This document describes how to get started with Citrix Analytics for Security for the first time.
Step 1: Sign in to Citrix Cloud
To use Citrix Analytics for Security, you must have a Citrix Cloud account. Go to https://citrix.cloud.com and sign in with your existing Citrix Cloud account.
If you do not have a Citrix Cloud account, you must first create a Citrix Cloud account or join an existing account created by someone else in your organization. For detailed processes and instructions on how to proceed, see Sign Up for Citrix Cloud.
Step 2: Get access to Security Analytics
You can access Citrix Analytics for Security in one of the following ways:
Request a Citrix Analytics for Security trial. After signing in to Citrix Cloud, do the following:
In the Available Services section, click Manage on the Analytics tile. You are redirected to the Analytics overview page.
On the Security tile, click Request Trial to get access to the trial version. The Request Trial button changes to View trial status.
You receive an email when your request is approved and trial becomes available. On the Citrix Cloud page, the Analytics tile moves to the My Services section. You can use the trial for a maximum 60 days period. For more information on service trials, see Citrix Cloud Service Trials.
Subscribe to Citrix Analytics for Security. To purchase a Citrix Analytics for Security subscription, visit https://www.citrix.com/en-in/products/citrix-analytics/form/inquiry/ and contact a Citrix Analytics expert who can help you.
With effect from February 03, 2020, Citrix Analytics for Security is no longer included with the Workspace Premium and the Workspace Premium Plus subscriptions. Customers who have purchased the Workspace Premium or the Workspace Premium Plus subscription before February 03, 2020 can access Citrix Analytics for Security as a part of the Workspace subscription until their subscription expires.
Citrix Analytics for Security is now offered as an add-on service with the Citrix Workspace packages- Workspace Standard, Workspace Premium, and Workspace Premium Plus. For more information, see Citrix Cloud services.
You can view the Analytics demo anytime if you have a Citrix Cloud account. Click Manage on the Analytics tile in Citrix Cloud to go to the Analytics overview page. On the overview page, click the Try Demo link for the Security Analytics offering, or register for a demo on https://www.citrix.com/products/citrix-analytics.html.
Step 3: Manage Security Analytics
After you have the necessary subscription or are authorized to access the trial, on the Analytics overview page, the Request Trial button for the Security offering changes to Manage. Click Manage to view the user dashboard.
Analytics automatically discovers the Citrix Cloud services (data sources) associated to your Citrix Cloud account. To view your discovered data sources, click Settings > Data Sources > Security.
After your data sources are discovered, do the following:
Enable data processing on your discovered data sources to allow Analytics to begin processing data. Analytics processes the incoming data only after you have given your consent. You can also add your on-premises data sources such as Citrix Gateway and Citrix Virtual Apps and Desktops. For more information on how to enable data processing on the data sources, see the following articles:
Use the Users dashboard to view the discovered users and their security risk profiles. The Users dashboard is the launching point into user behavior analysis and threat prevention.
If you are using Analytics for the first time, the user risk profiles take some time to appear on the dashboard. Analytics uses machine learning to determine the risky pattern or anomalies in the user events and identifies the user profiles as high risk, medium risk, and low risk based on the severity of the risks.
Use the self-service search feature to view and filter the user events (raw data) received from the data sources.