliness</h3>After registration and enrolling in 2FA, you can access the main page for the support portal.<img src="https://docs.cloud.site.sa/media/figure_3_0_7f7c3ca613.png" alt="figure(3.0).png">In the center of the page, you will see the above four options:• View All Requests: which you will be able to see all opened &amp; closed tickets.• Service Request: Which you will be able to request a service.• Report an Incident: Which you will be able to report an incident.• Service Release Request: If you need to publish a new service for eg; Website.2.0: When you click on “Service Request” you will be able to see the below form where you have to fill all the required fields then click “Create” to post your request.<img src="https://docs.cloud.site.sa/media/figure_3_1_f1a64a47c4.png" alt="figure(3.1).png">2.1: When you click on “Report an Incident” you will be able to see the below form where you have to fill all the required fields then click “Create” to post your request.<blockquote>Please consult the SITE Incident Priority Figure located at the bottom of the page to determine the priority level of your incident.</blockquote><img src="https://docs.cloud.site.sa/media/figure_3_2_4fdabe8307.png" alt="figure(3.2).png">2.2: When you click on “Service Release Request” you will be able to see the below form where you have to fill all the required fields then click “Create” to post your request.<img src="https://docs.cloud.site.sa/media/figure_3_3_7e9409002c.png" alt="figure(3.3).png">2.3: After submitting your request, you can view all of your requests by clicking on the “View All Requests” button.<img src="https://docs.cloud.site.sa/media/3_4_mt_27d071c0c6.png" alt="3.4-mt.png">2.4: Select the specific request you wish to modify or add a comment to.<img src="https://docs.cloud.site.sa/media/3_5_mt_6a1daf47de.png" alt="3.5-mt.png">Incident Priority<img src="https://docs.cloud.site.sa/media/figure_4_0_52b5bd1c2a.png" alt="figure(4.0).png">SLA (Response Time)<img src="https://docs.cloud.site.sa/media/figure_4_1_26a38fd671.png" alt="figure(4.1).png">

Seek the support you need to effectively run your environment

Support

Support - User Manual

<h2>Permission Profile enables you to organize users and resources based on access rights, making access management easier for administrators.</h2>&nbsp;&nbsp;&nbsp;&nbsp;<ul><li>How to Create Permission Profile</li></ul><ol style="list-style-type:decimal;"><li>Go to Permissions page from the side menu under settings list.</li><li>Click Create from the Top-Right corner.</li><li>A pop-up will show-up, Fill it with the details of the profile you want, then click submit &nbsp; &nbsp;&nbsp;</li></ol>&nbsp;<figure class="image image-style-align-left image_resized" style="width:22.63%;"><img src="/uploads/Annotation_2024_05_07_083017_29ad37b796.png"></figure>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<ul><li>How to add permissions to a permission profile</li></ul>&nbsp;&nbsp; &nbsp; &nbsp; &nbsp;<img class="image_resized" style="width:41.22%;" src="/uploads/image_4c827d5432.png">&nbsp;NOTE: In order to be able to assign permissions to a profile, you need to have the following permissions assigned to your tenant &amp; BG:<ul style="list-style-type:circle;"><li>Manage profile Permissions</li><li>Get Profile Permissions</li><li>Get Profiles</li><li>Edit Profile</li><li>Create Profile</li><li>Delete Profile</li><li>Delete User Profile</li><li>Assign Profile</li></ul>&nbsp;In this page you can choose any action/read-only you want to assign to your desired permission profile.Feel free to explore the permissions and click include any one you want to your profile with the exact Business Group/Groups.&nbsp;<ul><li>How to assign a User to Permission Profile&nbsp;</li></ul>&nbsp;In the permission page, Click The number of users assigned to it.&nbsp;<figure class="image image-style-align-left image_resized" style="width:83.66%;"><img src="/uploads/image_fb647a8c8e.png"></figure>&nbsp;&nbsp;The following pop-up window will appear, you can any user on your environment that has access to cloud portal to the permission profile you want.&nbsp;(for more on how to gain access to cloud portal for other users please visit <a href="https://docs.cloud.site.sa/MyCloudPortal/user-mgmt" target="_blank" rel="noopener noreferrer">Users Management Guide</a>)

Self-provisioning portal that allows users to independently and efficiently manage and configure various resources, services, or features without the need for manual intervention from administrators or support teams

My Cloud Portal

Permission Profiles

1- In windows start, search for "Control Panel", then click on "Control Panel". 2- In the search bar, type "Mail", then click on "Mail".<img src="https://docs.cloud.site.sa/media/CP_Mail_f0a952d895.PNG" alt="CP-Mail.PNG">3- In following pop-up, click "Show Profiles...".<img src="https://docs.cloud.site.sa/media/Show_Prof_46806113ef.PNG" alt="Show-Prof.PNG">4- In the following pop-up, click "Add" to create a new email profile.<img src="https://docs.cloud.site.sa/media/Mail_Add_f53954df88.PNG" alt="Mail_Add.PNG">5- Name your profile, then click "OK".<img src="https://docs.cloud.site.sa/media/Prof_Name_4f3f1a01f9.PNG" alt="Prof-Name.PNG">6- You will be asked for your name, email address, your password, and a password confirmation. Fill in the information, then click "Next&gt;".<img src="https://docs.cloud.site.sa/media/Add_Acc_b7268dccba.PNG" alt="Add-Acc.PNG">7- Auto Discover will find your server settings and auto connect you to your mailbox. Once the mailbox has been linked, you may be asked to confirm your settings again. It is recommended that you check the box labeled "Save this password in your password list" otherwise you will be asked to provide your password whenever you open Microsoft applications. Then, click "OK".<img src="https://docs.cloud.site.sa/media/re_Add_Acc_ca5a90bbc4.PNG" alt="re_Add-Acc.PNG">8- Click "Finish" once the account has been setup.<img src="https://docs.cloud.site.sa/media/confirm_5e07dbf80f.PNG" alt="confirm.PNG">

Email Service

Configure a New Outlook Profile

1- Go to "https://reset.cloud.site.sa" in your browser.2- Enter a valid email, then press "Submit".&nbsp;<figure class="image image-style-align-center image_resized" style="width:50%;"><img src="/uploads/1_6a33181863.PNG"></figure>&nbsp;3- Enter the OTP you received, and the new password, then press "Submit". &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;<figure class="image image-style-align-center image_resized" style="width:50%;"><img src="/uploads/2_2d69c67b6e.PNG"></figure>Congratulations!! Your password has been reset!<figure class="image image-style-align-center image_resized" style="width:50%;"><img src="/uploads/3_2a03ebe5a0.jpg"></figure>Password Policy:<figure class="image image-style-align-center image_resized" style="width:75%;"><img src="/uploads/pass_po_0736e08d02.PNG"></figure>

User Reset Password

A virtual machine (VM) is a digital version of a physical computer, and fundamentally a virtualization emulation of a computer system. VMs can run programs and operating systems, store data, connect to networks, and do other computing functions. VMs offer several advantages over physical machines, they are more scalable, flexible, and easy to manage and maintain.&nbsp;<h3>Create a Virtual Machine&nbsp;</h3>1. In order to create a new VM on SITE Cloud Portal, navigate to Compute section, then to the Virtual Machines tab on the upper left corner:<img src="https://docs.cloud.site.sa/media/V_Ms_1_3a0c39d2b9.png" alt="Error showing the image.">2. Click on Create, this option can be found in upper right corner:<img src="https://docs.cloud.site.sa/media/V_Ms_Create_1aaa4f028c.png" alt="Error showing the image.">3. Choose the Operating System of the VM from the Available options:<img src="https://docs.cloud.site.sa/media/V_Ms_OS_4dc481f2e0.png" alt="Error while showing the image.">4. Fill in the required Virtual Machine details:<ul><li>Business Group (BG): BGs are used for managing your environment, it can be used to organize VMs and subnets based on uses, projects, etc..</li><li>Datacenter: Choose the location (Riyadh, or Jeddah).</li><li>Environment: Choose the Environment number and the zone. There are two zones, High Security Assurance (HSA), and Standard Security Assurance (SSA). HSA is highly secured and cannot have access to or from the internet, and SSA can have internet access.</li><li>Network: chooses the preferred subnet from the available subnets in the chosen BG and environment.</li><li>Virtual Machine Specifications: Fill in the new VM name and password (Complexity requirements can be found once you click on password field.</li><li>T-Shirt Size: Choose the CPU and Memory size from the available pre-defined sizes.</li><li>Storage: Select the preferred capacity of the VM's main storage/disk, additional storage/disks can be added after the VM gets created.</li><li>Backup: Set up the preferred Backup Regime (None, Monthly, Weekly, Daily).</li></ul><img src="https://docs.cloud.site.sa/media/V_Ms_Details_4ca086c686.png" alt="Error while showing the image.">5. Advanced Options:<ul><li>Specifying Private IP: You can select specific private IP for this Virtual Machine or use the next available IP.</li><li>Custom Scripts (Optional): You can add custom scripts that will directly execute after VM creation (either using Bash or PowerShell). DISCLAIMER: You are fully responsible for the scripts you want to execute, which may or may not cause an issue with the virtual machine.</li></ul><img src="https://docs.cloud.site.sa/media/V_Ms_Advanced_Options_c509c7a4d9.png" alt="Error while showing the image.">6. Click on Submit.Click on Submit, and you can see the request progress in request list (top right corner):<img src="https://docs.cloud.site.sa/media/request_07da348fb3.PNG" alt="request.PNG">7. Once the Create Vm request is completed, you can find your new VM in Virtual Machines tab.&nbsp;<h3>Resize a Virtual Machine</h3>SITE Cloud provides your infrastructure with the Elasticity and Scalability it will need to easily adapt to the changing demands of your organization to scale up or down the virtual machine's resources to meet your business demands.&nbsp;STEP 1:In SITE Cloud Portal: Browse to the Compute tab on the left bar and click on Virtual Machines&nbsp;<h4><img src="/uploads/Resize1_6dd292cd59.png"></h4>&nbsp; STEP 2:On your virtual machine page, on the top-right click on Action&nbsp;<h4><img src="/uploads/Resize2_a8a4a83867.png"></h4>&nbsp; STEP 3:On the Actions list : Click on Resize VM option.&nbsp;<h4><img src="/uploads/Resize3_5f8d09f541.png"></h4>&nbsp; STEP 4:Click on ' Please choose a T-size' and browse the different T-sizes and customes to choose the size that fits your needs.&nbsp;<h4><img src="/uploads/Resize4_bdf247e3d3.png"></h4>&nbsp; STEP 5:Submit your request, and leave it to the SITE Orchestrator to do the magic ;)&nbsp;&nbsp;<figure class="image image-style-align-left"><img src="/uploads/Resize5_da979bc12e.png"></figure>

Virtual Machine

<h2>What is SITE Authenticator?</h2>SITE Authenticator is a two-factor authentication (2FA) app developed by SITE. It provides an additional layer of security for online accounts by generating time-based one-time passwords (TOTPs). Users link their accounts to the app, and when they log in, they must enter the current TOTP along with their regular password. This adds an extra level of verification beyond just a password, making it harder for unauthorized individuals to access accounts even if they know the password.<h4>Guided Steps for using SITE Authenticator:</h4>1- Search for SITE Authenticator and download it. It’s available on iOS and Android or you can use the below links.iOS: <a href="https://apps.apple.com/sa/app/site-authenticator/id1580913822" target="_blank" rel="noopener noreferrer">Download Here</a> &nbsp;Android: <a href="https://play.google.com/store/apps/details?id=com.site.cloud.authenticator" target="_blank" rel="noopener noreferrer">Download Here</a><img src="https://docs.cloud.site.sa/media/1_de03548902.jpg" alt="1.jpg">2- You can Set your PIN code or Login with Biometrics.<img src="https://docs.cloud.site.sa/media/2_15b1c6441d.jpg" alt="2.jpg">3- This is the interface, and from the plus sign, you can either scan QR codes, select a QR code or add a key manually.<img src="https://docs.cloud.site.sa/media/3_4f92228859.jpg" alt="3.jpg"> <img src="https://docs.cloud.site.sa/media/4444jpg_4b638b277c.jpg" alt="4444jpg.jpg">4- The following example is added manually.<img src="https://docs.cloud.site.sa/media/55_2536cc7d76.jpg" alt="55.jpg"><img src="https://docs.cloud.site.sa/media/66_732e16b067.jpg" alt="66.jpg">The code will re-generate every 30 seconds.<img src="https://docs.cloud.site.sa/media/77_f732336033.jpg" alt="77.jpg">

SITE Authenticator

Embrace Comprehensive Compliance Controls with SITE Cloud SITE Cloud supports numerous security standards and compliance certifications, such as ISO 27001, ISO 27017, ISO 27018, and CSA. We help clients meet compliance requirements.<h4>Benefits of Compliance on SITE Cloud</h4>Third-Party Validation for Global Requirements SITE Cloud frequently undergoes third-party validation for thousands of global compliance requirements. Our service helps you meet security and compliance standards for various sectors, such as government.Inherit Latest Security Controls These controls enhance your compliance and certification programs. You also gain access to tools that reduce your cost and time to meet your specific security assurance requirements.<h4>Compliance is a Shared Responsibility</h4>Security and Compliance is a shared responsibility between SITE Cloud and the client. This shared model can help relieve the client’s operational burden as SITE Cloud operates, manages and controls the components from the host operating system and virtualization layer down to the physical security of the facilities in which the service operates. The client assumes responsibility and management of the guest operating system (including updates and security patches), other associated application software as well as the configuration of the SITE provided security firewall.Check the Responsibility matrix to learn more.<h4>Achieving Your Compliance Goals on SITE Cloud</h4>Data Privacy SITE Cloud gives clients ownership and control over their client content by design through simple, but powerful tools that allow clients to determine where their client content will be stored, secure their customer content in transit or at rest, and manage access to SITE services and resources.Compliance Resources SITE Cloud provides information about its compliance programs to help clients incorporate SITE Cloud controls into their governance framework. This information can assist clients in documenting a complete control and governance framework with SITE Cloud included as an important part of that framework.

SITE Cloud Compliance

<h4>Overview:</h4>SITE Cloud offers a comprehensive range of security measures to ensure the protection and integrity of your environment. Our cloud security solutions are designed to meet regulatory compliance requirements and provide continuous edge-to-edge protection. With SITE Cloud, you can trust in our commitment to security and innovation.<h4>Embedded Security at Every Step:</h4>At SITE Cloud, security is embedded at every step of your cloud journey. We understand the importance of protecting your data throughout its lifecycle. Our comprehensive security measures ensure that your data remains secure in all phases - from development to deployment. Trust SITE Cloud to provide you with the highest level of security at every step of the way.<h4>Supportive Regulatory Management Tools:</h4>SITE Cloud empowers you with supportive regulatory management tools to control your cloud environment. Stay ahead of compliance regulations and ensure your enterprise operates in a secure and compliant manner with SITE Cloud.<h4>Data Centers:</h4>SITE Cloud offers a choices for where and how your data and workloads should run. Our data centers are located to provide optimal performance, scalability, and redundancy. Choose the data center that best suits your needs and enjoy the flexibility and reliability of SITE Cloud's infrastructure.<h4>Secure Your Cloud:</h4>Customize your SITE Cloud experience to fit your unique business needs. Contact our expert team here to explore how SITE Cloud can enhance your security posture and provide the peace of mind you need to focus on your core business objectives. Trust SITE Cloud to secure your cloud environment and safeguard your valuable data and applications.

