Getting started

This document describes how to get started with Citrix Analytics for Security for the first time.

Step 1: Sign in to Citrix Cloud

To use Citrix Analytics for Security, you must have a Citrix Cloud account. Go tohttps://citrix.cloud.comand sign in with your existing Citrix Cloud account.

If you do not have a Citrix Cloud account, you must first create a Citrix Cloud account or join an existing account created by someone else in your organization. For detailed processes and instructions on how to proceed, seeSign Up for Citrix Cloud.

Step 2: Get access to Security Analytics

You can access Citrix Analytics for Security in one of the following ways:

• Request a Citrix Analytics for Security trial. After signing in to Citrix Cloud, do the following:

  1. 在Available Servicessection, clickManageon theAnalyticstile. You are redirected to the Analytics overview page.

  2. On theSecuritytile, clickRequest Trial获得试用版。的Request Trialbutton changes toView trial status.

  You receive an email when your request is approved and trial becomes available. On the Citrix Cloud page, theAnalyticstile moves to theMy Servicessection. You can use the trial for a maximum 60 days period. For more information on service trials, seeCitrix Cloud Service Trials.

• Subscribe to Citrix Analytics for Security. To purchase a Citrix Analytics for Security subscription, visit//m.giftsix.com/en-in/products/citrix-analytics/form/inquiry/and contact a Citrix Analytics expert who can help you.

Note

With effect from February 03, 2020, Citrix Analytics for Security is no longer included with the Workspace Premium and the Workspace Premium Plus subscriptions. Customers who have purchased the Workspace Premium or the Workspace Premium Plus subscription before February 03, 2020 can access Citrix Analytics for Security as a part of the Workspace subscription until their subscription expires.

Citrix安全现在提供了一个分析add-on service with the Citrix Workspace packages- Workspace Standard, Workspace Premium, and Workspace Premium Plus. For more information, seeCitrix Cloud services.

Step 3: Manage Security Analytics

After you have the necessary subscription or are authorized to access the trial, on the Analytics overview page, theRequest Trialbutton for the Security offering changes toManage. ClickManageto view the user dashboard.

Analytics supports bothCitrix data sourcesandexternal data sources. It automatically discovers the Citrix data sources associated with your Citrix Cloud account. To receive data from external data sources, you need to integrate the external data sources with Analytics. To view your discovered data sources, clickSettings > Data Sources > Security.

What’s next

• Enable data processing on your discovered data sources to allow Analytics to begin processing data. For more information, see the following articles:

  • Citrix data sources:

    • Citrix Content Collaboration

    • Citrix Endpoint Management

    • Citrix Gateway

    • Citrix Secure Private Access

    • Citrix Virtual Apps and Desktops and Citrix DaaS

  • External data sources:

    • Microsoft Graph Security

    • Microsoft Active Directory

• Export processed data from Analytics to the following products:

  • Splunk

  • Microsoft Azure Sentinel

  • Elasticsearch

  • Other SIEMs using Kafka or Logstash based data connector

• Use theUsers dashboard查看用户及其secu发现的rity risk profiles. TheUsersdashboard is the launching point into user behavior analysis and threat prevention.

  Note

  If you are using Analytics for the first time, the user risk profiles take some time to appear on the dashboard. Analytics uses machine learning to determine the risky pattern or anomalies in the user events and identifies the user profiles as high risk, medium risk, and low risk based on the severity of the risks.

• Use theself-service searchfeature to view and filter the user events (raw data) received from the data sources.