How can we help?

Welcome to our explainer videos page! Here, you'll find a variety of guides that walk you through essential features and configurations of Timus Networks. These quick, easy-to-follow videos are designed to help you with everything from setup and configuration to more advanced topics, making your experience with Timus smoother and more efficient. Whether you're a beginner or looking for advanced tips, these videos will guide you every step of the way.

Setting up Zero Trust Access, The Timus Way

Configuring Firewall Rules

Web Filtering and Content Blocking 

Segmenting Traffic With Split Tunneling 

Timus Connect Installation Walk Through 

The Zero trust framework is build around the mindset where you never trust, always verify. See the two minute video below showing how Timus verifies key user behaviors to ensure you are who you say you are.

The Timus Gateway hosts a cloud firewall that performs various functions. See below video showing configuration of an IPsec tunnel from the gateway to an on-premise firewall, giving users connectivity to data no matter where it lives.

With users working from anywhere, the security perimeter is wherever the user is. The Timus adaptive cloud firewall rules follow the user and their identity, not just their device or location, enabling true secure access at the edge.

Each Timus gateway comes standard with a private, static IP address. Benefits include: - Lock down SaaS apps via IP Whitelisting - Single point of entry to the network, providing deeper visibility - Further defining conditional access

At the network layer, Timus' Secure Web Gateway enables web filtering, content blocking and anti-virus to ensure that users are accessing safe applications and sites while working.

This article explains an overview of the primary dashboard within the Timus Manager. Including key indicators, actionable items & insights

The Timus Dashboard is part of Timus Manager. It allows the administrator a comprehensive view of the network, including active users, devices, sites, and events occurring on the client network.

Dashboard components include:

• Users Online: displays the number of users currently connected to the network, providing the administrator with real-time information.
• Devices Online: informs the administrator about the number of devices connected to the network at any given time.
• Sites Online: displays the number of gateways online.
• Traffic: provides the administrator with live and historical data on network traffic, including average upload and download information over the past 4/12/24 hours.

By clicking one of these areas, such as Users Online, you will be redirected to the Users screen. On this screen, the status of the online users within your network is displayed as Active.

Similarly, for Devices Online or Sites Online, you can view the devices and sites listed as Online in the Status section on the respective Devices or Sites screens that will open after clicking.

Most Active Devices: displays the devices that frequently login and out of the network. A maximum of 30 devices can be displayed in the widget.

Most Active Users: displays in order of the users who frequently login and out of the network. A maximum of 30 users can be displayed in the widget.

Events: displays the login and out of users on the network. A maximum of 30 events can be displayed in the widget.

Alerts: shows the total number of events in the upper right corner of the Dashboard as shown in the image below.

These alerts are generated in response to the user/admin sign-in policies under the  Zero Trust Security section.

When you click on the icon, you will be directed to the Alerts page, where you can get more detailed information about the alert.

Profile: Located in the upper right corner of the Dashboard allows you to edit your Account information, Change Password, and change the Session Expiration Time.

Additionally, you can access the Setup Guide or Log out of the interface here.

The partner portal dashboard will provide visibility into customers' relevant information & all data pertaining to your partnership with Timus Networks.

MSPs will leverage the Timus Networks partner portal as their primary dashboard for day to day management of the Timus solution. Within the portal, you will be able to add, remove & manage all clients for both billing and technical management.

Link to - partner portal​

• Administrator permission is not required for version updates.

Open the application. You will see the Timus Connect App End User License Agreement on the screen.

• Read and agree to the EULA.

The e-mail address screen will appear. Enter the e-mail address of your Timus account.

• In the next screen, Select a Network and enter your Password to login. If there is only one network, that network will be selected automatically.If this account is synchronized from a directory service like Microsoft Entra ID(Azure AD), Okta, or Google Workspace, at this moment the login screen will be forwarded to the login screen of that directory service.
• If you check the Keep me logged in option on this screen, the app keeps your login information for your next login.

