# Introduction CYBRAL GUARD is your central platform for comprehensive data management, regulation compliance, and security oversight. It automatically classifies and discovers sensitive data within your organization's environment, including data in use, at rest, or in motion. CYBRAL GUARD helps organizations achieve and maintain compliance with data regulations and standards, such as GDPR, HIPAA, and others.

### Before You Begin Ensure that your system meets the minimum requirements that will be discussed later. If necessary, consult your IT department or system administrator to provide the required resources.

# Portal Installation Portal Installation Guide, your full resource for setting up and configuring our portal system. Our portal serves as the central hub for managing your organization's data, users, and system settings, providing an efficient and efficient platform for collaboration and information management. ### System Requirements #### **Windows Server Requirements:** * **CPU Cores:** Minimum 8 cores; recommended 12 cores. * **RAM:** 16 GB * **Disk Space:** 250 GB * **Software Dependencies:** * SQL Server 2019 or later installed * Open Ports: 8000 to 8008 * Public Ports: 443 1. **Install .NET 7.0 Desktop Runtime (v7.0.15) for Windows x64:** * Before proceeding with the installation, ensure that the system has the required dependencies. Download the .NET 7.0 Desktop Runtime (v7.0.15) installer for Windows x64 from the official Microsoft website. * You can obtain the installer from the following link: [Download .NET 7.0 Desktop Runtime (v7.0.15) - Windows x64 Installer](https://dotnet.microsoft.com/en-us/download/dotnet/7.0) 2. **Install SQL Server Instance:** * Proceed with installing a SQL Server instance suitable for your requirements. Choose the appropriate package from the Microsoft SQL Server Downloads page based on your system specifications and organizational needs. * Access the SQL Server Downloads page using the following link: [Microsoft SQL Server Downloads](https://www.microsoft.com/en-us/sql-server/sql-server-downloads) 3. **Run Installer (As Administrator):** * Locate the installer file downloaded in the previous steps. * Right-click on the installer file and select "Run as administrator" from the context menu to ensure proper permissions during installation.

4. **Click the "Install" Button:** * Within the installer window, locate and click on the "Install" button to initiate the installation process.

5. **Accept License Terms:** * Review the Cybral Guard License Terms presented on the screen. * If you agree to the terms, select the checkbox labeled "I accept the Cybral Guard License Terms." * Proceed by clicking the "Next" button to continue with the installation process.

6. **Install Prerequisite Programs Manually:** * On this screen, you will install all prerequisite programs manually. * Note: If you have already installed the prerequisite programs, there is no need to install them again.

7. **Install IIS Features Automatically:** * On this screen, all Internet Information Services (IIS) features will be installed automatically.

8. **Enter Database Information:** * If the database is located on the same server, you can set the IP address to '.'. * If the default port is '1433', you can leave the port field blank.

9. **Access the Database Server:** * Try to access the database server. * If a database has not been created before, proceed to create one.

\ 10\. **Enter Portal Information:** * Choose the publishing path. * Enter the IP address and port of the portal main site. * If applicable, enter the hostname. * Repeat the above steps for the portal API. * On the next screen, enter the IPs for AI, Report, AI Integration, and Connector. * If publishing on the local machine, you can set all IPs with '\*' or 'localhost'. * You have the option to perform an Advanced Install where you can enter any data.

* If publishing on the local machine, you can set all IPs with '\*' or 'localhost'. * You have another option to perform "Basic Install" we install all this on local machine you can enter portal only.

11. **Backup and Publish All Sites:** * Before proceeding, take a backup of the current configuration. * Once the backup is complete, proceed to publish all sites.

12. **Installation Completed Successfully:** * Upon successful completion of the installation process, click "Start" to open the portal website. * The portal website should open in your default web browser, indicating a successful installation.

13. **Accessing the Portal Website:** * Once the installation is completed successfully, navigate to the portal website by clicking on the provided link or entering the portal URL [http://localhost:port/admin/home](http://192.168.40.145:81/admin/home) in your web browser's address bar. * You should be directed to the main page of the portal website, where you can begin exploring its features and functionalities.

14. **Default Credentials:** * **Username:** * **Password:** Aa123456! Please ensure to change the password after your initial login for security purposes.