SITE Cloud Security 

<h2>To create a new Business Group Follow these steps:</h2>&nbsp;&nbsp;1- Login to&nbsp;Cloud Portal.&nbsp;2- Dashboard bar menu.&nbsp;3- Click&nbsp;Business Groups.&nbsp;<img src="/uploads/image_87465536c9.png">&nbsp;&nbsp;4- Click on Create.&nbsp;<img class="image_resized" style="width:79.28%;" src="/uploads/image_a34126f6d4.png">&nbsp;5- Fill the required.&nbsp;6- Click on Submit.&nbsp;<img src="/uploads/image_1b8d37cca9.png">&nbsp;7- Dashboard bar menu&nbsp;&nbsp;8-Click on Environment.&nbsp;<img src="/uploads/image_4b908a4672.png">&nbsp;9- Click on options &gt; Manage access.&nbsp;<img src="/uploads/image_cf0cf918b6.png"><img src="/uploads/image_d1a656aa22.png">&nbsp;10- Make sure to check mark on the newly added Business Group.&nbsp;<img src="/uploads/image_684ce473a4.png">&nbsp;11- Save.&nbsp;After you follow these steps you will need to assign new subnets to the new Business GroupFollow this guide to <a href="https://docs.cloud.site.sa/MyCloudPortal/create-subnets" target="_blank" rel="noopener noreferrer">Create Subnets</a>.

How to create a new Business Group

<h3>Version 2.2.0</h3>&nbsp;<ol><li>Introducing new sections:&nbsp;<ol><li>Security</li><li>Storage&nbsp;</li></ol></li><li>Introducing new products:<ol><li>Bare-metal</li><li>DNS</li><li>Mail Gateway</li><li>PAM</li><li>S3</li></ol></li><li>Virtual Machines now have two types of storage: High-Performance and Standard-Performance.</li><li>Pricings updates across existing products.</li><li>“Fileshare and archive” product is now deprecated and replaced by “SMB” and “NFS” under “Storage”.</li><li>App layout enhancements.</li></ol>

Estimate the cost on on-boarding a new workload

Calculator

Release Notes 2.2.0

What is SITE Inform?SITE Inform is a whistleblowing platform that allows employees to anonymously report unethical and illegal misconduct within their organization.Main Roles:System Admin The system admin adds users, creates question templates, categories of cases, and their status.Supervisor The supervisor performs a supervisory role only, by reviewing the reports and their details. He can also activate/deactivate any user added to the same category that he supervises.Case ManagerThe role of the case manager in the system is to process the cases and communicate directly with the whistleblower, In the presence of a new case, the system assigns the case automatically via the “robin-round” feature.Observer The observer role is to only observe without taking any action on the dashboard page or cases.WhistleblowerThe whistleblower can report a new case or track their case. &nbsp;Key Features:<ul><li>Simple reporting flow through a secure web portal.&nbsp;</li><li>Flexible and detailed reporting and dashboard.</li><li>Bilingual language support (Arabic and English).</li><li>High level of security, data privacy and anonymity.</li><li>Configurable case management and dynamic questionnaires creation.</li><li>Supervisor approval workflow.</li></ul>&nbsp;SITE Inform Benefits:Empowering Ethical BehaviorBy providing an accessible and efficient tool for reporting misconduct, the platform reinforces the company's commitment to maintaining an ethical work environment.Increase Trust&nbsp;allowing anonymous reporting, the platform builds an environment of trust, empowering employees to voice concerns without any fears.User-Friendly platformA simple flow through a secure web portal ensures that employees can effortlessly report any concerns without complications.Comprehensive OversightOffering flexible and detailed reporting and dashboards, the platform provides organizations with a clear picture of reported issues.Inclusive Communication&nbsp;With bilingual language support in both Arabic and English, the platform ensures that a wider range of employees can access and use it without language barriers, promoting inclusivity.Customizable Reports&nbsp;Inform configurable case management and dynamic questionnaire creation allow organizations to tailor the reporting process according to their specific needs and industry requirements.

SITE Inform

SITE Inform Overview

What is SITE Ray?A secure virtual meeting and conferencing platform that provides fast and reliable conferencing capabilities designed for non-mission critical business meetings.<ul style="list-style-type:circle;"><li>24/7 Network Operation Center.</li><li>24/7 Managed Detect and Response.</li><li>Secure by Design Sovereign Cloud Hosting.</li></ul>RAY Capabilities:-Audio/Video Conferencing.High quality audio and video through responsive web or mobile application.-Screen Sharing.Ability to share a single application window or the entire desktop with meeting participants.-Meeting Recording.Ability to record audio, video, and other content of a meeting for future reference or sharing purposes.-Whiteboard Function.Collaborative whiteboard that can be used for annotations with other participants.-Bilingual language support.It supports multi-languages (Arabic and English).-Chat.One to one and group Instance messages with the meeting participants.-Email Plugin.Seamlessly schedule and join meetings directly from email outlook.-Polling.Launch a poll question during your meeting and see the response from the participants.-Brand Customization. Ability to personalize SITE Ray to reflect a client brand's visual identity.-Multi-Deployment/Connectivity Model.Ray can be deployed as Multi Tenancy, dedicated, hydride or air gapped Model.Security Features:<ul style="list-style-type:circle;"><li>MFA Using SITE Authenticator.</li><li>Meeting Password.</li><li>Room Lock.</li><li>Waiting Room.</li><li>Three Layers of encryption.</li><li>TLS/DTLS encryption.</li><li>End-To-End encryption.</li><li>IP Sec VPN encryption (Optional)</li></ul>

SITE Ray

SITE RAY Overview

This Privacy Notice describes how we collect and use your personal information in relation to SITE Cloud Services. This Privacy Notice does not apply to the “content” processed, stored, or hosted by our clients using SITE Cloud offerings.Personal Information We Collect your personal information in the course of providing SITE Cloud Offerings to you. Here are the types of information we gather:<ul><li>Information You Give Us: We collect any information you provide in relation to SITE Cloud Offerings.</li><li>Automatic Information: We automatically collect certain types of information when you interact with SITE Cloud portals.</li></ul>How We Use Personal Information SITE uses the information and data collected from the Website to provide a safe, efficient and better user experience. Below are details of how the information and data are used:<ul><li>Managing Website Services: information and data collected are to measure and improve those services and features, and to provide Visitors with the necessary customer support.</li><li>Countering Illegal Activities: information and data collected is used to prevent potentially illegal activities and to enforce the terms and conditions herein. A variety of technological systems are also utilized to detect and address anomalous activities and screen content to prevent abuse, such as spam. These efforts may, on occasion, result in temporary or permanent suspension or termination of some aspects of the relevant Website for some Visitors.</li><li>Contacting Visitors: information and data collected may be used to contact Visitors with service-related announcements from time to time. Visitors may, however, opt out of all communications except for essential updates.</li></ul>Cookies Cookies are electronic placeholders that are placed on users' computers by websites and are commonly used as anonymous unique user identifiers to track the individual activity on their website over time. Cookies used by SITE are session-based and therefore last only for the duration of the Visitor's session and are used on the Website to keep track of Visitor sessions to balance between the Web Servers during usage of this Website. Cookies do not contain information or data that may identify a Visitor, as no Personally Identifiable Information (PII) about any user generally, and any Visitor specifically, is stored by them. Occasionally, SITE will make use of persistent cookies. A persistent cookie provides information about an ongoing session a Visitor is engaged in and is temporarily stored on such Visitor's hard drive until the following visit. This provides SITE with useful information, including Visitor behavior, enabling it to recognize frequent Visitors and to facilitate Visitors' access to and use of the Website, allowing SITE to make content improvements. Such cookies are used for this purpose only, and are not used to identify Visitors or to track their usage of other websites.Sharing Personal Information Information about our clients is an important part of our business, and we are not in the business of selling our client’s personal information to others. We don't share personal information with any third parties.Location of Personal Information SITE Cloud Services is located in Saudi Arabia. The client's personal information is stored in or accessed from Saudi Arabia. Whenever we transfer personal information to other jurisdictions, we will ensure that the information is transferred in accordance with this SITE Privacy policy and as permitted by Saudi data protection laws.How We Secure Information At SITE Cloud, security is our highest priority. We design our systems with security and privacy in mind.<ul><li>We maintain a wide variety of compliance programs that validate our security controls.</li><li>We protect the security of your information during transmission to or from SITE Cloud services, portals or applications by using encryption protocols and software.</li><li>We maintain procedural safeguards in connection with the disclosure of personal information. Our security procedures mean we may request approval from the client's business owner before disclosing personal information.</li></ul>Access and Choice The client can view, update, and delete certain information about their contact information to interact with SITE Cloud Offerings by contacting SITE Cloud Support atThird-Party Sites and Services SITE Cloud services and offerings do not utilize any third-party embedded content or include links to other websites and applications.Retention of Personal Information SITE Cloud keeps the client's information for as long as necessary to fulfill the purposes outlined in this privacy notice unless otherwise required by law. We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice unless a longer retention period is required or permitted by law (such as VAT, accounting, or other legal requirements). No purpose in this notice will require us to keep your personal information for longer than six (6) months past the termination of the contract.When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.Contacts, Notices, and Revisions If you have any concerns about privacy at SITE Cloud, please with a thorough description, OR send us an email at and we will try to resolve the issue for you.

Privacy Notice

1- Enter your organization email and password in the specified blanks, then press on Sign in.<figure class="image image-style-align-center image_resized" style="width:50%;"><img src="/uploads/1_1_27f82a1a5b.PNG"></figure>2- On “Configuration Options”, press the Registration button.&nbsp;<figure class="image image-style-align-center image_resized" style="width:50%;"><img src="/uploads/2_1_9f1867fa46.PNG"></figure>3- On “ Enroll Authenticator App”, press Continue<figure class="image image-style-align-center image_resized" style="width:50%;"><img src="/uploads/3_22cb44f136.PNG"></figure>&nbsp;4- On “Enroll Authenticator App”, Download SITE Authenticator on your phone, then press Continue<figure class="image image-style-align-center image_resized" style="width:50%;"><img src="/uploads/4_4727667a3e.PNG"></figure>5- Use SITE Authenticator to capture the QR code, then press Continue<figure class="image image_resized" style="width:49.71%;"><img src="/uploads/tempsnip_e04d281d42.png"></figure>6- Enter the 6-Digit code from SITE Authenticator app, then press Verify&nbsp;<figure class="image image-style-align-center image_resized" style="width:50%;"><img src="/uploads/6_30fdccba3c.PNG"></figure>&nbsp;7- Congratulations! You are now registered, press Finish<figure class="image image-style-align-center image_resized" style="width:50%;"><img src="/uploads/7_dd01ce2924.PNG"></figure>

MFA Registration 

<h3>Subnets Overview&nbsp;</h3>&nbsp;Subnets play a crucial role in modern network architecture for two fundamental reasons, Organization and security.&nbsp;By breaking down larger networks into smaller, manageable segments, subnets enhance resource management and simplify administration.&nbsp; &nbsp;<h3>Subnet Manual</h3>1- Login into My.cloud.site.sa Access the Subnets section from the left sidebar under Networking&nbsp;<figure class="image image-style-align-center image_resized" style="width:24.21%;"><img src="/uploads/subnets_a8e9afee2a.jpg"></figure>2- Move to the right sidebar and click on the create button.<figure class="image image_resized" style="width:25.1%;"><img src="/uploads/networking_0476cf8b12.jpg"></figure>3- Choose the Business Group (BG) for which you intend to establish a subnet.&nbsp;Select your Virtual Private Cloud (VPC): SSA or HSA.Provide a Name for the subnet.Specify the Network in the format (e.g., 192.168.0.0/24) that you wish to allocate.Set the Gateway for the subnet.&nbsp;Define the DNS suffix, which denotes the domain name (e.g., "google.com").Assign your DNS server, for example, 8.8.8.8.

Subnets - Guide 

<h4>Here you have a steps to operate your request details and you can making the decision to accept or delete.</h4><img src="https://docs.cloud.site.sa/media/Support_ID_0fe08e56d2.jpg" alt="Support ID.jpg">1- Login to Cloud Portal.2- Dashboard bar menu.3- Click WAF under security section.<img src="https://docs.cloud.site.sa/media/WAF_1d08f9656b.jpg" alt="WAF.jpg">4- Blocking Event.<img src="https://docs.cloud.site.sa/media/Blocking_Event_c56b17a8e0.jpg" alt="Blocking Event.jpg">5- Your information (Tenant - Business Group - Environment - Support ID).<img src="https://docs.cloud.site.sa/media/View_d447b75df6.JPG" alt="View.JPG">6- Click Submit.<img src="https://docs.cloud.site.sa/media/Submit_688ea037d0.JPG" alt="Submit.JPG">7- You can operate your request to Accept or Delete and Export or Copy.<img src="https://docs.cloud.site.sa/media/Acc_Dele_13de9ab1e5.jpg" alt="AccDele.jpg">

How to operate request rejected?

<h2>User Management</h2><h3>Overview</h3>this new feature will greatly enhance your user management experience and provide you with greater control and flexibility. With the latest update, you will now be able to perform the following actions within SITE Cloud Portal to Manage User:<ol><li>Create, Modify, Delete, and Activate Users: Easily manage user accounts and make necessary updates as per your requirements.</li><li>Grant Authorization for SITE Cloud Services: You can now assign access rights to various essential portals and services, including the Monitor Portal, Support Portal, Cloud Portal, Cloud Billing, and Site Access.</li><li>Streamline Notifications: Ensure that the right individuals receive operation and security notifications by setting up personalized notification preferences.</li><li>User Role Definition: Define specific roles for users based on their responsibilities. Choose from roles such as Technical Owner, Business Owner, or Security Representative L1 or L2 to align user access with their respective roles.</li></ol>&nbsp;<h3>Pre-requests</h3><ul><li>created tenant on SITE Cloud</li><li>created business groups</li></ul>&nbsp;<h3>step-by-step guide&nbsp;</h3><ul><li>first go to user management tab under settings group on the left side menu:</li></ul><figure class="image image-style-align-left"><img src="/uploads/Capture_f7c4061e62.PNG"></figure>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<ul><li>click create on the top right corner and fill the required Fildes and choses the right Authorization then click submit:</li></ul><figure class="image image-style-align-left"><img src="/uploads/Capture1_d11f17b02e.PNG"></figure>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<ul><li>hovering on the user you can edit user information and authorization:</li></ul><img src="/uploads/Screenshot_2_7d97c51179.png"><ul><li>and clicking the three dots you can reset user password or deactivate/activate user:</li></ul><figure class="image"><img src="/uploads/Capture3_73bdd25c35.PNG"></figure>&nbsp;&nbsp;

User Management

Page OverviewA User Manual provides a description of how end users interact with the system (SITE Inform).o System Admino Supervisoro Case Managero Whistleblowero Observer&nbsp;System OverviewLogin PageThe system consists of a login page that represents the front interface for all users except Whistleblowers. Each user is directed to the dashboard page to view get an overview of the system.<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_cc2ee3db11.png"></figure>System dashboardThe dashboard gives the user an overview of the number of cases in the system and their status.<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_e9e849ec52.png"></figure>System Home PageThrough the home page, the whistleblower can follow up on a previous case, or create a new case.<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_163d2b322e.png"></figure>&nbsp;&nbsp;&nbsp;