If you trigger a user sign-in policy of Timus Manager with a behavior when you try to login, you may encounter a different authentication method like two-factor authorization.

The screen that opens is the application's main screen. On this screen, you will see the following menu items:

• Connection
• Account
• Settings
• Support

Connection

Follow the steps below to establish a connection by using the Timus Connect Windows application:

• Enter the login information provided by your company to connect you to the screen.
• The Gateway/Connection screen will appear.
• Here, you will need to select the Gateway. In the gateway selection list, the active sites to which the user is allowed to access will be available.

The round-trip traffic duration to each active gateway will be displayed next to the gateway. The lower the duration, the faster the connection.

• If you want the application to select the gateway for the fastest connection by default, choose Select Fastest.
• If you want to connect via a specific gateway, select this gateway from the drop-down list.
• Click Connect and wait for the connection to be established. Connection information will be updated as Connected in a short time.
• On the connection status screen, you can view the connection status, Private IP Address, and Public IP Address information.
• Click on Disconnect to disconnect.

 

 

 

Account

On the Account menu, you can

• View your account name,
• Manage account,
• End your login session using the Sign Out feature.

 

To change your password:

1. Click Manage account.
2. Enter your current password and then enter your new password and click Confirm.

Settings

On the Settings menu,

• You can select one of the VPN protocols we offer, WireGuard or OpenVPN.
• By enabling the Start on Boot feature, you can ensure that the Timus Connect App is always running without needing to be manually launched every time your device is turned on.
• If you are unable to modify or turn features on or off, it indicates that the administrator has closed that feature to user selection based on their preference.

Split tunnel configuration works on Windows when the tunnel protocol is WireGuard.

Support

On the Support menu, you can

• Install SSL certificates.
• Share your feedback with us.
• Collect logs: When you click this button, a file containing application and system logs will be created in the file patch you specified. This file will mainly be used for support purposes when necessary.
• About: This page will give you some information regarding Timus Connect Version, Device Model, OS Type, OS Name, OS Version, OS Architecture.

Once you have any issues with the Timus Connect Application, you click on Collect log. it will want you to select a folder to create a log file, which will have all the .log files needed for troubleshooting. You can send the file to one of our technical support specialists to have it analyzed.

 

You will get a notification message as shown in the image below once you click on Collect log. This process can take up to 10 seconds.

Once the log file has been successfully created, you will see the pop-up message as shown in the image below.

 

NOTE:

Powershell Script - Windows
To run on a local machine without RMM, you may have to bypass the machine’s execution policy with:
powershell.exe -noprofile -executionpolicy bypass -file '.\Timus Silent Install.ps1'

Windows:

<#
Timus Connect Windows Installation Script
***Always review to make sure you know what a script is doing.***


* DISCLAIMER OF WARRANTIES:
*
* THE SOFTWARE PROVIDED HEREUNDER IS PROVIDED ON AN "AS IS" BASIS, WITHOUT
* ANY WARRANTIES OR REPRESENTATIONS EXPRESS, IMPLIED OR STATUTORY; INCLUDING,
* WITHOUT LIMITATION, WARRANTIES OF QUALITY, PERFORMANCE, NONINFRINGEMENT,
* MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. NOR ARE THERE ANY
* WARRANTIES CREATED BY A COURSE OR DEALING, COURSE OF PERFORMANCE OR TRADE
* USAGE. FURTHERMORE, THERE ARE NO WARRANTIES THAT THE SOFTWARE WILL MEET
* YOUR NEEDS OR BE FREE FROM ERRORS, OR THAT THE OPERATION OF THE SOFTWARE
* WILL BE UNINTERRUPTED. IN NO EVENT SHALL THE COPYRIGHT HOLDERS OR
* CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
* EXEMPLARY, OR CONSEQUENTIAL DAMAGES HOWEVER CAUSED AND ON ANY THEORY OF
* LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
* NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
* SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