# AI Installation AI Installation Guide, your comprehensive resource for setting up and configuring our AI solution. Our AI system represents a cutting-edge technology that influences machine learning and advanced algorithms to analyze data, derive insights, and enhance decision-making processes within your organization. ### System Requirements #### Linux Server Requirements: * **CPU Cores:** Depends on workload; recommended at least 2 cores or more. * **RAM:** Depending on workload, recommended at least 4 GB RAM or higher. * **Disk Space:** Sizing needed for each customer workload; recommended at least 50 GB or more. * **Public Ports:** 8000 1. **Acquiring Installer Source Code Files on a Linux Server** Before proceeding with the installation, it's essential to acquire the source code files necessary for setting up the system. These files typically include: * **.env.conf**: Configuration file containing environment variables and settings. * **docker-compose.yml**: YAML file defining the Docker containers and services required for deployment. * **install.sh**: Shell script responsible for executing installation procedures and configuring the system.

To acquire these files: * Log in to your Linux server using your credentials. * Identify the source code repository or directory where the installation files are stored. * Use commands such as `git clone` or `wget` to download the source code files onto your Linux server. The .env.conf file contains essential configuration settings, including service ports, which need to be adjusted according to port availability and specific requirements. To edit the .env.conf file:

Example: To edit the .env.conf file, in this sample, the user can edit the REGEX_PORT from 6010 to any available port.

{% hint style="warning" %} Please be informed that 11 ports must remain available to facilitate unified communication among the system's services. This is essential for ensuring continuous operation and efficient exchange of data within the system architecture. {% endhint %} 2. **To obtain the source code of the AI\_Interface, proceed by navigating to the following two files:** * **env\_config.yaml:** This file allows you to specify the agreed-upon ports for each service.

* **Config.ini:** To configure the IP of the portal.

3. **Acquiring the Trained Model:** By default, the trained model should be located in a folder named **NER\_model\_server**, which shares the same parent directory as the **AI\_Installer** folder.

As showed in the previous image, it's confident that the two folders, namely NER\_model\_server and AI\_Installer, exist in in the same directory. In the event that they are not, you'll need to edit the docker-compose.yml file in the AI\_Installer directory to specify the correct location of the model.

**Installation Process:** After completing the three previous steps, return to the **AI\_Installer** directory and initiate the installation process by executing the following command in the terminal on your Linux server: ```bash bash install.sh ``` Running this command will automatically install the necessary requirements and launch the services as configured. **Verification of Service Status:** Upon executing the installation command, you can verify the status of all services by examining the printed output. Look for indications such as "done," "created," or "up to date" as shown below: * "done": Indicates that the service setup process has been successfully completed. * "created": Signifies the creation of new services as part of the installation process. * "up to date": Confirms that the services are already up and running and are currently at their latest versions. Reviewing these indicators in the printed output ensures that all services are operational and functioning as expected.

You can check if the AI service is running by opening your web browser and visiting the URL format \. For example, if your server IP is 127.0.0.1 and the port is 7000, type "127.0.0.1:7000" in your browser. Once you access this URL, you'll see the Swagger documentation. The Swagger page provides details about the AI service's available API endpoints and functionalities. Please see the image below for a visual guide to navigating the Swagger documentation.

# Guard Connecters Installation This guide provides a comprehensive overview of deploying Cybral Guard, including **Group Policy Object (GPO)** deployment and the new **Cybral Guard App Deployment via Microsoft Intune**. This guide will walk you through setting up and using Guard Connectors, starting from installation to ensure a smooth, straightforward deployment process across your computers. ### System Requirements * **OS**: Windows 10 or later * **Framework**: .Net Framework 4.8 * **CPU**: core I3 or later * **RAM**: 4 GB or more * **Disk Space**: 10 MB # Group Policy Object (GPO) deployment This method allows administrators to automate the installation process, ensuring consistent application settings and easy deployment across the network. By using GPO, you can easily push the Cybral Guard Connectors to all targeted machines, reducing setup time and enhancing your company’s data protection without requiring manual installation on each device. In the following steps, you’ll learn how to prepare, configure, and execute the deployment of Cybral Guard Connectors using GPO. ## Installation Steps #### **Creating a Shared Folder via Group Policy Object (GPO)** 1. **Access Group Policy Management:** * Navigate to the domain controller and launch the Group Policy Management Console (GPMC). 2. **Create New Group Policy Object (GPO):** * Click on "Tools" and select "Group Policy Management" to open the console. * Right-click on your domain name in the left pane and choose "Create a GPO in this domain and Link it here" to initiate the creation process.

