> ## Documentation Index
> Fetch the complete documentation index at: https://docs.threataware.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Guardicore Assets

> Connect ThreatAware to Guardicore Assets to monitor asset discovery and segmentation posture

## Overview

The Guardicore Assets integration enables ThreatAware to collect read-only data from your Guardicore Assets environment, providing visibility into discovered assets and network segmentation.

<Info>
  **Connection Method**: API
  **Setup Time**: 15 minutes
  **Access Required**: Administrator account
</Info>

## Data collected

The Guardicore Assets integration provides:

* Discovered assets and devices
* Asset tags and classifications
* Network segmentation policies
* Asset communication data

## Setup instructions

<Steps>
  <Step title="Log in to Guardicore">
    Access your Guardicore platform with administrator credentials.
  </Step>

  <Step title="Create Service Account">
    Create a dedicated account for ThreatAware with agent viewing permissions:

    * Navigate to user/account management in Guardicore
    * Create a new account with a strong, complex password (this acts as your API credential)
    * Ensure the account has permissions to view agents and assets
    * Disable two-factor authentication on this account (use a complex password instead)
    * Note the **Username** and **Password** for later use

    <Warning>
      Use a sufficiently long and complex password (minimum 16 characters) as this acts as your API key.
    </Warning>
  </Step>

  <Step title="Retrieve Your Domain">
    Note the domain of your Guardicore platform:

    * Your domain appears in your Guardicore instance URL
    * Example format: `https://guardicore-domain.company.com` or `https://api.guardicore.com`
    * Copy the domain for use in ThreatAware configuration

    <Tip>
      The domain is the base URL of your Guardicore instance without any paths.
    </Tip>
  </Step>

  <Step title="Configure in ThreatAware">
    Complete the integration setup in ThreatAware:

    * Open ThreatAware and navigate to **Settings** > **Integrations**
    * Search for and select **Guardicore Assets**
    * Enter the required credentials:
      * **Username**: The account created in Guardicore
      * **Password**: The complex password for the account
      * **Domain**: Your Guardicore platform domain
    * Click **Connect** to establish the integration
  </Step>

  <Step title="Verify Connection">
    After connecting, verify the integration is working:

    * Check the **Integration Status** to confirm it shows **Active**
    * Wait for the initial data sync (typically within 1 hour)
    * Verify Guardicore asset data appears in ThreatAware
  </Step>
</Steps>

## Required credentials

<AccordionGroup>
  <Accordion title="Username" icon="user">
    **Field Name**: Guardicore Assets Username
    **Type**: String
    **Description**: The username of the service account created in Guardicore

    This account must have permissions to view agents and assets.
  </Accordion>

  <Accordion title="Password" icon="lock">
    **Field Name**: Guardicore Assets Password
    **Type**: Password (encrypted)
    **Description**: The complex password associated with the Guardicore service account

    <Warning>
      This acts as your API key. Use a strong password (minimum 16 characters with mixed case, numbers, and special characters).
    </Warning>

    <Tip>
      Store this credential securely in your organisation's password manager for future reference.
    </Tip>
  </Accordion>

  <Accordion title="Domain" icon="globe">
    **Field Name**: Guardicore Assets Domain
    **Type**: String
    **Description**: The base domain of your Guardicore platform instance

    **Format**: `https://guardicore-domain.company.com` or similar
    **Example**: `https://api.guardicore.com` or `https://guardicore.acme.com`
  </Accordion>
</AccordionGroup>

## Verification and troubleshooting

<AccordionGroup>
  <Accordion title="Invalid Credentials" icon="triangle-exclamation">
    **Symptoms**: Integration status shows authentication failure

    **Solutions**:

    * Verify the **Username** and **Password** are correct
    * Ensure the password was copied without extra spaces or special character encoding issues
    * Confirm the account has not been deleted or disabled in Guardicore
    * Check that the account has permissions to view agents and assets
    * Verify two-factor authentication is disabled on the account
  </Accordion>

  <Accordion title="Connection Timeout" icon="clock">
    **Symptoms**: Integration fails to connect or times out

    **Solutions**:

    * Verify the **Domain** is correct and matches your Guardicore instance URL
    * Check firewall rules allow outbound HTTPS (443) to your Guardicore domain
    * Confirm the Guardicore service is operational and accessible
    * Test the domain in a browser to ensure it's reachable
    * Check that the domain includes the protocol (https\://)
  </Accordion>

  <Accordion title="Permission Denied" icon="ban">
    **Symptoms**: Integration connects but no asset data appears

    **Solutions**:

    * Verify the account has **agent viewing permissions** in Guardicore
    * Check that the account has not been restricted to specific scopes
    * Confirm the account is active and not disabled
    * Review account permissions in Guardicore user management
  </Accordion>

  <Accordion title="No Data After 1 Hour" icon="database">
    **Symptoms**: Integration shows active but no asset data appears

    **Solutions**:

    * Verify there is asset discovery data in Guardicore to collect
    * Check that agents are properly registered in your Guardicore instance
    * Wait for the next sync cycle (typically hourly)
    * Review ThreatAware integration logs for detailed error messages
    * Contact Guardicore support if the issue persists
  </Accordion>
</AccordionGroup>

## Best practices

<Tip>
  **Credential Management**

  * Create a dedicated service account specifically for ThreatAware
  * Use a very strong password (minimum 16 characters) with mixed complexity
  * Document credentials securely in your organisation's password manager
  * Rotate passwords annually or per your security policy
  * Monitor for authentication failures in ThreatAware regularly
</Tip>

<Tip>
  **Security Considerations**

  * Only grant the minimum necessary permissions (agent viewing)
  * Disable two-factor authentication on the service account
  * Review access logs in Guardicore periodically for the service account
  * Never use a personal admin account; maintain a dedicated service account
  * Follow your organisation's least privilege principles
</Tip>