#####################################################################################
<#
1. Check to see if the application is already installed
If already installed, exits the script. Otherwise proceeds with section 2.
#>

$appName = 'Timus Connect'
$RegUninstallKey = 'HKLM:\Software\Microsoft\Windows\CurrentVersion\Uninstall\*'
$installedApplication = Get-ItemProperty -Path $RegUninstallKey | Where-Object {$_.DisplayName -like "*$appName*"}

if ($installedApplication) {
Write-Host "Application is already installed, exiting script"
} 
else {
Write-Host "Application is not installed." 
}

#####################################################################################
<#
2. Check to see if this is a desktop or laptop by looking for a battery

#!#! Delete this whole line if you want to disable this section #!#! #>

$systemType = "Unknown"
$BatteryStatus = (Get-WmiObject -Class Win32_Battery -EA SilentlyContinue).Status

if ($BatteryStatus) {
$systemType = "Laptop"
} else {
$systemType = "Desktop"
}
Write-Output "This device is a" $systemType

#2.1 At this time I am only automating the Timus installation on laptops

if ($systemType -eq "Desktop") {
Write-Output "The device is a desktop, exiting script."

}
else {
Write-Output "This is a laptop, proceeding with download."
}
#>

#####################################################################################
<#
3. Does the download destination exist?
If not, create download directory
Default download directory is "C:\temp\Timus Networks"
#>

$dlFolder = "C:\temp\Timus Networks"
$dlFolderTest = Test-Path -Path $dlFolder
$dlDest = "$dlFolder\Timus-Connect.exe"
$dlUrl = "https://repo.timuscloud.com/connect/Timus-Connect.exe"
$tempFolderExists = Test-Path -Path "C:\Temp"

if ($dlFolderTest -eq $true) {
Write-Output "Download directory exists, continuing with download."
}
else {
Write-Output "Download directory does not exist, creating directory"
New-Item -ItemType Directory -Path $dlFolder -Verbose -ErrorAction Stop
}

#####################################################################################
<#
4. Starting download to destination
Will try three different methods to download the file: Invoke-WebRequest, WebClient, and finally Start-BitsTransfer.
If all three fail, the script will exit with a failure.
#>

try {
Write-Output "Trying to download..."
Invoke-WebRequest -Uri $dlUrl -OutFile $dlDest
Write-Output "Invoke-WebRequest download was successful, moving on to installation..."
}
catch {
Write-Output "Invoke-Webrequest failed, trying webclient download..."
try {
$webClient = New-Object System.Net.WebClient
$webClient.DownloadFile($dlUrl, $dlDest)
Write-Output "WebClient download was successful, moving on to installation"
} 
catch {
Write-Output "WebClient download failed, starting BitsTransfer..."

try {
Start-BitsTransfer -Source $dlUrl -Destination $dlDest
Write-Output "Downloaded successfully with BitsTransfer, moving on to installation..."
}
catch {
Write-Host "All methods failed. Unable to download the file. Exiting."
Exit 1

}
}
}

#####################################################################################
<#
5. Starts Installation of the Timus Connect App.
Upon error, the script will exit.
Checks registry for uninstall key for Timus Connect.

#>
Start-Process -Wait -FilePath $dlDest -ArgumentList "/S" -PassThru -ErrorAction Stop

#Check for successful install
$appName = 'Timus Connect'
$RegUninstallKey = 'HKLM:\Software\Microsoft\Windows\CurrentVersion\Uninstall\*'
$installedApplication = Get-ItemProperty -Path $RegUninstallKey | Where-Object {$_.DisplayName -like "*$appName*"}

if ($installedApplication) {
Write-Host "Application is installed."
} else {
Write-Host "Application is not installed."

}

#####################################################################################
<#
6. Performs cleanup of created files/folders
If download root existed prior to script, will only remove newly created folder.
For example, if C:\temp already existed, the script will only remove C:\temp\Timus Networks
and not C:\temp as a whole.