System Overview 

Login Page:Visit SITE Ray login page to create or join a meeting.<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_dab6ee9db1.png"></figure>nter your company credentials and OTP to login, if single sign-on (SSO) is configured, you will be redirected to the SSO page to sign in.<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_3742cefa00.png"></figure>Schedule and Create MeetingThrough SITE RAY Main PageFrom the main page, click on "Create a new room" or “Create Live Stream” or join a meeting through Meeting URL.<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_b334fc56a0.png"></figure>Add meeting details, then Click on "Host" to start the meeting.<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_e63c38a430.png"></figure>From meeting Setting, view Room Information and Click Copy next to “Meeting Link (for access)” to Share meeting URL with participants.<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_af72cb65e7.png"></figure>Schedule and Create MeetingThrough Email PluginOpen your outlook inboxClick on SITE RAY’s "Schedule Meeting" from the top toolbar.<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_e2b6c6da4a.png"></figure>Or from your outlook calendar click new meeting then SITE RAYS ’s "Add a Meeting" from the top toolbar.The meeting room details will appear in the body of the message.<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_cec596dd6e.png"></figure>Add your meeting information then share the invitation with participants.Join MeetingYou can join a meeting through the browser or mobile app. Click on the meeting invite link to join the meetingAllow permission for your microphone and camera, then enter the room settings.Enter you nameToggle your microphone and camera on or offIf you are a participant, enter the room password and encryption keyClick on Join to join the meeting.<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_be29bb6108.png"></figure>Meeting Features<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_2104ebe177.png"></figure><figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_3263682e22.png"></figure>&nbsp;

SITE Ray Manual

This manual will guide you through the process of setting up TinyProxy on a Ubuntu Virtual Machine (VM) that resides in the SSA (Standard Security Assurance) zone of your tenant. The purpose of this setup is to provide controlled internet access for VMs in the HSA (High Security Assurance) zone that cannot reach the internet directly. By using TinyProxy, you can securely manage and monitor internet access for these VMs.<h3>Getting Started</h3><h4>Prerequisites</h4>Before you begin, make sure you have the following:<ul><li>A Ubuntu 20.04 VM running in the SSA zone, and has access to the internet on ports 80/443/53.</li><li>SSH access to the Ubuntu VM with administrative privileges.</li><li>Basic knowledge of Linux command-line operations.</li></ul><img src="https://docs.cloud.site.sa/media/Screenshot_2023_08_17_194744_208ff983af.png" alt="Screenshot 2023-08-17 194744.png"><h4>Steps</h4><h4>1. Update the System</h4>Log in to your Ubuntu VM via SSH and ensure your system is up-to-date:<pre><code class="language-plaintext">sudo apt update
</code></pre><h4>2. Install TinyProxy</h4>Install the TinyProxy package using the following command:<pre><code class="language-plaintext">sudo apt install tinyproxy
</code></pre><h4>3. Configure TinyProxy</h4>Edit the TinyProxy configuration file to customize the settings:<pre><code class="language-plaintext">sudo nano /etc/tinyproxy/tinyproxy.conf
</code></pre>Modify the configuration as follows:<ul><li>Port - Set the port on which TinyProxy will listen (e.g., 3128).</li><li>Allow - Configure the IP addresses or ranges that are allowed to use the proxy (e.g., Allow 0.0.0.0/0).</li><li>Anonymous - Disable anonymous access.</li></ul><img src="https://docs.cloud.site.sa/media/Screenshot_2023_08_17_203213_6d5c49d239.png" alt="Screenshot 2023-08-17 203213.png"><ul><li>Save the file and exit the editor.</li></ul><h4>4. Restart TinyProxy</h4>After making changes to the configuration, restart the TinyProxy service:<pre><code class="language-plaintext">sudo systemctl restart tinyproxy
</code></pre><h4>5. Configure Firewall Rules</h4>Allow the connection to your proxy VM on proxy port (tcp/3128) using SITE Cloud Portal.<img src="https://docs.cloud.site.sa/media/Screenshot_2023_08_17_210451_728bd46fb5.png" alt="Screenshot 2023-08-17 210451.png"><h4>6. Configure Proxy on VMs</h4><h4>- Windows VM</h4><ol><li>Select the Start button, then select Settings &gt; Network &amp; Internet &gt; Proxy.</li><li>Under Manual proxy setup, turn on Use a proxy server.</li><li>Save</li></ol><img src="https://docs.cloud.site.sa/media/Screenshot_2023_08_17_205251_5469d27189.png" alt="Screenshot 2023-08-17 205251.png"><h4>- Linux VM</h4><ol><li>vi /etc/environment</li><li>Add the following lines containing your proxy IP and port.</li></ol><pre><code class="language-plaintext">http_proxy=http://your_proxy_IP:3128/
https_proxy=http://your_proxy_IP:3128/
</code></pre><img src="https://docs.cloud.site.sa/media/Screenshot_2023_08_17_204656_128ead6d0c.png" alt="Screenshot 2023-08-17 204656.png"><ol><li>Save the file and exit the editor.</li></ol><h3>Safety and Security</h3>1. Firewall Rules Ensure that your VM firewall rules allow incoming connections on the Proxy port (3128) only from necessary sources.2. Regular Updates Keep your Ubuntu system and TinyProxy software up to date by regularly applying updates and security patches.3. Monitoring and Logs Regularly review TinyProxy logs located in /var/log/tinyproxy/tinyproxy.log to monitor proxy activities. Analyze the logs for any unusual or unauthorized access attempts.Remember that security is paramount when setting up a proxy server in SSA. Incorrect configuration or mismanagement could potentially expose your HSA VMs to security risks. Always follow best practices and consult with your organization's IT security personnel if necessary.<h3>Glossary and References</h3>TinyProxy: A lightweight, open-source HTTP/HTTPS proxy server.SSH: Secure Shell, a protocol for securely accessing a remote server over a network.References: TinyProxy Documentation: http://tinyproxy.github.ioUbuntu Documentation: https://help.ubuntu.com

Reach the internet from HSA, how to setup your own proxy in SSA

User security awareness refers to the level of understanding and knowledge that individuals within an organization have about cybersecurity risks, best practices, and the actions they should take to protect sensitive information and systems.It involves educating employees about various threats, such as phishing, malware, social engineering, and the importance of maintaining strong passwords, using secure networks, and being cautious with data sharing.<h4>Importance of Security Awareness:</h4>Password Security: Educate employees about creating strong passwords, using password managers, and avoiding password sharing.Social Engineering Awareness: Raise awareness about tactics used by attackers to manipulate individuals into revealing confidential information or taking malicious actions.Data Protection and Privacy: Inform employees about the importance of handling sensitive data responsibly, including proper data storage, sharing, and disposal.Physical Security: Teach employees about physical security measures such as locking workstations, securing laptops, and reporting unauthorized access.Remote Work Security: Provide guidance on securing remote work environments, including safe Wi-Fi usage, VPNs, and maintaining the security of home networks.Malware Awareness: Educate employees about different types of malware (e.g., viruses, ransomware) and how to avoid downloading or spreading them.Safe Email Practices: Teach employees to identify phishing emails, avoid clicking on suspicious links or downloading attachments from unknown sources.Mobile Device Security: Inform employees about securing mobile devices, protecting against app-based threats, and using secure connections.Multi-Factor Authentication (MFA): Encourage the use of MFA to add an extra layer of security to logins and protect against unauthorized access.Incident Reporting: Promote a culture of reporting security incidents promptly to help the organization respond effectively to potential threats.Safe Social Media Usage: Guide employees on sharing information responsibly on social media platforms to avoid revealing sensitive company details.Software Updates and Patching: Educate employees on the significance of regularly updating software and systems to protect against known vulnerabilities.Physical Access Controls: Explain the importance of restricting access to secure areas and following access control procedures.Secure File Sharing: Provide guidelines for sharing files securely within and outside the organization, using encrypted methods and secure file-sharing platforms.The goal of user security awareness is to empower individuals to make informed decisions and adopt security-conscious behaviors to minimize the organization's overall cybersecurity risks.

Security Awareness

What are snapshots?Snapshots provide a quick recovery point of a server (including its files, software and settings) at a particular point in time.Critical note: A snapshot is not a backup and it shouldn't be retained for long period of time as it will negatively affect the performance of the VM and should be removed once done using it.&nbsp;<h3>Creating snapshots</h3>1-Choose the VM that you want to take/remove a snapshot from through the portal by going to Virtual Machines tab<img src="/uploads/image_943c7e24ee.png">2-After choosing the VM you want to add/remove a snapshot from VM Click on Snapshots tab&nbsp;<img src="/uploads/image_cb023d25a0.png">3- Choose Quick Snapshot button on the top right to take a new snapshot.&nbsp;<img src="/uploads/image_cadb8c02c9.png">4- Acknowledge that you have read, understand and agree to the terms above and write a description.&nbsp;VM Snapshots are retained for 7 daysAfter this retention period, you will not be able to restore the VM from this snapshot and it will negatively affect the performance of the VM. &nbsp;<img src="/uploads/image_1be428bd49.png">5- Submit your request and wait for the request be done to in the request list.&nbsp;<img src="/uploads/image_980755e820.png">&nbsp;&nbsp;<h3>Removing Snapshots</h3>&nbsp;Snapshots should be deleted manually and it shouldn't be retained for long period of time if not, VM performance will be negatively affected.&nbsp;1-Choose the snapshot you want to remove.&nbsp;<img src="/uploads/image_77e484e528.png">2-Click on Delete button.&nbsp;<img src="/uploads/image_4519a15276.png">3-Confirm to delete and wait the request to be done in the request list.

Virtual Machines Snapshots

SITE Inform is a whistleblowing platform that allows employees and other stakeholders to anonymously report unethical, illegal, or fraudulent activities or behaviors.<ul><li>Simple reporting flow through a secure web portal.</li><li>Flexible and informative dashboard.</li><li>Configurable case management and dynamic questionnaires creation.</li><li>Hosted and operated Locally in Saudi Arabia.</li></ul>&nbsp;Homepage:&nbsp;The whistleblower can create a new report or follow up on a previous report.<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_f880b04d54.png"></figure>How to blow the whistle:When you click on Report a New Case, You have to fill a form and the case will be treated confidentially.Choosing Category:<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_e300be7e39.png"></figure>&nbsp;Answer the questions displayed after choosing the category:&nbsp;<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_6b67974f3d.png"></figure>Agree on the terms and conditions:&nbsp;<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_b37763d69d.png"></figure>&nbsp;Your Case now is submitted, keep the case reference number to follow up:&nbsp;<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_6b345a1817.png"></figure>How to track your case:Enter the case reference number:<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_06e9707cae.png"></figure>&nbsp;Case Details:You can see the case details, case number, status, date and last update.Case Details Tab:<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_81a6f7d98f.png"></figure>&nbsp;Conversation Tab: you can contact the case manager directly.<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_69b611589f.png"></figure>&nbsp;Timeline Tab: You can see latest updates of your case.<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_a11c8f5979.png"></figure>&nbsp;

Whistleblower View

<figure class="image image-style-align-center image_resized" style="width:75%;"><img src="/uploads/image_6870d19975.png"></figure><figure class="image image-style-align-center image_resized" style="width:75%;"><img src="/uploads/image_44b3016eb5.png"></figure><figure class="image image-style-align-center image_resized" style="width:75%;"><img src="/uploads/image_5ce4b25892.png"></figure><figure class="image image-style-align-center image_resized" style="width:75%;"><img src="/uploads/image_6908f634e0.png"></figure><figure class="image image-style-align-center image_resized" style="width:75%;"><img src="/uploads/image_ead0c60504.png"></figure>&nbsp;

SITE RAY Meeting Features

User Management is where you can create and edit users in addition to granting access to SITE cloud services.&nbsp;&nbsp;In <a href="https://my.cloud.site.sa" target="_blank" rel="noopener noreferrer">my.cloud.site.sa</a>, under the Settings tab, you can find User Management<figure class="image"><img src="/uploads/image_a5a3115c3e.png"></figure>&nbsp;&nbsp;<h2>Create a User</h2>&nbsp;1 - In the User Management page, find the Create button on the top right corner (red circle)<figure class="image"><img src="/uploads/image_a11a326dff.png"></figure>2 - After clicking, a pop-up window will open where you can fill the new user information as well as assigning authorities. (Kindly note that this window is scrollable)&nbsp;<figure class="image"><img src="/uploads/image_1899ee021e.png"></figure>&nbsp;3 - After filling the new user information, click on the Submit button to finish the creation.&nbsp;&nbsp;&nbsp;<h2>Editing User Information</h2>1 - In the User Management page, you can find the users that in your tenant or search for a specific user using the search box in the top of the page (red circle)<figure class="image"><img src="/uploads/image_1aa40f3341.png"></figure>&nbsp;2 - On the selected user record, move your corsair above and the Edit User icon will appear, click on it (red circle)<figure class="image"><img src="/uploads/image_9dc14b23e3.png"></figure>&nbsp;3 - After clicking, a pop-up window will open where you can edit the user information<figure class="image"><img src="/uploads/image_7e5fb731cb.png"></figure>&nbsp;3 - After filling the new information, click on the Submit button to finish the editing.&nbsp;&nbsp;&nbsp;<h2>Managing Authorities</h2>1 - In the User Management page, you can find the users that in your tenant or search for a specific user using the search box in the top of the page<figure class="image"><img src="/uploads/image_1aa40f3341.png"></figure>&nbsp;2 - On the selected user record, move your corsair above and the Managing Authorities icon will appear, click on it (red circle)<figure class="image"><img src="/uploads/image_b708a2f657.png"></figure>&nbsp;3 - After clicking, a pop-up window will open where you can manage the user authorities<figure class="image"><img src="/uploads/image_efe574c392.png"></figure>&nbsp;4 - After filling the new authorities, click on the Submit button to finish the editing.