#### **Configuring the Group Policy Object (GPO) Named "Cybral"** 1. **Name the Policy:** * After creating the GPO, name it "Cybral" to identify its purpose. 2. **Access GPO Settings:** * Right-click on the newly created "Cybral" GPO and select "Edit" to access its settings. 3. **Navigate to User Configuration:** * Within the Group Policy Management Editor, navigate to User Configuration -> Preferences -> Windows Settings -> Folder. 4. **Create a New Folder:** * Right-click on the "Folders" node and select "New" -> "Folder" to create a new folder object. * Rename the folder to "cybral temp" as instructed. 5. **Configure Folder Properties:** * Specify the path for the folder in the "Path" field to define its location for users. * Select "Update" to ensure that the folder settings are applied consistently. * Check the "Hidden" option if you want the folder to be hidden from users. 6. **Apply Changes:** * Click "OK" to save the changes and apply the folder settings within the GPO.

**Creating a Shared File via Group Policy Object (GPO)** 1. **Preparation:** * Before configuring the Group Policy Object (GPO), ensure that the folder and file to be shared are already set up and accessible to users within the domain. 2. **Access GPO Settings:** * Open the Group Policy Management Console and navigate to the "Cybral" GPO. 3. **Navigate to User Configuration:** * Within the Group Policy Management Editor, go to User Configuration -> Preferences -> Windows Settings -> Files. 4. **Create a New File Object:** * Right-click on the "Files" node and select "New" to create a new file object. * Specify the path for the file, which should be the same location as the shared folder path. Append the file name to the path. 5. **Configure File Properties:** * Ensure that the destination path matches the location of the shared folder, and add the file name as required. * Specify any additional properties such as file attributes or permissions as needed. 6. **Apply Changes:** * Click "OK" to save the changes and apply the file settings within the GPO.

**Creating a Scheduled Task via Group Policy Object (GPO)** 1. **Access GPO Settings:** * Open the Group Policy Management Console and navigate to the "Cybral" GPO. 2. **Navigate to Scheduled Tasks:** * Within the Group Policy Management Editor, go to User Configuration -> Preferences -> Control Panel Settings -> Scheduled Tasks. 3. **Create a New Scheduled Task:** * Right-click on the "Scheduled Tasks" node and select "New" -> "Scheduled Task (At least Windows 7)" to create a new scheduled task. 4. **Configure Scheduled Task Properties:** * Specify the settings for the scheduled task, including the name, description, and trigger settings such as start time, frequency, and recurrence pattern. * Configure the action settings, such as the program/script to run and any additional parameters. * Set any other options or conditions for the scheduled task as required. 5. **Apply Changes:** * Click "OK" to save the changes and apply the scheduled task settings within the GPO.

**Access GPO Settings:** * Open the Group Policy Management Console and navigate to the "cybral" GPO. **Navigate to Scheduled Tasks:** * Within the Group Policy Management Editor, go to User Configuration -> Preferences -> Control Panel Settings -> Scheduled Tasks. **Create a New Scheduled Task:** * Right-click on the "Scheduled Tasks" node and select "New" -> "Scheduled Task (At least Windows 7)" to create a new scheduled task. **Configure Scheduled Task Actions:** * In the Scheduled Task Properties window, navigate to the "Actions" tab. * Select "Start a program" as the action to take. * In the "Program/script" field, enter "cmd.exe". * In the "Add arguments" field, input the following command: ``` /C "msiexec /i "C:\windows\cybral-temp\Cybral Guard.msi" /qn REINSTALL=ALL REINSTALLMODE=A" ``` * Click "OK" to save the changes and apply the scheduled task settings within the GPO.

**Scheduled Task Actions Configuration**

To manage users effectively in the **Cybral Guard portal and ensure proper departmental categorization**, follow these steps: * **Access Cybral Guard Portal:** Log in to the Cybral Guard portal using your administrator credentials. * **Navigate to Departments & Servers:** Once logged in, locate and navigate to the departments & servers. This section typically allows administrators to add new departments. * **Identify Non-Department Users:** Review the list of users within the Non-Department Users section. These users may include newly registered awaiting assignment to specific departments. * **Assign Users to Their Appropriate Departments:** Based on organizational roles and responsibilities, determine the appropriate department for each user within the Cybral Guard portal. * **Move Users to Respective Departments:** Utilize the portal's functionality to move users from the Non-Department Users section to their respective departments.

* **Update User Profiles (if necessary):** Ensure that user profiles are updated with relevant departmental information and any additional details required for effective user management.