If download root did not exist, it will delete the whole folder

#>

if ($tempFolderExists -eq $true) {
Write-Output "Temp folder existed prior to download, only removing" $dlFolder
Remove-Item -Path $dlFolder -Recurse -Force
Write-Output "Cleanup complete, exiting..."
Exit 0
}
else {
Write-Output "Temp folder did not exist prior to script, deleting Temp folder..."
Remove-Item -Path "C:\Temp" -Recurse -Force
Write-Output "Cleanup complete, exiting..."
Exit 0

}

This script is designed to automate the installation of a digital certificate into the "Trusted Root Certification Authorities" store on a local machine. It can be distributed and executed via Remote Monitoring and Management (RMM) tools, making it ideal for deploying trusted certificates across multiple systems in a managed environment.
 

# Path to the certificate file
$certPath = "C:\Users\username\Downloads\DESKTOP_CERTIFICATE.der"# Check if the file exists
if (Test-Path $certPath) {
# Import the certificate into the Trusted Root Certification Authorities store
$cert = New-Object System.Security.Cryptography.X509Certificates.X509Certificate2
$cert.Import($certPath) # Add the certificate to the local machine Trusted Root store
$store = New-Object System.Security.Cryptography.X509Certificates.X509Store "Root", "LocalMachine"
$store.Open("ReadWrite")
$store.Add($cert)
$store.Close() Write-Host "Certificate installed successfully."
} else {
Write-Host "Certificate file not found at $certPath. Exiting."
}        

Note:

Bash Script - Mac
Ensure the script has execute permissions by using the following terminal command:
chmod +x /path/to/script.sh

Mac:

#!/bin/bash

# Check if the machine is a MacBook (laptop)
MODEL_IDENTIFIER=$(system_profiler SPHardwareDataType | awk '/Model Identifier/ {print $3}')
if [[ ! "$MODEL_IDENTIFIER" =~ "MacBook" ]]; then
echo "This script is intended for MacBook models only."
exit 1
else
echo "Thank you for using Timus ZTNA. Your secure remote access will be enabled shortly."
fi

# Specify the name of the app to check if it's installed
APP_NAME="Timus Connect.app"
APP_PATH="/Applications/$APP_NAME"

# Specify the URL and local directory and path for the .pkg
PKG_URL="https://repo.timuscloud.com/connect/Timus-Connect.pkg"
PKG_DIR="/tmp/Timus-Connect"
PKG_LOCAL_PATH="$PKG_DIR/Timus-Connect.pkg"

# Check if the app is already installed
if [ -d "$APP_PATH" ]; then
echo "$APP_NAME is already installed."
else
echo "$APP_NAME is not installed."

# Create the directory if it doesn't exist
[ ! -d "$PKG_DIR" ] && mkdir -p "$PKG_DIR"

# Download the .pkg file from the specified URL
echo "Downloading $PKG_NAME..."
curl -o "$PKG_LOCAL_PATH" "$PKG_URL"
if [ $? -eq 0 ]; then
echo "Download successful!"

# Install the .pkg
echo "Installing $PKG_NAME..."
installer -pkg "$PKG_LOCAL_PATH" -target /
if [ $? -eq 0 ]; then
echo "Installation successful!"

# Open the app
echo "Opening $APP_NAME..."
open "$APP_PATH"

# Optionally, you can clean up by removing the downloaded .pkg
rm "$PKG_LOCAL_PATH"
rmdir "$PKG_DIR" # This will only remove the directory if it's empty

else
echo "Error during installation."
fi

else
echo "Error downloading $PKG_NAME."
fi
fi

exit 0

Policy for All Users:

This password policy applies to all user accounts that require a Timus password. Users that single sign-on with their third party Identity Provider accounts do not have Timus passwords, thus they are not bound by this policy.

Active Rules:

We have 11 password policies. 6 of them are active and 5 of them are inactive in default as shown in the images below. You are able to change the password policies however you want

Once you click on Edit, you will be able to configure the policies however you want.