User Management Guidance

DNS (Domain Name System) is a fundamental technology that translates human-readable domain names (e.g., www.example.com) into IP addresses that computers use to identify each other on a network. Setting up DNS nameservers on Linux distributions like Ubuntu, CentOS, RHEL, and Oracle Linux is essential for proper network communication, as it enables your system to resolve domain names to IP addresses.This manual will guide you through the process of setting DNS nameservers on these Linux distributions, ensuring smooth connectivity and efficient network communication.&nbsp;<h4>Getting Started:</h4><h4>Prerequisites</h4>Before you begin, make sure you have the following:<ul><li>Administrative privileges (sudo or root) on your Linux system.</li><li>IP addresses of the DNS nameservers you want to use. These can be SITE Cloud DNS (100.64.3.140 and 100.80.0.175).</li><li>Apply similar rule to the below on your VM.</li></ul><img src="https://docs.cloud.site.sa/media/Screenshot_2023_08_17_184321_f0cac06cfc.png" alt="Screenshot 2023-08-17 184321.png"><h4>1. Ubuntu:</h4><ul><li>a. Open a terminal.</li><li>b. Edit the /etc/netplan/99-netcfg-vmware.yaml file using your preferred text editor (e.g., nano, vim).</li><li>c. Add a nameservers section with the IP addresses of DNS nameservers, indented under addresses:</li></ul><pre><code class="language-plaintext">nameservers:
addresses: [100.64.3.140, 100.80.0.175]
</code></pre><img src="https://docs.cloud.site.sa/media/Screenshot_2023_08_17_184443_c3a7fe9799.png" alt="Screenshot 2023-08-17 184443.png"><ul><li>d. Save the file and apply the changes by running:</li></ul><pre><code class="language-plaintext">sudo netplan apply
</code></pre><h4>2. CentOS/RHEL/Oracle Linux:</h4><ul><li>a. Open a terminal.</li><li>b. Edit the /etc/resolv.conf file using your preferred text editor.</li><li>c. Add the IP addresses of the DNS nameservers at the top of the file:</li></ul><pre><code class="language-plaintext">nameserver 100.64.3.140
nameserver 100.80.0.175
</code></pre><img src="https://docs.cloud.site.sa/media/Screenshot_2023_08_17_185122_617e92f0c1.png" alt="Screenshot 2023-08-17 185122.png"><ul><li>d. Save the file.</li></ul><h4>Safety and Security:</h4>While configuring DNS nameservers is generally safe, it's essential to be aware of potential security concerns:<ol><li>Use Trusted DNS Servers: When choosing DNS servers, prefer well-known and reputable providers like SITE Cloud DNS (100.64.3.140, 100.80.0.175).</li><li>Avoid Untrusted Sources: Be cautious of DNS servers from untrusted sources, as they may compromise your privacy and security.</li><li>Double-Check Configuration: Before applying changes, review your netplan file to ensure there are no syntax errors that might disrupt network connectivity.</li><li>Regular Updates: Keep your system and software up to date to benefit from security patches and improvements.</li><li>Firewall Rules: Maintain proper firewall rules to restrict DNS access to trusted networks.</li><li>DNSSEC: Consider implementing DNSSEC (Domain Name System Security Extensions) to enhance DNS security by validating responses from DNS servers.</li></ol>&nbsp;<h4>Glossary and References:</h4>DNS: Domain Name System, a system that translates domain names to IP addresses.IP Address: A numerical label assigned to each device on a computer network.Linux: An open-source Unix-like operating system kernel.netplan: Network configuration utility on Ubuntu.resolv.conf: DNS configuration file on CentOS, RHEL, and Oracle Linux.References:<ul><li>Ubuntu Netplan documentation: https://netplan.io/</li><li>CentOS documentation: https://wiki.centos.org/</li><li>RHEL documentation: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/</li><li>Oracle Linux documentation: https://docs.oracle.com/en/operating-systems/oracle-linux/</li></ul>

Configure SITE Cloud DNS Nameservers on Linux VMs

<h4>The steps to assign yours IPs as (Private - Public - Shared):</h4>1-Login to Cloud Portal.2-Dahsboard bar menu.3-Click IPs.<img src="https://docs.cloud.site.sa/media/ip1_51070cf10a.PNG" alt="ip1.PNG">4-Click Allocate.<img src="https://docs.cloud.site.sa/media/Allocate_IP_4a0ab0e4e8.png" alt="Allocate IP.png">5-Your information (Tenant - Business Group - Region - IP Type).<img src="https://docs.cloud.site.sa/media/IP_information_a3c2d69061.PNG" alt="IP information.PNG">6- You have 3 type of IPs (Private - Public - Shared):<ul><li>Private : For your VM.</li><li>Public : For internet.</li><li>Shared : Connection for another Tenant.</li></ul>7-If you select Private you have to choose your Network and Private IP.8-You have a option in Private IP "Use as VIP only" select if you need it.Why "Use as VIP only" ?VIP use cases:listener IP, floating IP, scanner IP.<img src="https://docs.cloud.site.sa/media/IP_Private_3c9eb1d9fc.PNG" alt="IP Private.PNG">

How to assign IPs from Cloud Portal?

<h3>What is User Access Review?</h3>A user access review is the process of periodically assessing the rights of anyone who has access to enterprise systems and data, it’s looks at who’s accessing what, and if they have valid reasons for accessing the enterprise’ assets. Users can include employees, partners, third-parties, service providers and vendors.<h4>Threats mitigated by a user access review:</h4>Privilege Creep: Happens when employees obtain access to lots of sensitive data during the time they work at an organization.Excessive privileges: Access privileges can be granted only to users that need them only to do their jobs.Access misuse: 15% of data breaches happen because of access and data misuseInsider threats: Danger of insiders comes from the fact that they have access to sensitive data and know about security measures implemented.To reduce risks associated with User Access:<ul><li>Review and verify who has access to the organization’s systems and services.</li><li>The business owner is to review and update the information gathering sheet and share the updated sheet with Cloud Operation Center at COC@site.sa</li><li>Restrict the use of shared accounts and minimize the access to third-parties.</li></ul>

Access Review

System Admin The system admin adds users, creates question templates, categories of cases, and their status.&nbsp;Adding UsersThe System Admin adds user and chooses their role in the system (Observer, Supervisor, Case Manager) and adds the category.<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_15d2ac1e28.png"></figure>Users page, where the System admin can activate or deactivate the users.<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_b3e13710c2.png"></figure>Adding Categories<ul><li>The system admin can add categories, upon which the division of the case management is based.</li><li>The system admin chooses the template of questions that the whistleblower will answer.</li></ul>&nbsp;Adding a new category allows you to set the number of implementation days (SLA) so that if a case is created and the case manager did not open it, an alert will be sent to the supervisor and case manager of the report.<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_eb48ab4448.png"></figure>List of categories, The system admin can temporarily disable some categories or modify their data.&nbsp;<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_337b4fd7c3.png"></figure>Adding question templates&nbsp;&nbsp;The system admin designs and creates question templates that will be attached to the categories so that when the whistleblower choose the category the system displays the question template that was created for that category, there is also default question template.&nbsp;On the question templates page, the system admin can add, delete and modify question templates.&nbsp;<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_6319d62c52.png"></figure>The system admin adds a new question template, with two default questions.The system admin can choose any of the following types to create questions as is explained in the figure below:<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_db9c9e1337.png"></figure>The system admin fills out the questions and answers and determines the mandatory requirements for each of them.After that, the admin clicks on Save Template, and he can add the template to any of the categories that will be created.<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_fcc5cddb88.png"></figure>&nbsp;&nbsp;Adding case statusThe system admin creates status for the cases and determines their order.The default status are: ( New – Open – &nbsp;In progress – Closed )When a new case is created it will be NEW, after the case manager open the case its status will directly be OPEN.<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_da2e77d271.png"></figure>Adding a new case page.The new status apply to all the cases in all categories.

System Admin View

SITE RAY Room Settings

Windows Server is a powerful operating system used by organizations to host various services. Ensuring that the server can reach the internet is crucial for downloading application updates, and other essential tasks. This troubleshooting manual will guide you through the process of diagnosing and resolving common issues that may affect the internet reachability of your Windows Server.<h4>Getting Started</h4>Before diving into troubleshooting, ensure you have the following prerequisites:Zone: VM has to be in SSA zone to be able to reach the internet directly.Valid Firewall Rules: Add an outgoing FW rule to the internet on ports 443/80, and port 53 to your DNS.Access: Ensure you have administrative access to the Windows VM.Basic Knowledge: Familiarize yourself with basic networking concepts, DNS, and Windows Server settings.<img src="https://docs.cloud.site.sa/media/Screenshot_2023_08_21_170449_280523f84b.png" alt="Screenshot 2023-08-21 170449.png">&nbsp;<h4>Safety and Security</h4>While performing troubleshooting tasks, always keep safety and security in mind:<ol><li>Backup: Before making any significant changes, back up critical data and configurations.</li><li>Firewall: Be cautious when modifying firewall settings. Ensure you do not compromise security.</li><li>Updates: Ensure your server has the latest updates and security patches.</li><li>Documentation: Document any changes made during troubleshooting for future reference.</li></ol><h4>Troubleshooting Steps</h4><h4>Step 1: DNS Server Configuration</h4>A common reason for internet reachability issues is incorrect DNS server settings. Follow these steps to verify and fix DNS issues:Check DNS Settings:Open "Server Manager." Click on "Local Server" and check the DNS settings under the "NIC Teaming" section. Ensure the DNS server addresses are correct.DNS Resolution: Open Command Prompt with administrative privileges. Use the nslookup command to check DNS resolution. For example:<pre><code class="language-plaintext">nslookup site.sa
</code></pre>If DNS resolution fails, check the DNS server settings and try using alternative DNS servers.<h4>Step 2: Windows Internet Explorer Enhanced Security Configuration (IE ESC)</h4>Internet Explorer Enhanced Security Configuration can prevent access to websites. To disable it:<ol><li>Open Server Manager.</li></ol><img src="https://docs.cloud.site.sa/media/Screenshot_2023_08_17_202456_68f501a016.png" alt="Screenshot 2023-08-17 202456.png"><ol><li>Click on "Local Server".</li></ol><img src="https://docs.cloud.site.sa/media/Screenshot_2023_08_17_202529_189548dc23.png" alt="Screenshot 2023-08-17 202529.png"><ol><li>In the properties pane, locate "IE Enhanced Security Configuration" and click on the "On" link.</li></ol><img src="https://docs.cloud.site.sa/media/Screenshot_2023_08_17_202556_5064211e13.png" alt="Screenshot 2023-08-17 202556.png"><ol><li>Set both "Administrators" and "Users" to "Off".</li></ol><img src="https://docs.cloud.site.sa/media/Screenshot_2023_08_17_202616_364d129900.png" alt="Screenshot 2023-08-17 202616.png"><ol><li>Apply the changes. Restart Internet Explorer or the server if necessary.</li></ol><h4>Step 3: Firewall Settings</h4>Firewall rules can block internet access. Ensure the necessary rules are in place:<ol><li>Open Windows Defender Firewall with Advanced Security.</li><li>Review both inbound and outbound rules to ensure there are no rules blocking internet access.</li><li>If necessary, create a new outbound rule to allow internet access.</li></ol><h4>Step 4: Proxy Server Configuration (if applicable)</h4>If your network uses a proxy server, make sure it's correctly configured on the server:<ol><li>Open Internet Explorer.</li><li>Go to "Tools" &gt; "Internet Options" &gt; "Connections" tab &gt; "LAN Settings".</li><li>Ensure the correct proxy server details are entered.</li></ol><h4>&nbsp;</h4><h4>&nbsp;</h4><h4>Glossary and References</h4>DNS: Domain Name System - A system that translates domain names into IP addresses. nslookup: A command-line tool to query DNS servers for domain name resolution. Firewall: A security system that controls incoming and outgoing network traffic.References:Windows Server Documentation: https://learn.microsoft.com/en-us/windows-serverFAQ about Internet Explorer Enhanced Security Configuration (ESC): https://learn.microsoft.com/en-us/troubleshoot/developer/browsers/security-privacy/enhanced-security-configuration-faq

Troubleshooting Windows VM Internet Connectivity

<h3>Assign a Allocate IP to the VMs:</h3>1- Login to Cloud Portal.2- Dashboard bar menu.3- Click Virtual Machines.<img src="https://docs.cloud.site.sa/media/Virtual_Machines_3c8258f6ab.png" alt="Virtual Machines.png">4- Find and select your VMs.5- Click Network from Virtual Machines.6- Add interface.<img src="https://docs.cloud.site.sa/media/V_Ms_Network_Add_interface_1c48ae4d54.png" alt="VMs-Network-Add interface.png">7- Choose your Network and IP.<img src="https://docs.cloud.site.sa/media/Add_netint_278f752f3b.png" alt="Add netint.png">8- Submit to assign IP in VM NIC.

How to assign IP Virtual Machines?

Supervisor The supervisor performs a supervisory role only, by reviewing the reports and their details. He can also activate/deactivate any user added to the same category that he supervises.Cases list page<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_f0c2cc789f.png"></figure>The supervisor can also assign the case to another case manager of the same category through the list of cases.<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_c4efc63b53.png"></figure>If the case was reported manually a separate list will appear for new reports until it is completed and assigned by the supervisor.<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_1bcee8d49a.png"></figure>Case details&nbsp;The case is divided into three sections1.The Questions and the whistleblowers answers, settings for the case to change the status and some characteristics.2.Timeline of the case (any changes that occur to the case, the system automatically adds them to the timeline)3.The conversations are divided into two parts:a. Conversation between the Whistleblower and the case manager.b. A private conversation between the person making the report and the supervisor (which the whistleblower does not see).<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_7daaf45434.png"></figure>If the case manager is done from the case and change its status to (Closed), the supervisor will approve or reject the closure of the case first to ensure that the case is passed on to more than one person. (principle eye-four).ChatThe conversations is between the whistleblower and the case manager, the supervisor will be able to only view the chat.<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_ade394ac04.png"></figure>Private conversation between the case manager and the supervisor.&nbsp;<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_e1d9b4c9f7.png"></figure>Timeline of the case.<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_71091f2609.png"></figure>&nbsp;

Supervisor View

<h2>Allocate IP and Assign it to VM.</h2>SITE Cloud has 3 types of IP; Private, Public and Shared IP. Each one of them can be assigned to the network interface from the portal.<ul><li>Private IP: can be assign to VM network interface for network communication.</li><li>Public IP: can be assign to VM network interface for internet communication.</li><li>Shared IP: can be assign to VM network interface for communicate with other tenant.</li></ul>Note that Public IP can’t be assigned on HSA zone.<h2>1. Allocate IP.</h2>Before assign any type of IP we need to allocate an available IP first to assign it to VM.First Login to Cloud Portal.From Cloud Portal go to “IPs” tab in Networking.&nbsp;<img src="https://docs.cloud.site.sa/media/1_d8d2eba50c.jpg" alt="image 1">&nbsp;Go to “Allocate”.&nbsp;<img src="https://docs.cloud.site.sa/media/2_fe524064e2.jpg" alt="2.jpg">&nbsp;Fill up the required fields. Tenant, Business Group, Region and IP Type. Then chose the Network subnet that you want to allocate the IP from. Then select the IP.&nbsp;<h4><img src="https://docs.cloud.site.sa/media/3_d5b4ef461b.jpg" alt="3.jpg"></h4>&nbsp;Now you can assign the IP to the VM.&nbsp;<h2>2. Assigning IP to the VM.</h2>From “Compute” go to “Virtual Machines”.&nbsp;Search for your VM using VM ID.&nbsp;<img src="https://docs.cloud.site.sa/media/4_602c71bbf6.jpg" alt="4.jpg">&nbsp;Go to “Networks” and hover on the network adapter that the IP will be assigned to.&nbsp;<img src="https://docs.cloud.site.sa/media/5_ead4647bfb.jpg" alt="5.jpg">&nbsp;&nbsp;Note If the interface (Network adapter) is not shown you can add new interface from “Add interface”Go to “Manage IPs” button and you can find the IP, assign it to the VM private, public or shared IP as you need.&nbsp;&nbsp;<img src="https://docs.cloud.site.sa/media/6_bec0998444.jpg" alt="6.jpg">&nbsp;You can also find Unassign option from “Manage IPs” button.

Allocate IP and Assign IPs to VM.

The role of the case manager in the system is to process the cases and communicate directly with the whistleblower, In the presence of a new case, the system assigns the case automatically via the “robin-round” feature.&nbsp;Cases list page:<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_50a15c9288.png"></figure>Case detailsThe case is divided into three sections1.The Questions and the whistleblowers answers, settings for the case to change the status and some characteristics.2.Timeline of the case (any changes that occur to the case, the system automatically adds them to the timeline)3.The conversations are divided into two parts:a. Conversation between the Whistleblower and the case manager.b. A private conversation between the person making the report and the supervisor (which the whistleblower does not see).<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_0de9b704d9.png"></figure>Case settings&nbsp;The case manager updates the following:&nbsp;&nbsp;is divided into three sections1.Case status2.Case substantiation (Substantiated, partially substantiated, Unsubstantiated)3.Case priority (High, Medium, Low)4.Case tag<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_25911d6a38.png"></figure>&nbsp;Conversation1.Between whistleblower and case manager2.Between case manager and supervisor<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_534f298fde.png"></figure>&nbsp;<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_ec8f49eecf.png"></figure>Case TimeLine

Case Manager View

A load balancer is a crucial component in distributing incoming network traffic across multiple servers or resources to ensure efficient utilization, maximize availability, and enhance the overall performance of your applications. This guide will walk you through the steps to create a load balancer.On the **Cloud Portal ** dashboard, navigate to the left sidebar and choose Load Balancers from the available options<img src="https://docs.cloud.site.sa/media/LB_frist_Steps_7211b40df6.png" alt="Create LB ">navigate to the Right sidebar and press Create<img src="https://docs.cloud.site.sa/media/2nd_step_e199f79466.png" alt="2nd step.png">Enter the load balancer's Name and provide a description for reference.<img src="https://docs.cloud.site.sa/media/LB_creation2_3d74c7559c.png" alt="LB_creation2.png">Business Group: Choose the Business Group for your application.Environment : Choose VDC.Pool Member: Include your servers as members of the pool.Ports :Pool Members Port: These are the ports that are being listened to.Load Balancer Port: This is the port that will be used for the load balancer.