# Intune Deployment **Introduction**\ This section introduces the deployment process using Microsoft Intune for the Cybral Guard App. It explains how Intune ensures a secure, centralized deployment, enabling organizations to manage devices and distribute applications efficiently. **1. Prerequisites** * **Access to Microsoft Intune**: Verify you have the necessary permissions. * **Cybral Guard App Package**: Ensure you have the latest `.msi` or `.intunewin` package. * **Device Compatibility**: Confirm the devices meet the app’s system requirements, particularly for Windows 21H or later versions. **2. Preparing the App Package**\ Outline the steps to prepare the app package, such as: * **Download the App Package**: Make sure you have the latest Cybral Guard app file. * **Compatibility Check**: Confirm that the app is compatible with the target devices (Windows 21H or later). **3. Signing In to Microsoft Intune**
* Navigate to the Microsoft Endpoint Manager Admin Center * Log in with administrator credentials. **4. Adding the Cybral Guard App**
* For Windows 1. **Select Apps:** In the left-hand pane, click on Apps. 2. **Add App:** Click on Add and choose Windows. 3. **Select App Type:** Choose Windows app (Win32) for traditional applications. 4. **Upload the App:** Upload either the `.msi` or `.intunewin file.` 5. **Configure App Information:** Provide app details such as the app name, description, publisher, and any other relevant settings. 6. **Assign the App:** Assign the app to the appropriate groups and choose App availability as either: * **Available for Enrolled Devices:** The app will appear in the Company Portal, and users will have the option to install it manually. * **Required:** The app will automatically install on the target devices or for specified users/groups. 7. **Complete the Upload:** Finish and wait for the app to complete the upload process.

**4. Monitor Deployment** * **Monitor Deployment Status:** After deployment, monitor the installation status in Intune to ensure the app is successfully deployed to all target devices. * **Check for Issues:** Resolve any deployment issues that may arise during the process **5. User Communication** * **Inform Users:** Notify users about the new app, including instructions on how to access and use it via the Company Portal. * **Provide Support:** Offer support contact details for any issue’s users may encounter with the app. # Server Scanner Installation This guide will walk you through the steps required to install and configure the Scanner on your Windows server. The Scanner is a critical component of the Cybral Guard. It is designed to scan files on the server, classify them using our advanced AI, and ensure your data is properly organized and protected. By following this guide, you can set up the Scanner easily, integrate it with your existing infrastructure, and start using the powerful data classification and protection capabilities of Cybral Guard. ### Requirements To install the Cybral Guard Scanner Server, ensure the following prerequisite is met: **Windows Desktop Runtime 6.0.20 (x64)**: The presence of `windowsdesktop-runtime-6.0.20-win-x64` on the server is required for the setup of the Scanner. If this runtime is not present, the user will be prompted to install it during the setup process. ### Installation Steps 1. **Obtain the Setup Wizard**: * Ensure you have received the Cybral Guard setup wizard.

2. **Run the Setup Wizard**: * Launch the Cybral Guard setup wizard on your Windows server. * Follow the on-screen instructions provided by the wizard to initiate the installation process.

3. **Follow the Installation Prompts**: * The setup wizard will guide you through a series of installation prompts. These will include choosing the installation directory and configuring initial settings. * Select the appropriate options based on your organization's requirements and proceed to the next steps.

4. **Confirm the Installation**: * Once you have configured the necessary settings, the setup wizard will be ready to install the Scanner on your Windows server.

5. **Scanner being installed**: * This process may take a few minutes. Ensure that your server meets the required specifications for a smooth installation.

6. **Complete the Installation**

7. **Verify Installation**: * After the installation is complete, navigate to the Services section on your server to ensure the Scanner is now installed correctly and running.

{% hint style="info" %} To ensure the service is running smoothly, the Scanner will recheck the files after 12 hours. This process will occur after the installation to ensure that all files are correctly labeled and exposed for scanning. {% endhint %} Files on the server will be scanned one by one, except for those configured by the admin via the portal to be excluded from scanning. The scanner performs a rescan every 24 hours. This routine check ensures that any updates or changes to the files are detected and reclassified if necessary. # Conclusion In conclusion, the installation guide for Cybral Guard provides a full framework for deploying and managing the software across organizational networks effectively. By following the outlined steps, users can easily install Cybral Guard on their designated servers, configure group policies to ensure uniformity and compliance, and manage user access within the Cybral Guard portal. With a focus on clarity and accuracy, this guide empowers administrators to update the deployment process, enhance security measures, and optimize user management workflows. Through careful execution of the installation procedures and utilization of the Cybral Guard platform, organizations can support their cybersecurity infrastructure.