Minimum character length

This will be active all the time. You are able to change the minimum character length, which is 8 in default, to any numbers that you want.

Minimum number of lower case letters

We recommend using at least 1 lower-case letter to make the passwords stronger.

Minimum number of upper case letters

We recommend using at least 1 upper-case letter to make the passwords stronger.

Minimum number of digits (0-9) We recommend using at least 1 digit to make the password stronger.

Minimum number of special characters

If selected, password must include special characters such as !@#$-%&*+. We recommend using at least 1 special character to make the password stronger.

Maximum number of consecutive digits

For example; if 3 is selected, up to 3 consecutive digits such as 01, 012, 123, 456, 789 can be included in the password, 4 consecutive digits like 0123 cannot.

Cannot use commonly used passwords

Commonly used passwords can be very easily detected by automated tools of bad actors, thus using them leads to a vulnerability. This check is insensitive for upper-case and lower-case letters.

Cannot contain keywords

You can add the keywords, which you don't want the users/admins to use in their passwords, into here so that the users/admins are not able to use these keywords. Maximum 10 keywords can be entered.

Cannot contain first part of user's email address

For example, the password of the user with the email address johndoe@abc.com cannot contain the text 'johndoe'.

Cannot contain user's first name

If you activate this, the users/admins will not be able to use their user's first name in their passwords. This check is insensitive for upper-case and lower-case letters.

Cannot contain user's last name

If you activate this, the users/admins will not be able to use their user's last name in their passwords. This check is insensitive for upper-case and lower-case letters.

Password expires in

Entered value will be set as the administrator's password expiration limit. Minimum value is 1 day and maximum value is 10.000 days.

This guide will walk you through the process of integrating JumpCloud with Timus using SAML 2.0 for secure Single Sign-On (SSO). Follow these steps to configure your JumpCloud application and complete the setup within Timus Manager.

1. Creating an JumpCloud Application

1. Navigate to Applications

   • Log into https://console.jumpcloud.com/login/admin with your credentials.
   • On the left menu, go to SSO Applications.
   

2. Create a New Application

   • If this is your first application, click Get Started. Otherwise, click Add New Application.
   • Search for SAML 2.0 in the application search bar and select it.

   

   • Click Next and give your application a name in the Display Label field.
   • You can also upload a custom logo for the app if necessary.
   • Click Save Application.

   

2. Configuring SAML Settings

After saving, you will be directed to the configuration screen.

1. IdP Entity ID and SP Entity ID: Paste JumpCloud’s provided IDP URL (visible in the SSO tab).

   

   

2. ACS URLs: Default URL: https://auth.timuscloud.com/user/external/saml

• Subject NameID: Set NameID to email

• NameID Format: Select urn:oasis:names:tc:SAML:2.0:nameid-format:unspecified

• Signature Algorithm: Set to RSA-SHA256

• Signing Option: Choose “Assertion and Response”.

  

3. Adding User Attributes

• Click Add Attribute to add required user attributes like firstname and lastname.

4. Assigning User Groups

• Navigate to the User Groups tab and select the user groups that will have access to this SAML application.
• Click Save.

3. Configuring Timus Manager for SAML

1. Access Timus Manager:

   • Sign in to Timus Manager.
   • Go to Settings -> Integrations.

2. Manage SAML 2.0 Integration:

   • Click Manage under SAML 2.0.
   • Fill in the fields according to the mapping provided in the table below.

   JumpCloud Name	Timus Equivalent
   IDP URL	Identifier
   IDP URL	Service URL
   IDP Certificate	X.509 Certificate

   

   Note: The IDP Certificate can be downloaded under the SAML Certificate section in JumpCloud. Make sure to use the Hex format certificate.

This completes the SAML configuration for JumpCloud with Timus. Your users can now authenticate securely through JumpCloud to access Timus applications.