Create Load Balancer

The observer role is to only observe without taking any action on the dashboard page or cases.DashboardThe dashboard gives the user an overview of the number of cases in the system and the case status.<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_78ca79f7bb.png"></figure>Case list&nbsp;The observer will only be able to observe on all cases :1.The Questions and the whistleblowers answers2.Timeline of the case (any changes that occur to the case, the system automatically adds them to the timeline)3.The conversations&nbsp;Export cases.<figure class="image image-style-align-left image_resized" style="width:50%;"><img src="/uploads/image_414b552a05.png"></figure>&nbsp;

Observer View

<h2>SSL Overview</h2>&nbsp;also known as a Secure Sockets Layer profile, is a configuration that governs the secure transmission of data over the internet. By providing a secure and encrypted connection between users and websites, SSL profiles safeguard sensitive information from potential threats.&nbsp;<h2>Create SSL profile&nbsp;</h2>&nbsp;&nbsp;Go to the Load Balancers page.<img src="https://docs.cloud.site.sa/media/SSL_1_3cd43981bd.jpg" alt="Create ssl">Click Certificates on the right-hand side.<img src="https://docs.cloud.site.sa/media/cert_7e7dae8cee.jpg" alt="cert.jpg">Click Create SSL Profile.<img src="https://docs.cloud.site.sa/media/sslprofile_2788083081.jpg" alt="Create ssl">In the Business Group (BG) field, select the business group for the load balancer. In the Environment field, select the VPC of the load balancer. In the Name field, enter a name for the** SSL profile**. In the Public Key field, paste the public key for the SSL certificate. In the Private Key field, paste the private key for the SSL certificate. Click Submit.Go to the load balancer's settings and apply the SSL profile.<img src="https://docs.cloud.site.sa/media/applyssl_1261cf47a8.jpg" alt="applyssl.jpg">

SSL Profile - Guide

<h3>What are Firewall Rules?</h3>Firewall rules or Firewall policies are an access control mechanism that examines information in individual packets, and enforces security in networks by either blocking or allowing communication based on a set of rules or predetermined criteria.In My Cloud Portal, these predetermined criteria or rule components include the following:<ul><li>Direction.</li><li>Policy Type.</li><li>Sources.</li><li>Destinations.</li><li>Services.</li><li>Description (Optional).</li></ul>We will explore each component, and go through the different use cases for Firewall Rules.<h3>Firewall Rules - View:</h3>To view the existing Firewall Rules of a certain Virtual Machine (VM):<ol><li>Navigate to the Virtual Machines tab in Compute section (upper left corner).</li></ol><img src="https://docs.cloud.site.sa/media/V_Ms_1_3a0c39d2b9.png" alt="Error while showing the image."><ol><li>Search for the VM by typing the VM ID or VM IP in Search Box.</li></ol><img src="https://docs.cloud.site.sa/media/V_Ms_Search_5f4d13e181.png" alt="Error while showing the image."><ol><li>Click on the VM, and you will be able to view existing Firewall Rules in Firewall Rules tab.</li></ol><img src="https://docs.cloud.site.sa/media/V_Ms_Name_42c9e7104d.png" alt="Error while showing the image.">If you would like to view and search all Firewall Rules across your environments, navigate to Firewall Rules tab in Networking Section.<img src="https://docs.cloud.site.sa/media/Firewall_rules_tab_882aa22bb0.png" alt="Error while showing the image."><h3>Firewall Rules - Add:</h3>Firewall Rules are added in the Firewall Rules tab on the Virtual Machine (VM) page, or the Load Balancer (LB) page.<img src="https://docs.cloud.site.sa/media/Firewall_Rule_details_prompt_8d79cc1c35.bmp" alt="Error while showing the image.">And this brings us to the components of the Firewall Rule.<h4>Direction:</h4>The Direction of the Firewall Rule is to specify the traffic direction ON the VM/LB you are adding the Firewall Rule on, it can either be:<ul><li>Incoming to the VM/LB.</li><li>Outgoing from the VM (LBs do not have an Outgoing interface).</li></ul>If you are wondering where to add the Firewall rule, below points will guide you:<ul><li>Add the Firewall Rule in Destination (Incoming): When the destination is in SITE Cloud.</li><li>Add the Firewall Rule in Source (Outgoing): When the destination is either:</li></ul><ol><li>NOT in SITE Cloud. Example: (INTERNET, or MAN/on-premise)</li><li>NOT in the same environment. Example: (Source in Riyadh Environment, and Destination in Jeddah Environment).</li></ol><img src="https://docs.cloud.site.sa/media/Direction_abfb3d6b27.bmp" alt="Error while showing the image."><h4>Policy Type:</h4>The firewall policy type specifies the zone of the source, and the zone of the destination. These zones can be one of the following:INTERNET (NET): Public IP on the internet, outside SITE Cloud. (Access from the internet, or to the internet is conditional, ONLY if the VM/LB is in SSA zone AND has a Public IP assigned to it)On-Premises (ON-PREM/MAN): Private IP, MAN connection in your on-premises network OR a VM/LB in different environment.High Security Assurance (HSA): Private IP, Virtual Machine or Load Balancer in SITE Cloud. (the workloads in HSA zone are by default severely restricted (or practically forbidden) from direct communications with random external systems. There are stricter rules for onboarding and operating these workloads).Standard Security Assurance (SSA): Private IP, Virtual Machine or Load Balancer in SITE Cloud. (SSA zone hosts workloads of lower sensitivity or higher vulnerability. These workloads are allowed to connect directly to and from the Internet with appropriate controls. There is more flexibility in the configuration/security requirements for these workloads).Below is an example of the HSA policy type options for Incoming, notice all options have HSA as destination (-&gt;HSA):<img src="https://docs.cloud.site.sa/media/Policy_Type_HSA_8d9b31204a.bmp" alt="Error while showing the image.">Below is an example of the SSA policy type options for Incoming, notice (INTERNET-&gt;SSA) option is available, only because the VM has a public IP, otherwise it is not available:<img src="https://docs.cloud.site.sa/media/Policy_Type_SSA_3276d80a3a.bmp" alt="Error while showing the image."><h4>Sources:</h4>The firewall rule's Source specifies where the traffic is coming from, and it should match the source type chosen in the Policy Type as explained earlier. in the Sources field, a single or multiple valid IPs, subnets, or virtual machines must be entered.<img src="https://docs.cloud.site.sa/media/firewall_Rule_Sources_8a426a05ab.png" alt="Error while showing the image."><h4>Destinations:</h4>The firewall rule's Destination specifies where the traffic is going to. In the Destinations field, a single or multiple valid IPs, or subnet must be entered. To know where to add the Firewall rule, please refer to the Direction section.<img src="https://docs.cloud.site.sa/media/firewall_Rule_Destinations_bd5f0b145c.png" alt="Error while showing the image."><h4>Services:</h4>The firewall rule Services use one or more ports, protocol types (TCP, UDP, or ICMP) for the required communication.<img src="https://docs.cloud.site.sa/media/firewall_Rule_Services_517c419e42.png" alt="Error while showing the image."><h4>Description (Optional):</h4>In the Description field, it is preferable to type a short description of the firewall rule for future reference. For example specifying the use of the firewall rule. However, this field is optional.<img src="https://docs.cloud.site.sa/media/firewall_Rule_Description_4609e31f9f.png" alt="Error while showing the image."><h3>Firewall Rules - Edit:</h3>To edit an existing Firewall rule, click on the edit Icon on the far right.<img src="https://docs.cloud.site.sa/media/firewall_Rule_Edit_cef1f35a34.png" alt="Error while showing the image."><h3>Firewall Rules - Delete:</h3>To delete an existing Firewall rule, click on the delete Icon on the far right.<img src="https://docs.cloud.site.sa/media/firewall_Rule_Delete_a30f80ab3e.png" alt="Error while showing the image.">

Firewall Rules (View, Create, Edit, and Delete)

In SITE, we ensuring the availability of everything the customer needs. so we allow the customer to export all the firewall rules.To export firewall rules you should to do these steps below:1- Sign in to my.cloud.site.sa2- From the options under Networking chose Firewall Rules.<img src="https://docs.cloud.site.sa/media/Capture11_a8f9aaa66f.jpg" alt="Capture11.jpg">3- You can filter now so you can chose which Business group, resource type (Private IP/ Load balancers / environment), Direction (Incoming / outgoing), and Policy type. <img src="https://docs.cloud.site.sa/media/Capture2222_8efe7eb49f.JPG" alt="Capture2222.JPG">4- Now from this option you can export it.<img src="https://docs.cloud.site.sa/media/33_4756620470.jpg" alt="33.jpg">

How to export firewall Rules

First we will start with the rule generator.&nbsp;<h4>What is Rule Generator?</h4>As the name implies, it is a tool used to generate firewall rules. This tool can help with generating firewall rules, and applying them with the help of Bulk Actions.&nbsp;<figure class="image image-style-align-left"><img src="/uploads/image_7b612ca354.png"></figure><h4>&nbsp;</h4><h4>How to use Rule Generator?</h4>The process of using the rule generator is straightforward. As shown below, there are many fields that need to be filled in the correct order.<figure class="image"><img src="/uploads/image_0c07501c0d.png"></figure>We will go over the fields in the correct order below:<ol style="list-style-type:decimal;"><li>Tenant: Choose the required tenant.</li><li>Environment: Choose the required environments (if applicable)</li><li>Policy Type: This will determine the direction of the policies and the zones (SSA, HSA, MAN. INET)</li><li>Source Subnet: The source subnets or IPs. You can add multiple IPs by separating them with commas.</li><li>Source Nodes: This option might be greyed out depending on the policy type (only required for nodes within SITE Cloud)</li><li>Destination Subnet: The destination subnets or IPs. You can add multiple IPs by separating them with commas.</li><li>Destination Nodes: This option might be greyed out depending on the policy type (only required for nodes within SITE Cloud)</li><li>Services: Add the required services or ports. You can choose from the dropdown list, or add your own ports.<ol><li>TCP Ports: tcp/xxx</li><li>UDP Ports: udp/xxx</li></ol></li><li>Description (Optional): You can add a description for additional clarification.</li></ol>&nbsp;For more information on firewall rules, you can refer to the following guide <a href="https://docs.cloud.site.sa/MyCloudPortal/firewall-rules" target="_blank" rel="noopener noreferrer">https://docs.cloud.site.sa/MyCloudPortal/firewall-rules</a>&nbsp;Once the required fields are filled, the generated rules will appear in the bottom text box, and you can use the copy button on top right corner to copy the generated rules.<figure class="image"><img src="/uploads/rule_gen_d5667ef272.png"></figure>Once the newly generated rules are copied, they can be applied using Bulk Actions.&nbsp;&nbsp;<h4>What is Bulk Actions?</h4>Bulk actions is a tool used to create or make changes in bulk.The actions that can be done include, but are not limited to: Creating VMs, Rebooting VMs, Creating firewall rules, and more.&nbsp;<figure class="image image-style-align-left"><img src="/uploads/image_238bd2a41b.png"></figure>&nbsp;For this case, we will use the bulk actions to apply firewall rules that were generated using Rule Generator.&nbsp;<figure class="image"><img src="/uploads/image_f7eca33e7d.png"></figure>&nbsp;From the dropdown menu, you can choose the “Create Firewall Rule” option.After that, you can paste the previously copied rules from rule generator, and click on the “Submit” button.Shortly after, you will see the firewall rule requests appear in the “Request List”.

Firewall Rule Generator & Bulk Actions

Block storage is technology that controls data storage and storage devices. It takes any data and divides it into blocks of equal sizes. The block storage system then stores the data block on underlying physical storage in a manner that is optimized for fast access and retrieval. Developers prefer block storage for applications that require efficient, fast, and reliable data access.&nbsp;in order to start with Block Storage (S3)&nbsp;1- Go to Block Storage (S3) under Storage category<img class="image-style-align-right" src="/uploads/image_cf9ae0c01d.png">&nbsp;2- Click Create Bucket Button&nbsp;3- Fill the form and select a unique bucket name in order to connect with the bucket in later stages&nbsp;4- Open the firewall rules as suggested in the warning message that will appear after filling the form.&nbsp;&nbsp;5- Check the table inside Block Storage (S3) and find your record<img class="image-style-align-right" src="/uploads/image_d7390b1309.png">&nbsp;6- Create an access key from the record actions menu using Manage Keys action <img class="image-style-align-right" src="/uploads/image_78627ecc39.png">&nbsp;6- and now you can connect to it using the URL and the generated key in the previous step<img class="image-style-align-right image_resized" style="width:23.73%;" src="/uploads/image_c671c1951d.png">

Block Storage (S3)

<h3>Introduction</h3>This guide provides installation and configuration instructions for check and validate EDR and EPP visibility.Please note that any VM created on SITE’s community cloud is auto provisioned with an EPP &amp; EDR Agent installed by default. These agents secure endpoints with a multi-method prevention approach that blocks known and unknown malware and exploits before they compromise endpoints and help us with ongoing monitoring of endpoints and network events and recording of the information in a database where further analysis, detection, investigation, reporting and alerting take place.<h3>Check EDR &amp; EPP Status</h3>In order to check current status of EDR and EPP agents you may access SITE Cloud portal and navigate to: Virtual Machines tab as screenshot below and check the current EDR &amp; EPP status.<img src="https://docs.cloud.site.sa/media/SITE_Cloud_EDR_EPP_6a30275392.png" alt="SITE Cloud EDR EPP.png">Status details:- ON: The agent is up and run normally.- OFF: Either Machine is off or agent service is off.- Not Installed: Agent has not been installed or removed.<h3>How to Install EDR/EPP</h3>In order to install EDR/EPP agents, Click on the machine tab, then select the virtual machine which has a limited visibility, the click on "Not installed" and follow the steps to install EDR/EPP on your machine, as shown in the screenshot below.<img src="https://docs.cloud.site.sa/media/Server_Selection_a08b93d5a8.PNG" alt="Server Selection.PNG">After Selection of the server, click on "Not installed", follow the steps to install agents for both EDR and EPP.<img src="https://docs.cloud.site.sa/media/Server_details_0a8b9df39f.PNG" alt="Server details.PNG">Steps samples for installing EPP Agent:<img src="https://docs.cloud.site.sa/media/Install_EPP_Manual_dd_6b02592184.PNG" alt="Install EPP Manual dd.PNG">Steps samples for installing EDR Agent<img src="https://docs.cloud.site.sa/media/Install_EPP_Manual_922625c4db.PNG" alt="Install EPP Manual.PNG">

