Skip to main content

​
Overview

The Guardicore Assets integration enables ThreatAware to collect read-only data from your Guardicore Assets environment, providing visibility into discovered assets and network segmentation.
Connection Method: API Setup Time: 15 minutes Access Required: Administrator account

​
Data collected

The Guardicore Assets integration provides:
  • Discovered assets and devices
  • Asset tags and classifications
  • Network segmentation policies
  • Asset communication data

​
Setup instructions

1

Log in to Guardicore

Access your Guardicore platform with administrator credentials.
2

Create Service Account

Create a dedicated account for ThreatAware with agent viewing permissions:
  • Navigate to user/account management in Guardicore
  • Create a new account with a strong, complex password (this acts as your API credential)
  • Ensure the account has permissions to view agents and assets
  • Disable two-factor authentication on this account (use a complex password instead)
  • Note the Username and Password for later use
Use a sufficiently long and complex password (minimum 16 characters) as this acts as your API key.
3

Retrieve Your Domain

Note the domain of your Guardicore platform:
  • Your domain appears in your Guardicore instance URL
  • Example format: https://guardicore-domain.company.com or https://api.guardicore.com
  • Copy the domain for use in ThreatAware configuration
The domain is the base URL of your Guardicore instance without any paths.
4

Configure in ThreatAware

Complete the integration setup in ThreatAware:
  • Open ThreatAware and navigate to Settings > Integrations
  • Search for and select Guardicore Assets
  • Enter the required credentials:
    • Username: The account created in Guardicore
    • Password: The complex password for the account
    • Domain: Your Guardicore platform domain
  • Click Connect to establish the integration
5

Verify Connection

After connecting, verify the integration is working:
  • Check the Integration Status to confirm it shows Active
  • Wait for the initial data sync (typically within 1 hour)
  • Verify Guardicore asset data appears in ThreatAware

​
Required credentials

Field Name: Guardicore Assets Username Type: String Description: The username of the service account created in GuardicoreThis account must have permissions to view agents and assets.
Field Name: Guardicore Assets Password Type: Password (encrypted) Description: The complex password associated with the Guardicore service account
This acts as your API key. Use a strong password (minimum 16 characters with mixed case, numbers, and special characters).
Store this credential securely in your organisation’s password manager for future reference.
Field Name: Guardicore Assets Domain Type: String Description: The base domain of your Guardicore platform instanceFormat: https://guardicore-domain.company.com or similar Example: https://api.guardicore.com or https://guardicore.acme.com

​
Verification and troubleshooting

Symptoms: Integration status shows authentication failureSolutions:
  • Verify the Username and Password are correct
  • Ensure the password was copied without extra spaces or special character encoding issues
  • Confirm the account has not been deleted or disabled in Guardicore
  • Check that the account has permissions to view agents and assets
  • Verify two-factor authentication is disabled on the account
Symptoms: Integration fails to connect or times outSolutions:
  • Verify the Domain is correct and matches your Guardicore instance URL
  • Check firewall rules allow outbound HTTPS (443) to your Guardicore domain
  • Confirm the Guardicore service is operational and accessible
  • Test the domain in a browser to ensure it’s reachable
  • Check that the domain includes the protocol (https://)
Symptoms: Integration connects but no asset data appearsSolutions:
  • Verify the account has agent viewing permissions in Guardicore
  • Check that the account has not been restricted to specific scopes
  • Confirm the account is active and not disabled
  • Review account permissions in Guardicore user management
Symptoms: Integration shows active but no asset data appearsSolutions:
  • Verify there is asset discovery data in Guardicore to collect
  • Check that agents are properly registered in your Guardicore instance
  • Wait for the next sync cycle (typically hourly)
  • Review ThreatAware integration logs for detailed error messages
  • Contact Guardicore support if the issue persists

​
Best practices

Credential Management
  • Create a dedicated service account specifically for ThreatAware
  • Use a very strong password (minimum 16 characters) with mixed complexity
  • Document credentials securely in your organisation’s password manager
  • Rotate passwords annually or per your security policy
  • Monitor for authentication failures in ThreatAware regularly
Security Considerations
  • Only grant the minimum necessary permissions (agent viewing)
  • Disable two-factor authentication on the service account
  • Review access logs in Guardicore periodically for the service account
  • Never use a personal admin account; maintain a dedicated service account
  • Follow your organisation’s least privilege principles