4. Test the Application

• Once the configuration is complete, navigate to console.jumpcloud.com/userconsole with a test user.
• Log in using the assigned user credentials.
• Click on the SAML application you just created.
• Ensure that the user is redirected to Timus, and the sign-in process completes without requiring separate credentials.
• If everything works as expected, the user will be successfully created in Timus, and subsequent logins can be done directly from Timus.

Note: Initial login must happen through JumpCloud’s application to create the user in Timus.

1. Identity Providers & Authentication

• Active Directory (on-prem)
  Synchronizes users and groups from Active Directory, enabling users to log in using their AD credentials. Centralizes user management for seamless access with AD-based authentication.
• Google Workspace
  Syncs Google Workspace users and groups with Timus, supporting login through Google Workspace credentials. Simplifies user management for organizations using Google Workspace, ensuring consistent access controls.
• Microsoft Entra ID (cloud)
  Integrates Microsoft Entra ID users and groups with Timus, allowing Entra ID credential sign-in. Suitable for enterprises using Microsoft’s identity solutions to enable secure access.
• Okta
  Syncs users and groups from Okta, permitting sign-in using Okta credentials. Provides robust identity management and access control for organizations with Okta as their primary identity provider.
• SAML 2.0
  Supports secure single sign-on (SSO) integration, allowing users to authenticate using external identity providers once and access their cloud network on Timus. Enhances security and user convenience through centralized authentication. For example, integrating Timus with JumpCloud via SAML 2.0 allows JumpCloud-managed users to log into Timus with their JumpCloud credentials, streamlining access and enhancing security with centralized identity management.

2. Endpoint Protection Platforms

• BitDefender
  Synchronizes BitDefender endpoint protection data with Timus to analyze device posture and security compliance. Monitors endpoint security status, critical for enterprises needing endpoint-level protection insights.
• Heimdal
  Syncs Heimdal endpoint protection status with Timus, enabling device posture analysis across connected endpoints. Ensures devices meet security standards, aiding in endpoint compliance.
• Microsoft Defender
  Integrates with Microsoft Defender to monitor and analyze device posture for each endpoint connected to Timus. Essential for businesses with Microsoft Defender, allowing continuous device health and posture assessment.
• SentinelOne
  Connects SentinelOne endpoint protection to Timus, providing detailed analysis of device posture and security status. Suitable for organizations using SentinelOne, enabling real-time device compliance and risk monitoring.

3. Notifications

• Slack
  Allows Timus to push notifications to a specified Slack channel about user, device, or network threat events. Ideal for teams using Slack for real-time communication, providing visibility into security and user activity alerts.
• Telegram
  Enables a bot to send notifications on network activity, device events, or threat alerts directly to a Telegram channel. Ensures rapid dissemination of critical security updates for organizations using Telegram.

4. Data Synchronization

• Google Sheets
  Provides the ability to export network user data or device sign-in/sign-out logs into Google Sheets for analysis. Facilitates data tracking and reporting by consolidating user activity logs and device information into an accessible format.

5. Billing Integration

• Connectwise PSA
  Streamlines invoicing and billing processes for MSPs, ensuring accuracy by syncing product catalogs and usage data directly with ConnectWise agreements. This reduces manual input, saving time and reducing the risk of errors. With the integration, MSPs can anticipate smoother billing operations, thanks to automated syncing of product and usage data. This integration provides seamless invoicing management, allowing partners to focus on customer success rather than manual billing tasks.

• To view the site details, go to Timus Manager and click on the Sites page.
• Find the site whose details you want to view and click on the ellipsis icon in the corresponding row.
• Select "View" to access the page with site details.
• This page contains a summary table titled "Connectivity." The table provides information on three parameters: Connection Health: indicates the overall status and reliability of the connections Throughput: refers to the amount of data that can be transmitted through the network within a given time frame, indicating the network's capacity. Efficiency: measures how effectively the network utilizes its resources to transmit data.