EDR & EPP Installation and configuration guide 

WAF stands for "Web Application Firewall." It's a security technology designed to protect web applications from a variety of online threats, such as SQL injection, cross-site scripting (XSS), and other malicious activities, helping to secure websites and web applications against cyberattacks.In order to detect and reduce potential security concerns, a WAF functions as a protective barrier between a web application and its users by filtering and monitoring incoming traffic. It functions through analyzing user-to-web application data exchanges to identify patterns and anomalies that could indicate an attack. The WAF can then take proactive steps to neutralize malicious traffic by blocking it, redirecting it, or otherwise by doing this while still allowing legitimate traffic to pass through.<img src="https://docs.cloud.site.sa/media/waf1_7d0e57c562.png" alt="waf1.png">1. Enforcement Mode: ensures that the WAF provides active protection against known threats and attacks, immediately blocking or mitigating malicious traffic. It is essential for maintaining the security and integrity of the web application.<ul><li>Blocking describes the action taken by the WAF to prevent potentially malicious requests from reaching the web application.</li><li>Transparent refers to a deployment mode where the WAF operates without modifying the communication flow between users and the web application.</li></ul>2. Learning Mode: helps the WAF improve its accuracy by allowing it to adapt to the specific behavior of the web application and its users. This mode helps reduce the risk of blocking legitimate traffic and enhances the overall performance of the WAF.Manual Learning Mode:<ul><li>Human Involvement: Requires human administrators to review and adjust security rules.</li><li>Effort and Expertise: Needs security expertise and time for analysis and rule refinement.</li><li>Rule Control: Administrators have direct control over rule adjustments.</li><li>Adaptation: Slower to adapt to changing traffic patterns.</li><li>Accuracy: Highly dependent on the administrator's ability to identify patterns.</li></ul>Automatic Learning Mode:<ul><li>Automated Process: Relies on machine learning algorithms and automation.</li><li>Effort and Expertise: Reduces the need for manual configuration and management.</li><li>Rule Control: Adjusts rules automatically based on machine learning insights.</li><li>Adaptation: Faster at adapting to changing traffic patterns.</li><li>Accuracy: Depends on the quality of machine learning algorithms and data.</li></ul>Choose based on expertise, desired control, and adaptation speed. After creating the policy, you can assign it to the desired load balancer as shown in the below picture.<img src="https://docs.cloud.site.sa/media/waf2_34d3220ddd.png" alt="waf2.png">

Creating a WAF Policy

<h2>1. Introduction</h2>&nbsp;<h3 style="margin-left:0px;">1.1 Purpose</h3>This manual provides guidance on designing a 3-tier architecture application with a Load Balancer (LB), a Web Application Firewall (WAF), an SSL Termination Zone, an Application VMs zone, and a DB VMs zone. A 3-tier architecture is a widely adopted approach for building scalable and secure web applications. This manual will help you understand the concepts and steps required to design and implement such an architecture in SITE Cloud.<h3 style="margin-left:0px;">1.2 Target Audience</h3>This manual is intended for SITE Cloud users including system architects, network administrators, and developers who want to design a robust and scalable architecture for their web applications.<h3 style="margin-left:0px;">1.3 Scope</h3>This manual covers the design considerations and best practices for each tier of the 3-tier architecture:<ul><li>Tier 1: Load Balancer, Web Application Firewall, and SSL Termination Zone.</li><li>Tier 2: Application VMs Zone.</li><li>Tier 3: Database VMs Zone.</li></ul>&nbsp;<h2>2. Getting Started</h2>&nbsp;<h3 style="margin-left:0px;">2.1 Design</h3><figure class="image"><img src="/uploads/3_Tier_Architecture_2_3fe8c0ecbd.png"></figure><h3 style="margin-left:0px;">2.1.1 Tier 1: LB + WAF + SSL Termination Zone</h3><h4 style="margin-left:0px;">2.1.1.1 Load Balancer (LB)</h4><ul><li>Configure the load balancer to distribute incoming traffic evenly among application servers in Tier 2.</li><li>Ensure high availability and scalability by setting up multiple application servers.</li><li>Regularly monitor and adjust load balancing methods based on traffic patterns.</li></ul><h4 style="margin-left:0px;">2.1.1.2 Web Application Firewall (WAF)</h4><ul><li>WAF protects against common web application vulnerabilities.</li><li>Configure WAF rules to filter and protect against malicious requests (Learning -&gt; Blocking).</li><li>Continuously update WAF rules to adapt to emerging threats.</li><li>Integrate WAF with your monitoring and alerting system to detect and respond to security incidents.</li></ul><h4 style="margin-left:0px;">2.1.1.3 SSL Termination</h4><ul><li>Implement SSL termination at this tier to offload SSL/TLS encryption and decryption from application servers in Tier 2.</li><li>Use a trusted SSL certificate for securing communication between clients and the load balancer.</li><li>Regularly update SSL certificates to ensure security and compliance.</li><li>Configure SSL policies to enforce encryption standards and security best practices.</li></ul><h3>2.1.2 Tier 2: Application VMs zone</h3><h4>2.1.2.1 Application VMs zone</h4><ul><li>This zone hosts the application logic, business logic, and presentation layers of the system.</li><li>It is responsible for processing user requests, executing application-specific tasks, and generating responses.</li><li>Application VMs, middleware, web servers, and other necessary software components reside within this zone.</li><li>It contains the codebase responsible for implementing the business logic and serving user interfaces.</li><li>Communicates with the database servers (in the DB VMs zone) to retrieve, manipulate, and store data required by the application.</li><li>Handles client requests, processes data, and interacts with other components in the architecture.</li><li>Scalability is a critical factor in this zone, as it directly affects the application's responsiveness to user requests.</li><li>Horizontal scaling (adding more application server instances) is commonly employed to handle increased traffic.</li></ul><h3>2.1.3 Tier 3: DB VMs zone</h3>2.1.2.1 DB VMs zone<ul><li>This zone is dedicated to hosting the database management systems (DBMS) and storing the application's data.</li><li>It manages, stores, retrieves, and manipulates data based on requests received from the application servers.</li><li>Database servers, database management systems (e.g., MySQL, PostgreSQL, MongoDB), and related software are deployed in this zone.</li><li>Stores structured or unstructured data required by the application, such as user information, transaction records, configurations, etc.</li><li>Receives and responds to queries from the application servers, providing the requested data or performing necessary operations.</li><li>Scalability in this zone involves optimizing database performance, ensuring efficient query execution, and managing data storage requirements.</li><li>Vertical scaling (increasing resources like CPU, memory, or storage) or employing techniques like sharding and replication may be used to scale databases.</li></ul>&nbsp;<h3>2.2 Implementation</h3>2.2.1 Create your BG.<figure class="image image-style-align-center"><img src="/uploads/Screenshot_2023_08_13_203055_3f2eb9884c.png"></figure>2.2.2 Enable envirenmet access for the BG.<figure class="image image-style-align-center"><img src="/uploads/Screenshot_2023_08_13_203300_2d9a627d44.png"></figure>2.2.3 Create your subnets.<ul style="list-style-type:circle;"><li>Navigate to the subnets page, and find the BG you’re working on. We’re going to create 2 subnets.</li><li>SSA Subnet</li></ul><figure class="image image-style-align-center"><img src="/uploads/Screenshot_2023_08_13_203829_11aaca5e3c.png"></figure><ul style="list-style-type:circle;"><li>HSA Subnet</li></ul><figure class="image image-style-align-center"><img src="/uploads/Screenshot_2023_08_13_204658_903be07bae.png"></figure>2.2.4 Create your VMs.App VMs will be placed on SSA zone and DB VMs will be placed on HSA zone.<figure class="image image-style-align-center"><img src="/uploads/Screenshot_2023_08_13_205029_f530a50b7a.png"></figure><figure class="image image-style-align-center"><img src="/uploads/Screenshot_2023_08_15_093500_3abe2d8e5a.png"></figure>2.2.5 Allocate VIP to DB cluster.<figure class="image image-style-align-center"><img src="/uploads/Capture34_ea9f04f6c4.PNG"></figure>2.2.6 Create the needed firewall rules between VMs.<ul style="list-style-type:circle;"><li>Due to the zero-trust policy, you will need to open the needed ports between your VMs.</li><li>App-to-App SSA-to-SSA.</li></ul><figure class="image image-style-align-center"><img src="/uploads/Capturesss_477c907757.PNG"></figure><ul style="list-style-type:circle;"><li>App-to-DB SSA-to-HSA.</li></ul><figure class="image image-style-align-center"><img src="/uploads/Capturessssss_00f48c3c74.PNG"></figure>2.2.7 Create a WAF profile.<figure class="image image-style-align-center"><img src="/uploads/Capture_32e4851065.PNG"></figure>2.2.8 Create an SSL profile.<figure class="image image-style-align-center"><img src="/uploads/Capture2_dc81f9d901.PNG"></figure>2.2.9 Create LB and Assign WAF profile.<figure class="image image-style-align-center"><img src="/uploads/Captuddddddresscccssss_b8e7e54dcd.PNG"></figure>2.2.10 Assign SSL profile.<figure class="image image-style-align-center"><img src="/uploads/Captuddssss_82f47bd575.PNG"></figure>2.2.11 Allocate Public IP to the BG.<figure class="image image-style-align-center"><img src="/uploads/Capture4444_ca866a931a.PNG"></figure>2.2.12 Assign public IP to LB.<figure class="image image-style-align-center"><img src="/uploads/Captuddddresscccssss_7c4a4bbc37.PNG"></figure>2.2.13 Publish the application.<figure class="image image-style-align-center"><img src="/uploads/Capturesscccssss_bec0ea6eed.PNG"></figure><h2>3. Safety and Security</h2><h3>&nbsp;</h3><h3>3.1 Safety and Security</h3><ul><li>Implement access controls to restrict who can configure and manage your tenant.</li><li>Regularly update the app software to patch security vulnerabilities.</li><li>Enable logging and monitoring and forward it to SITE SIEM to detect and respond to unusual activities or potential attacks.</li><li>Ensure that SSL certificates are obtained from a reputable Certificate Authority (CA).</li><li>Implement strong encryption ciphers and protocols to secure data in transit.</li><li>Periodically review SSL configuration to maintain compliance with security standards.</li><li>Monitor SSL/TLS vulnerabilities and apply patches promptly.</li></ul>&nbsp;<h2>4. Glossary and References</h2>&nbsp;<h3 style="margin-left:0px;">4.1 Glossary</h3><ul><li>Load Balancer (LB): A product that distributes network traffic across multiple servers to ensure high availability and optimal performance.</li><li>Web Application Firewall (WAF): A security solution that protects web applications from various cyber threats and vulnerabilities.</li><li>SSL Termination: The process of decrypting SSL/TLS-encrypted traffic at a specific point in a network, often at the load balancer, before forwarding it to the application servers.</li><li>SSL Certificate: A digital certificate that verifies the authenticity of a website and encrypts data transmitted between the client and the server.</li></ul>&nbsp;

Design & Implement a 3-Tier Architecture Application - Zero to Hero in SITE Cloud

SITE PAM Access is an innovative solution that empowers our clients and partners to efficiently and securely access their virtual environments hosted on SITE Cloud while maintaining control and visibility over their systems, data, and workloads.<h4>SITE Cloud Access Service Features</h4>The SITE Cloud Access Service introduces a range of powerful features designed to streamline your virtual environment access:Rapid Deployment Get up and running in no time with our easy-to-deploy solution.Multi-layered Security Design Safeguard your virtual environment with our comprehensive security framework.Multi-Factor Authentication (MFA) Enhance security with multiple authentication layers.Single HTTPS Entry Point Reduce potential attack surfaces with a single, secure point of entry.Session Monitoring Keep track of user sessions for heightened security and control.Native RDP and SSH Access Controls Manage remote desktop and secure shell access with ease.Compliance-Ready Audit Trails Meet regulatory requirements with automatically generated, unalterable audit logs.Integration with SITE MDR Technology Stack Seamlessly integrate with our advanced Managed Detection and Response solutions.Overall, SITE Access plays a critical role in safeguarding your organization and most sensitive assets by enforcing strict controls, accountability, and monitoring over privileged access, thereby reducing the attack surface and enhancing overall cybersecurity posture.<h4>Guided Steps for using SITE PAM Access:</h4>1- Open the Cloud Access Portal through the link https://access.cloud.site.sa2- Sign in using the credentials provided by SITE.<img src="https://docs.cloud.site.sa/media/Credintals_a246de5f6b.PNG" alt="Credintals.PNG">3- Place the MFA code into the sign-in page.<img src="https://docs.cloud.site.sa/media/MFA_Code_81477054a8.PNG" alt="MFA Code.PNG">4- After you sign in, you can access the PAM that appears in the portal.<img src="https://docs.cloud.site.sa/media/PA_Min_Portal_4b2f851d9a.PNG" alt="PAMinPortal.PNG">5- Download the RDP configuration to start accessing the service.<img src="https://docs.cloud.site.sa/media/RDP_749878ffb1.PNG" alt="RDP.PNG">6- Run the downloaded RDP file and use the same credentials in step 2. Keep the “Target” field empty.<img src="https://docs.cloud.site.sa/media/RDP_Credintals_3a20182b16.PNG" alt="RDPCredintals.PNG">7- The available/assigned Jump server will appear in the portal if you have more than one jump servers.<img src="https://docs.cloud.site.sa/media/Available_jump_servers_cd771770f6.PNG" alt="Available jump servers.PNG">8- After selecting a jump server you will have to authenticate either local or using your corporate credentials if it authenticates with client/your AD.<img src="https://docs.cloud.site.sa/media/AD_credintals_dfb0514012.PNG" alt="AD credintals.PNG"> &nbsp;

SITE PAM Access

To generate a Certificate Signing Request (CSR) via a MMC certificate snap-in using Microsoft Windows, perform the following steps. 1- From Microsoft Windows, click Start.&nbsp;2- In the Search programs and files field, type mmc.&nbsp;3- Click File &gt; Add/Remove Snap-in.&nbsp;4- From the list of available snap-ins, select Certificates.&nbsp;5- Click Add.&nbsp;6- Select Computer account.&nbsp;7- Click Next.&nbsp;8- Select Local computer (the computer this console is running on).&nbsp;9- Click Finish.&nbsp;10- In the Add/Remove Snap-in window, click OK.&nbsp;11- Save these console settings for future use.&nbsp;12- Access your MMC snap in &gt; right click the Personal folder. 13- Select All Tasks &gt; Advanced Operations &gt; Create Custom Request.<img src="https://docs.cloud.site.sa/media/1_28fc1c5bfa.PNG" alt="1.PNG">14- The CSR generation wizard will open &gt; Click Next.<img src="https://docs.cloud.site.sa/media/2_0e2d8c500a.PNG" alt="2.PNG">15- Select the option to Proceed without enrollment policy &gt; Click Next.<img src="https://docs.cloud.site.sa/media/3_98802d3baf.PNG" alt="3.PNG">16- Click Next at the PKCS # 10 window.<img src="https://docs.cloud.site.sa/media/4_b97d3f4743.PNG" alt="4.PNG">17- From the Details drop down menu &gt; Click Properties.<img src="https://docs.cloud.site.sa/media/5_f500e45af9.PNG" alt="5.PNG">18- Enter a Friendly Name of your choosing.19- Access the Subject tab &gt; in the Subject name: Type: field add the following distinguish name values required for your CSR (CN, O, S, L and C).Example: CN = Common Name: The registered organizational name that the certificate will be issued to and secure. *.OrganizationName.sa O = Organization: The registered organizational name the certificate belongs to. Ex: Saudi Information Technology Company S = State: The business registered state or province. Do not abbreviate the state or province name, for example: California not CA. Ex: Riyadh L = Locality: The business registered location/city (not the actual server location). Ex: Riyadh C = Country/region: The two letter ISO country code. Ex: SA<img src="https://docs.cloud.site.sa/media/6_4075e4c4c1.PNG" alt="6.PNG">20- Click the Private Key tab &gt; click the drop down for Key options &gt; select Key size: 2048 and check the option to Make private key exportable &gt; Click OK.21- Click the drop down for Select Hash Algorithm, under Hash Algorithm select sha256 &gt; Click OK.<img src="https://docs.cloud.site.sa/media/7_bcac20779e.PNG" alt="7.PNG">22- Click Next &gt; Click Browse.<img src="https://docs.cloud.site.sa/media/8_e9062b95d7.PNG" alt="8.PNG">23- Select a location to save the CSR file. Enter a name for the file and click Save.<img src="https://docs.cloud.site.sa/media/9_779697f1fe.PNG" alt="9.PNG">24- Click Finish.<img src="https://docs.cloud.site.sa/media/11_d18056904c.PNG" alt="11.PNG">25- The CSR file will be present at the location you saved and can be used to request a Code Signing or Client (S/MIME) certificate.

Generate CSR In Windows

Fileshare is a Secure platform which end-users are able to share important files between other users or groups, where each user will have its own personal storage to manage freely. There're Multiple features the End-user can use to Share their data to other users, whether the recipients are from inside the firm or out.This guide will take you to understand how can the End-user utilize each feature there's to be able to use the platform to its fullest.<h3>Disclaimers</h3>SITE deploys the file share service with industry-leading known security mechanisms. The client and all of its users acknowledge and understand that File Share service (“the Service” or “the Platform”) is accessible from the Internet as is, with all the inherent risks. SITE makes no warranty that any information, software, files, or other materials uploaded to and downloaded from File Share are free from viruses, Trojan horses, or other harmful components. Users are solely responsible for the security, including but not limited to password protection, and encryption of any SECRET and TOP SECRET files in accordance with relevant regulations, controls, and standards including the National Cryptographic Standards (NCS) issued by NCA, prior to uploading them to the platform, and application of all necessary security measures to protect their data. SITE shall not be liable for any security breaches, data loss, damage, or compromise of data resulting from users’ failure to adequately encrypt files or to take any other required security measures. By using our file share service, the clients and all of its users acknowledge and agree to assume all the risks inherent in the public use of a file share service.&nbsp;<hr><h3>Get started</h3>End-user should first start by clicking on the Plus symbol "+", the end-user will be presented with multiple options:<ol><li>Uploading File</li><li>New Folder</li><li>New text document</li></ol>to organize the end-user's files and make them more secure &amp; easier to manage, Folders are very important in this matter,<img src="https://docs.cloud.site.sa/media/Create_Folder_Pic_1_9503651a47.jpg" alt="Create Folder - Pic 1.jpg"><hr><h3>Share Folder &amp; Permission Management</h3><ul><li>after creating a folder, to see its sharing options, click on the Sharing symbol corresponding on the newly created folder.</li><li>There, the user will find multiple option to share the folder (internally, external links, internal links, etc.) this guide will look at them one by one to see each's capabilities. Starting with External links:</li></ul><h4>Eternal link</h4>By clicking on the plus symbol, prior to generating a link, the system will ask you to enter a password (12 char or more). This password will be used to protect the link with it, and to be shared with the authorized recipients ( should be shared in a separate channel ). After creating the link, the user can find a clipboard symbol, click on it to copy the link to the user's clipboard.<figure class="image image-style-align-center"><img src="https://docs.cloud.site.sa/media/External_links_Pic_1_6da128adc2.jpg" alt="External links - Pic 1.jpg"></figure>_____________________________________________________________________________________________<figure class="image image-style-align-center"><img src="https://docs.cloud.site.sa/media/External_links_Pic_2_jpg_cef4086843.png" alt="External links - Pic 2.jpg.png"></figure>_____________________________________________________________________________________________<figure class="image image-style-align-center"><img src="https://docs.cloud.site.sa/media/External_linkx_Pic_3_a9ae9b3f31.png" alt="External linkx - Pic 3.png"></figure>along with the clipboard symbols, there will be a three dots (...) symbol that can be used to manage the privileges of the newly created link:&nbsp;<ul><li>Read Only: They can see the files and download them without deleting the original file/s in the folder</li><li>Allow upload and editing: They can upload, add, edit, and/or delete files in this particular folder</li><li>File drop: They will not see the folder not delete the existing files. They can only upload with no control.</li><li>Custom permissions: You can apply your custom permissions the way you exactly want it to be.</li><li>Hide download: Regardless on the above options, they cannot download the files in the folder once this option selected.</li><li>Password: You will be able to change the password if you lost it.  passwords cannot be viewed once it’s applied, make sure to save it in another place before applying it.</li><li>Set expiration date: The link will be deleted, meaning the link will expire, but the files will be untouched.&nbsp;<ul><li>the least amount of time for the link to expire is one day, you cannot set up less than that.</li></ul></li><li>Note to recipient: This will show a message in the upper-right corner for your clients.</li><li>Delete share link: After you are done with the link, you can delete it manually</li><li>Add another link: You can create multiple links for the same folder/file, and share it to different people (Each link will have its own restrictions and options).</li></ul><figure class="image image-style-align-center"><img src="https://docs.cloud.site.sa/media/External_links_Pic_4_0632a163f1.png" alt="External links - Pic 4.png"></figure>_______________________________________________________________________________________________<figure class="image image-style-align-center"><img src="https://docs.cloud.site.sa/media/External_links_Pic_5_dc24210602.png" alt="External links - Pic 5.png"></figure>_______________________________________________________________________________________________<ul><li>Note: above was an example of Folder permissions, file will be the same except it will be missing the delete &amp; upload options.</li></ul>&nbsp;&nbsp;<h4>Internal Sharing</h4>Now, let’s take the “internal sharing option” option, by clicking on the field right above the share link, then typing the name of the person you want to share the folder with.<figure class="image image-style-align-center"><img src="https://docs.cloud.site.sa/media/Internal_Sharing_pic_1_44603b1a3b.png" alt="Internal Sharing - pic 1.png"></figure>_______________________________________________________________________________________________After that, you can see all the people you shared the file/folder with listed right below “share link” option, with three dots (…) corresponding each one to set up the permissions separately.<ul><li>It’s possible to share the file/folder with a whole group as one of the options you can search for using the same search field, and it will be treated the same as the other users who received the shared folder.</li></ul>&nbsp;&nbsp;<h4>Internal Link</h4>Another sharing feature the “Internal link”.This is to provide a quick access to file/folder without the need to search for it.&nbsp;Let’s say there’re two users: A &amp; B, user A owns a file named “report 10/24/2022”, and user A have shared this file to user B. if user A were to ask user B to look for that specific report that they shared with them earlier, and with the possibilities of having a huge amount of files in user B personal storage, it would take so much time to look for that exact file.Alternatively however, user A could provide user B with an internal link for that file and share it with them, user B will have to login to the system first, after that it will send them directly to that file without the need to search for it. User A will not have to set any passwords on the link, all that’s required is the one receiving the link is already one of the users who received this share earlier, if this link is shared with a user who didn’t receive any share activity earlier from user A, then they’ll not be able to use that link whatsoever.The internal link doesn’t have to be from the owner only, it can be done from one of the recipients to the owner as well, also from one recipients to another one, as long as they have access to the file/folder prior to creating the link, so it's much flexible.You can copy the link by simply clicking on the clipboard icon that’s corresponding with the internal link option.<figure class="image image-style-align-center"><img src="https://docs.cloud.site.sa/media/Internal_links_pic_1_a7158a6501.png" alt="Internal links - pic 1.png"></figure>_________________________________________________________________________________________________<h4>&nbsp;</h4><h4>&nbsp;</h4><h4>Projects</h4>The last sharing option, let’s say a user is tasked to be list all the information about vendors the firm have signed with, and each vendor have their own folder with all their data including the contract &amp; some personal info:<figure class="image image-style-align-center"><img src="https://docs.cloud.site.sa/media/Projects_Pic_1_bbda43a343.jpg" alt="Projects - Pic 1.jpg"></figure>__________________________________________________________________________________________________<figure class="image image-style-align-center"><img src="https://docs.cloud.site.sa/media/Projects_Pic_2_dbd4c232ca.jpg" alt="Projects - Pic 2.jpg"></figure>__________________________________________________________________________________________________<figure class="image image-style-align-center"><img src="https://docs.cloud.site.sa/media/Projects_Pic_3_e5d4be7181.jpg" alt="Projects - Pic 3.jpg"></figure>__________________________________________________________________________________________________&nbsp;Now, the user need to submit one task: collecting all Vendors contractsIn order to achieve such request, the user can use the project sharing feature where they can link all contracts located in different folders to one project: All they need to do:<ol style="list-style-type:decimal;"><li>Select the file they want to share.</li><li>Select “add to a project”.</li><li>Select “link to a file”.</li><li>Navigate to the wanted file then select “choose”<ol><li>If they want to select a folder they don’t need to specify a file, just navigating to the path then select “choose” without selecting any file inside it.</li></ol></li><li>Now they are linked under one project and it will appear right below “Add to a project” but they’ll need to rename it, by selecting on the three dots (…) right next to it.</li><li>Selecting rename and start renaming, then selecting the arrow icon to save the changes.</li></ol>&nbsp;<figure class="image image-style-align-center"><img src="https://docs.cloud.site.sa/media/Projects_Pic_4_9845cf6aea.png" alt="Projects - Pic 4.png"></figure>___________________________________________________________________________________________________<figure class="image image-style-align-center"><img src="https://docs.cloud.site.sa/media/Projects_Pic_5_e0324d390c.jpg" alt="Projects - Pic 5.jpg"></figure>___________________________________________________________________________________________________<figure class="image image-style-align-center"><img src="https://docs.cloud.site.sa/media/Projects_Pic_6_466dbd7aba.png" alt="Projects - Pic 6.png"></figure>___________________________________________________________________________________________________<figure class="image image-style-align-center"><img src="https://docs.cloud.site.sa/media/Projects_Pic_7_f4b11f8d34.png" alt="Projects - Pic 7.png"></figure>___________________________________________________________________________________________________&nbsp;&nbsp;To add another folder to an existing project:<ol style="list-style-type:decimal;"><li>Select the file to be shared.</li><li>Select “add to a project”</li><li>Type in the project name and it will auto-complete.</li><li>Select the project.</li><li>Now it’s linked.</li></ol>&nbsp;<figure class="image image-style-align-center"><img src="https://docs.cloud.site.sa/media/projects_Pic_8_8355eeadce.png" alt="projects - Pic 8.png"></figure>___________________________________________________________________________________________________&nbsp;To delete files from a project:<ol style="list-style-type:decimal;"><li>Select the three dots (…) right next to the project.</li><li>Select “Show details”.</li><li>All the files and folders assigned to the project will be listed below, to remove a file select the “X” icon right next to the file/folder that need to be removed.</li><li>To remove the whole project, select all the X icons inside the project to be remove automatically.</li></ol>&nbsp;<figure class="image image-style-align-center"><img src="https://docs.cloud.site.sa/media/Projects_Pic_9_bc9192b72c.png" alt="Projects - Pic 9.png"></figure><h3>Important Notes:</h3><ul><li>You can select the item inside a project for a quick access to it.</li><li>You can access the project from any file/folder’s sharing sidebar that’s included in that project</li><li>only the people that have access to all the content inside a project have the ability to view and edit the project.</li></ul>&nbsp;<h3>Transfer Ownership</h3>In some cases, one user must more the ownership of a file/folder to another, this means they’ll be moving the ability to share, un-share, creating external links applying tags to it, and viewing all the activities on that file/folder to another user. In order to do that:<ol style="list-style-type:decimal;"><li>at the top-right corner, select the user image/initials icon then select “settings”.</li><li>Under “personal” tab at the left sidebar, select “sharing”.&nbsp;</li><li>Select “Choose file or folder to transfer”.&nbsp;</li><li>Navigate to the file/folder to transfer the ownership.&nbsp;<ol><li>If they want to select a folder they don’t need to specify a file, just navigating to the path then select “choose” without selecting any file inside it.&nbsp;</li></ol></li><li>Select the “search users” field, right next to “New owner”.</li><li>Type in the user to transfer the ownership of the file/folder to, auto-complete feature is available there as well.</li><li>Select on “Transfer”.&nbsp;</li><li>Now, a transfer request has been sent to the user.</li><li>The recipient user has to select on the bell icon at the top-right corner to see all the notifications.</li><li>There will be a transfer request, with a note that it could take a while for the process to be done, select accept.</li><li>The file has been transferred successfully.</li></ol>&nbsp; &nbsp;<figure class="image image-style-align-center"><img src="/uploads/Transfer_Ownership_Pic_1_4e3f9f01e4.PNG"></figure><hr>&nbsp;<figure class="image image-style-align-center"><img src="/uploads/Ownership_Transfer_Pic_2_aaa29f9bac.jpg"></figure><hr>&nbsp;<figure class="image image-style-align-center"><img src="/uploads/Transfer_Ownership_pic_2_13ab62c5fb.PNG"></figure><hr>&nbsp;<figure class="image image-style-align-center"><img src="https://docs.cloud.site.sa/media/Ownership_Transfer_Pic_4_cceb5828e5.png" alt="Ownership Transfer - Pic 4.png"></figure><hr>&nbsp;<figure class="image image-style-align-center"><img src="https://docs.cloud.site.sa/media/Ownership_Transfer_Pic_5_e4df39ebfb.png" alt="Ownership Transfer - Pic 5.png"></figure>____________________________________________________________________________________________________________&nbsp;<h3>Default folder for accepted shared objects</h3>Another feature to be consider is setting up the default path for all the received shared files/folders.&nbsp;<ol style="list-style-type:decimal;"><li>at the top-right corner, select the user image/initials icon then select “settings”.</li><li>Under “personal” tab at the left sidebar, select “sharing”.</li><li>Under “Sharing” select “/” to set up a default path.<ol><li>“/” being the root path (i.e. the very first page after login).</li></ol></li><li>Select a folder then “Choose”.<ol><li>You can create a new folder by selecting the plus icon, typing the new folder name then selecting. the arrow icon, then the new folder will appear.</li></ol></li><li>Now the default path for accepted shares has changed to the new path.</li></ol>&nbsp;<figure class="image image-style-align-center"><img src="https://docs.cloud.site.sa/media/Default_Folder_for_new_Shares_Pic_1_7181632963.jpg" alt="Default Folder for new Shares - Pic 1.jpg"></figure><hr><figure class="image image-style-align-center"><img src="/uploads/Default_Folder_for_accepting_shares_pic_2_fee440b0c1.PNG"></figure><hr><h2>Confidentiality</h2>This document may contain information of a sensitive nature. This information should not be shared with anyone other than those for whom it was originally intended. No one else may disclose, distribute or otherwise use the contents of this document without the express written permission of the owner. Unauthorized use, disclosure, dissemination, duplication and/or distribution are strictly prohibited, and may be unlawful. If you receive this document in error, please immediately delete it and all copies of it from your system, destroy any hard copies of it, and notify Saudi Information Technology Company.<h2>Copyright</h2>The information contained in this document is the proprietary and exclusive property of Saudi Information Technology Company except as otherwise indicated. Notwithstanding its intended purpose, no part of this document, in whole or in part, may be reproduced, stored, transmitted, or used for any purpose without the prior written permission of the Company.