This Connectivity section helps you make informed decisions or take necessary actions to optimize network connectivity.

• The Network Statistics graph shows the Health or Throughput data for the Primary WAN over the Last 7/15 Days, Last Month, or Custom date range.

• List of the networks of the site.
• Site information widget shows the most important details about the site and has the ability to configure the site with the Edit feature at the upper right of the widget.

• Action can be Allow or Deny.
• Status is selected as Enabled by default. Yet, you can select Disabled while creating a rule to make it enabled later.
• The Source can be Network, Site, IP, Location(GeoIP), User, Team, Device, Tag and you are allowed to add multiple sources.
• The Destination can be Network, Site, IP, User, Team, Device, Tag, Category, Website, Keywords and you are allowed to add multiple destinations.
• The service can be selected from the pre-defined list as shown in the image below or you can select Custom to customize the rule. If you would like to define a rule for both TCP and UDP, you can select TCP/UDP as shown in the image below. You are allowed to define multiple services.
• You can block/allow any countries by using the option Location on both Source and Destination.

Services

Service Category
HTTP
Web Access
HTTPS
VoIp
SIP
Database Access
MSSQL_SERVER
MSSQL_MONITOR
MYSQL
POSTGRESQL
Remote Access
RDP
SSH
TELNET
VNC-RFB
RPC
DCE-RPC
File Access
FTP_DATA
FTP_CONTROL
TFTP
SMB
Network Services
DNS
DNS_MULTICAST
DNS_OVER_TLS
DNS_OVER_QUIC
DHCP_SERVER
DHCP_CLIENT
NTP
SNMP
SYSLOG
SSDP_UDP
SSDP_TCP
Email
IMAP
IMAPS
POP3
POP3S
SMTP
SMTPS
Authentication
LDAP
LDAPS
RADIUS
KERBEROS_AUTH
KERBEROS_PWD
KERBEROS_ADMIN
Protocol
HOPOPT
ICMP
IGMP
GGP
IPv4
ST
TCP
CBT
EGP
IGP
BBN-RCC-MON
NVP-II
PUP
ARGUS
EMCON
XNET
CHAOS
UDP
MUX
DCN-MEAS
HMP
PRM
XNS-IDP
TRUNK-1
TRUNK-2
LEAF-1
LEAF-2
RDP
IRTP
ISO-TP4
NETBLT
MFE-NSP
MERIT-INP
DCCP
3PC
IDPR
XTP
DDP
IDPR-CMTP
TP++
IL
IPV6
SDRP
IPV6-ROUTE
IPV6_FRAG
IDRP
RSVP
GRE
DSR
BNA
ESP
AH
I-NLSP
SWIPE
NARP
MIN-IPV4
TLSP
SKIP
IPV6-ICMP
IPV6_NONXT
IPV6_OPTS
CFTP
SAT-EXPAK
KRYPTOLAN
RVD
IPPC
SAT-MON
VISA
IPCV
CPNX
CPHB
WSN
PVP
BR-SAT-MON
SUN-ND
WB-MON
WB-EXPAK
ISO-IP
VMTP
SECURE-VMTP
VINES
IPTM
NSFNET-IGP
DGP
TCF
EIGRP
OSPFIGP
SPRITE-RPC
LARP
MTP
AX.25
IPIP
MICP
SCC-SP
ETHERIP
ENCAP
GMTP
IFMP
PNNI
PIM
ARIS
SCPS
QNX
A/N
IPCOMP
SNP
COMPAQ-PEER
IPX-IN-IP
VRRP
PGM
L2TP
DDX
IATP
STP
SRP
UTI
SMP
SM
PTP
ISIS_OVER_IPV4
FIRE
CRTP
CRUDP
SSCOPMCE
IPLT
SPS
PIPE
SCTP
FC
RSVP-E2E-IGNORE
MOBILITY_HEADER
UDPLITE
MPLS-IN-IP
MANET
HIP
SHIM6
WESP
ROHC
ETHERNET
AGGFRAG
NSH

• Create a Forwarding rule by going to Timus Manager -> Rules -> Forwarding page.