SITE Share

File Sharing manual

The ISO/IEC 27000 family of standards provides a framework for information security policies and procedures, including legal, physical, and technical controls involved in an organization's risk management processes.ISO/IEC 27001 is an information security standard that specifies requirements for establishing, implementing, maintaining and continually improving an information security management system (ISMS). It includes requirements for documentation, management responsibilities, internal audits, corrective actions, and more. Certification helps organizations comply with regulatory and legal requirements related to information security.SITE Cloud undergoes regular independent third-party audits to maintain compliance with ISO/IEC 27001.<h4>SITE Cloud and ISO/IEC 27001</h4>SITE Cloud has achieved ISO/IEC 27001 certification for its information security management system (ISMS).The SITE Cloud ISO/IEC 27001 certificate and audit reports demonstrate compliance and provide details on the audit scope.Clients can use SITE Cloud's ISO/IEC 27001 certification to support compliance for their own systems and services built on SITE Cloud.<h4>Scope of Certification</h4>The SITE Cloud ISO/IEC 27001 certification applies to the following in-scope cloud services:<ul><li>Cloud Virtual Datacenter(VDC)</li><li>Cloud Disaster Recovery</li><li>Cloud Managed IT</li><li>Cloud Managed IT SME</li></ul><h4>Audit Certificates</h4><ul><li>The SITE Cloud ISO/IEC 27001 certificate is available to clients upon request through SITE Cloud Support Portal.</li></ul>&nbsp;<h4>Frequently Asked Questions: &nbsp;</h4><h4>Why is ISO/IEC 27001 important?</h4>Compliance demonstrates that SITE Cloud follows best practices for information security, validated by an accredited third-party auditor. This provides assurance to clients that data is appropriately protected.<h4>Can I use SITE Cloud's certification for my own ISO/IEC 27001 compliance?</h4>Yes, SITE Cloud's ISO/IEC 27001 certification can be used to support compliance for customer systems and services built on the SITE Cloud platform. However, customers are responsible for compliance of their own implementation and internal controls.<h4>What resources does SITE Cloud provide to assist with compliance?</h4>In addition to making audit certificates available, SITE Cloud provides compliance documentation within SITE Cloud Docs portal to help clients to meet compliance requirements.

ISO/IEC 27001 - SITE Cloud Compliance

### Overview
 
The ISO/IEC 27000 family of standards provides a framework for information security policies and procedures, including legal, physical, and technical controls involved in an organization's risk management processes. 

ISO/IEC 27001 is an information security standard that specifies requirements for establishing, implementing, maintaining and continually improving an information security management system (ISMS). It includes requirements for documentation, management responsibilities, internal audits, corrective actions, and more. Certification helps organizations comply with regulatory and legal requirements related to information security.

SITE Cloud undergoes regular independent third-party audits to maintain compliance with ISO/IEC 27001.


### SITE Cloud and ISO/IEC 27001

- SITE Cloud has achieved ISO/IEC 27001 certification for its information security management system (ISMS). 

- The SITE Cloud ISO/IEC 27001 certificate and audit reports demonstrate compliance and provide details on the audit scope.

- Clients can use SITE Cloud's ISO/IEC 27001 certification to support compliance for their own systems and services built on SITE Cloud.


### Scope of Certification

The SITE Cloud ISO/IEC 27001 certification applies to the following in-scope cloud services:

- Cloud Virtual Datacenter(VDC)
- Cloud Disaster Recovery 
- Cloud Managed IT
- Cloud Managed IT SME


### Audit Certificates

- The SITE Cloud ISO/IEC 27001 certificate is available to clients upon request through SITE Cloud Support Portal. 



### Frequently Asked Questions


#### Why is ISO/IEC 27001 important?
Compliance demonstrates that SITE Cloud follows best practices for information security, validated by an accredited third-party auditor. This provides assurance to clients that data is appropriately protected.


#### Can I use SITE Cloud's certification for my own ISO/IEC 27001 compliance?
Yes, SITE Cloud's ISO/IEC 27001 certification can be used to support compliance for customer systems and services built on the SITE Cloud platform. However, customers are responsible for compliance of their own implementation and internal controls.

#### What resources does SITE Cloud provide to assist with compliance?
In addition to making audit certificates available, SITE Cloud provides compliance documentation within SITE Cloud Docs portal to help clients to meet compliance requirements.


ISO/IEC 27018 - SITE Cloud Compliance

ISO/IEC 27017 provides guidance on information security controls for cloud services based on ISO/IEC 27002. It offers additional guidance and controls to address security issues specific to the cloud computing environment.ISO/IEC 27017 is applicable to both cloud service providers and cloud clients. It assists organizations in implementing a secure cloud computing information security management system.<h4>SITE Cloud and ISO/IEC 27017</h4>SITE Cloud has achieved ISO/IEC 27017 certification for its implementation of cloud-specific information security controls.The SITE Cloud ISO/IEC 27017 certificate validates compliance with key controls for cloud security.Clients can leverage SITE Cloud's ISO/IEC 27017 certification to support compliance for workloads and data stored on the SITE Cloud.<h4>Scope of Certification</h4>The SITE Cloud ISO/IEC 27017 certification applies to the following in-scope cloud services:<ul><li>Cloud Virtual Datacenter(VDC)</li><li>Cloud Disaster Recovery</li><li>Cloud Managed IT</li><li>Cloud Managed IT SME</li></ul><h4>Audit Certificates</h4><ul><li>The SITE Cloud ISO/IEC 27017 certificate is available to clients upon request via SITE Cloud Support Portal.</li></ul>&nbsp;<h4>Frequently Asked Questions:</h4>&nbsp;<h4>Who does ISO/IEC 27017 apply to?</h4>ISO/IEC 27017 provides guidance for both cloud providers and cloud clients. It assists organizations in implementing secure cloud computing environments.<h4>How can I access SITE Cloud's ISO/IEC 27017 audit documentation?</h4>Audit certificates is available through the SITE Cloud Support Portal.<h4>Can I leverage SITE Cloud's ISO/IEC 27017 certification for my compliance efforts?</h4>Yes, SITE Cloud's certification can be used to demonstrate compliance for client workloads hosted on the platform. However, clients are responsible for compliance of their own cloud implementation and internal controls.

ISO/IEC 27017 - SITE Cloud Compliance

ISO/IEC 27701 is an extension of ISO/IEC 27001 for managing personal data privacy. It specifies requirements for a Privacy Information Management System (PIMS) to help organizations implement controls for privacy regulations like GDPR.ISO/IEC 27701 provides a framework for managing personal data that applies to both data controllers and processors. Certification demonstrates an audited approach to privacy controls and compliance.<h4>SITE Cloud and ISO/IEC 27701</h4>SITE Cloud has achieved ISO/IEC 27701 certification for its privacy information management system.The SITE Cloud ISO/IEC 27701 certificate validates compliance with privacy controls.Clients can leverage SITE Cloud's ISO/IEC 27701 certification to support regulatory compliance for workloads involving personal data.<h4>Scope of Certification</h4>The SITE Cloud ISO/IEC 27701 certification applies to the following in-scope cloud services:<ul><li>Cloud Virtual Datacenter(VDC)</li><li>Cloud Disaster Recovery</li><li>Cloud Managed IT</li><li>Cloud Managed IT SME</li></ul><h4>Audit Reports and Certificates</h4><ul><li>SITE Cloud's ISO/IEC 27701 certificate is available through the SITE Cloud Support Portal.</li><li>&nbsp;</li></ul><h4>Frequently Asked Questions:</h4>&nbsp;<h4>How does ISO/IEC 27701 help meet privacy regulations?</h4>ISO/IEC 27701 provides a universal framework of privacy controls that can be mapped to requirements for regulations like GDPR and CCPA. This allows for efficient implementation and audit of regulatory compliance.<h4>How can I access SITE Cloud's ISO/IEC 27701 audit documentation?</h4>Certificates can be requested through the SITE Cloud Support Portal.<h4>Can I use SITE Cloud's ISO/IEC 27701 certification for my compliance?</h4>Yes, SITE Cloud's certification helps demonstrate compliance for client workloads involving personal data on the Cloud. However, clients maintain responsibility for compliance of their implementation.

ISO/IEC 27701 - SITE Cloud Compliance

The Cloud Security Alliance (CSA) Security, Trust, Assurance, and Risk (STAR) registry provides a free, publicly accessible registry for cloud providers to publish information security and compliance reports.The STAR Self-Assessment allows cloud providers to document their security controls based on the CSA Cloud Controls Matrix (CCM) using the Consensus Assessments Initiative Questionnaire (CAIQ).<h4>SITE Cloud and CSA STAR</h4>SITE Cloud publishes a CSA STAR Self-Assessment documenting its implementation of security controls per the CCM.Clients can review SITE Cloud's CAIQ to evaluate security risks and compare providers using CSA best practices.SITE Cloud undergoes annual audits to update the CAIQ assessment based on the latest CCM version.<h4>CAIQ Report Access</h4>The SITE Cloud CSA STAR Self-Assessment is publicly available on the CSA STAR Registry https://cloudsecurityalliance.org/star/registry/saudi-information-technology-company-siteSITE Cloud publishes updated CAIQ reports annually after each audit is completed.&nbsp;<h4>Frequently Asked Questions:</h4><h4>&nbsp;</h4><h4>What standards does the CCM align to?</h4>The CCM maps to various security standards like ISO 27001, PCI DSS, and NIST 800-53 to provide a baseline set of cloud security best practices.<h4>Why is the CSA STAR Self-Assessment valuable?</h4>It enables transparent documentation of SITE Cloud's security controls implementation per industry best practices. Customers can review and compare providers.

CSA STAR Self-Assessment - SITE Cloud Compliance

The Center for Internet Security (CIS) publishes consensus-based configuration benchmarks and best practices for securely configuring IT systems.CIS benchmarks provide guidance on baseline security settings for software, operating systems, networks, and cloud platforms.<h4>SITE Cloud and CIS Benchmarks</h4>The benchmark covers recommendations for secure configuration of SITE Cloud resources and services.Clients can use the CIS SITE Cloud Foundations Benchmark as a base when deploying workloads on SITE Cloud.SITE Cloud also offers pre-configured CIS Hardened Images that align to CIS benchmark recommendations.<h4>CIS SITE Cloud Foundations Benchmark</h4>It provides two levels of security recommendations:<ul><li>Level 1: Basic security settings with minimal functionality impact</li><li>Level 2: Strict security settings for high-risk environments</li></ul><h4>CIS Hardened Images on SITE Cloud</h4>SITE Cloud offers CIS Hardened Images for Linux and Windows on the SITE Cloud Portal. The images are pre-configured per CIS benchmarks.

Center for Internet Security (CIS) Benchmarks - SITE Cloud

### Overview ISO 22301 is an international standard that specifies requirements for a business continuity management system (BCMS). It helps organizations protect against, prepare for, and recover from disruptive incidents. SITE Cloud has established a BCMS aligned to ISO 22301 and achieved ISO 22301 certification, demonstrating commitment to business continuity and disaster recovery. ### SITE Cloud and ISO 22301 - SITE Cloud has implemented a BCMS that conforms to the ISO 22301 standard. - SITE Cloud has received ISO 22301 certification, validated through independent audits. - Clients can leverage SITE Cloud's ISO 22301 certification as evidence of business continuity controls. ### Scope of Certification The SITE Cloud ISO 22301 certification applies to the following in-scope cloud services: - Cloud Virtual Datacenter(VDC) - Cloud Disaster Recovery - Cloud Managed IT - Cloud Managed IT SME ### Audit Documentation - The SITE Cloud ISO 22301 certificate is available via SITE Cloud Support Portal.

ISO 22301 - SITE Cloud Compliance

These descriptions offer a structured approach to understanding and resolving each issue encountered during meetings on SITE Ray.&nbsp;&nbsp;<ul style="list-style-type:square;"><li>Issue: Corporate Firewall Policies<ul><li>Description: Your meeting experience on SITE Ray is suboptimal due to restrictions imposed by your corporate firewall policies. These policies prevent direct connections to the SITE Ray Media Server, leading to the utilization of a relay server (TURN) for communication.</li><li>Resolution Steps: To improve your meeting experience, consider the following steps:<ul><li>Consult your IT department to review and potentially adjust firewall policies to allow direct connections to the SITE Ray Media Server.</li><li>Ensure that the following IP address and port range are allowed through your firewall:<ul><li>SITE Ray Media Server IP: 176.105.148.218/</li><li>Port Range: 20000 to 50000 UDP/TCP</li></ul></li></ul></li></ul></li></ul>&nbsp;&nbsp;<ul style="list-style-type:square;"><li>Issue: High CPU Utilization<ol><li>Description: Your meeting experience on SITE Ray is hindered by high CPU utilization, impacting performance and overall quality.</li><li>Resolution Steps: To address high CPU utilization during meetings, consider the following actions:<ol><li>Check for background processes or applications consuming excessive CPU resources and close them if possible.</li><li>Upgrade hardware if necessary to better handle meeting demands.</li></ol></li></ol></li></ul>&nbsp;&nbsp;<ul style="list-style-type:square;"><li>Issue: Limited Internet Bandwidth<ul><li>Description: Your meeting experience on SITE Ray is affected by limited internet bandwidth, causing issues such as lag, buffering, or poor audio/video quality.</li><li>Resolution Steps: To mitigate bandwidth limitations during meetings, consider implementing the following strategies:<ul><li>Close unnecessary applications or browser tabs consuming bandwidth.</li><li>Upgrade your internet plan to a higher bandwidth tier, if feasible.</li><li>Prioritize video and audio traffic by using Quality of Service (QoS) settings if available on your network.</li></ul></li></ul></li></ul>&nbsp;&nbsp;<ul style="list-style-type:square;"><li>Issue: Unidentified Reason<ul><li>Description: Your meeting experience on SITE Ray is suboptimal due to an unidentified reason. Further investigation is needed to pinpoint the exact cause of the issue.</li><li>Resolution Steps: To diagnose and address the unidentified issue affecting your meeting experience, follow these steps:<ul><li>Check for any recent updates or changes to your system, network, or software that may have contributed to the problem.</li><li>Test your meeting experience on different devices or networks to isolate the issue.</li><li>Contact technical support or your IT department for assistance in troubleshooting and resolving the issue.</li></ul></li></ul></li></ul>&nbsp;&nbsp;

SITE Ray Meeting Experience Issues

A Network File System (NFS) is a distributed file system used for storing files on a network. It allows users and devices to access files and directories.&nbsp;On SITE Cloud, the NFS is accessed through Shared IPs.For VMs to access an NFS, a shared IP needs to be assigned to them.You can refer to the following page for more information: <a href="https://docs.cloud.site.sa/MyCloudPortal/how-to-assign-i-ps-from-cloud-portal" target="_blank" rel="noopener noreferrer">Assign IPs on SITE Cloud</a>&nbsp;&nbsp;<h3>Creating an NFS</h3>1. In order to create an NFS, navigate to “Storage” section and click on NFS.&nbsp;<figure class="image image-style-align-left"><img src="/uploads/image_5bf8aa97e6.png"></figure>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;2. You should see the FS Zone for your environment.&nbsp;<figure class="image image-style-align-left"><img src="/uploads/image_f0b690e8e9.png"></figure>&nbsp;&nbsp;3. Click on the FS Zone and click on “Create” button to create a new share.&nbsp;<figure class="image image-style-align-left"><img src="/uploads/image_d2281972bb.png"></figure>&nbsp;&nbsp;4. Fill in the needed details.&nbsp;<figure class="image image-style-align-left"><img src="/uploads/image_2725ecfbc6.png"></figure>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Note: Allowed shared IPs should contain the shared IPs for the VM that require access to the NFS.&nbsp;&nbsp;&nbsp;After creating a share, you can click on the “Edit” icon for instructions on mounting the NFS and the required firewall rules.&nbsp;<figure class="image image-style-align-left"><img src="/uploads/image_b92f22003f.png"></figure>