• Once you click on Create New, you will be able to see the page as shown in the image below:

• You can define a range for both source and destination ports like 1000-2000.
• Once you extend the Schedule, you can decide if the forwarding will be active Everyday (all the time) or it will be active for a specific period of time. It has been selected as Everyday by default.

• Map to Port: When enabled, destination ports loop sequentially for source ports.

The Map to Port feature allows you to specify a range of ports on both protocols, TCP or UDP, for instance, 70-75, and map them to a destination range, such as 80-85. Ports are forwarded sequentially: port 70 maps to port 80, port 71 maps to port 81, and so on. This feature is useful for port forwarding in a one-to-one manner."

• View all the traffic in your network with details on Timus Manager -> Insights -> Traffic Logs page,
• Search the list using Time, Source, Action, Destination, Factor parameters on the Logs tab.
• Clear the filters you have created by clicking on Clear All Filters.
• You can gather more information by clicking the icon in the Details section to identify if there's been an issue.

• You are able to check the Rule IDs of the traffic logs to detect which rule allows or denies the traffic.
• If you have previously enabled SSL Inspection for a user or device, you can access detailed data by going to the User or Device tabs.

In the Traffic Logs page, where you can access comprehensive data presented through tables and graphics organized into various tabs. Here's an overview of what you'll find in each tab:

You can download the csv file to get a report for your traffic by clicking on Export at the top right of the screen as shown in the image above.

Only the last 10.000 records will be exported when you have created it.

When you have clicked on the Export button, you will see the pop-up above when the Export process is completed successfully. You can click on Download to get your report.

• User Tab: User Information Top Most Active Users Detailed User Logs Most Active Devices per User Traffic Analysis Most Frequently Accessed Resources Time Spent by Users
• Team Tab: Top Most Active Teams Team-specific Activity Data Most Active Devices within Teams Most Used Resources by Teams Time Spent by Teams
• Device Tab: Device Information Most Active Devices Device-specific Activity Data Most Used Resources by Devices Time Spent on Devices
• Applications Tab: Most Used Applications Application-specific Usage Data
• Website Tab: Most Accessed Resources on Websites
• Network Tab: Most Active Networks

This organized approach allows you to analyze user behavior, team activities, device usage, application preferences, website interactions, and network engagement.

Dive into detailed insights to make informed decisions about your product usage and optimize your resources effectively.

1. Go to Timus Manager -> Insights -> Traffic Logs page.
2. You can view all traffic on the Logs tab without navigating to other tabs.
3. To configure the list, utilize the search bar. To view a specific user's traffic, navigate to the Source heading.
4. Click on "Select" here.
5. Click on "User".
6. Click on "Start typing..." Select a user or scroll down the dropdown menu to find a user and view their traffic logs.

Click on the "Search" button.

By clicking the Search button, you can access a list displaying all the traffic generated by this user on your network.

To access the details of the traffic logs listed, click on the blue info icon located at the far right of the respective line.

You can use the Search bar to display more specific information about the logs you want to see.

Simply insert the desired columns with the appropriate command:

Time: Select the Start and End date of the traffic logs you want to display on the list.

Action: Choose between Drop or Allow.

Destination: Specify Team, Device, IP, Network, Site, or Any.

Factor: Specify Application, Category, Website, Keywords, or Any.

1. Similarly, to see a user's traffic logs and in general, to view all user's traffic logs Click the User tab on this page.
2. To view detailed user traffic, select a user from the Select section at the top of the page.

After selecting the user, you display the following information on the page.

• Most Active Users,
• Users Logs,
• The user's Most Active Devices,
• Traffic,

• Applications and Websites as the user's Most Used Resources,

• Time Spent as applications and websites where the user spends the most time,

• The user's Events on your network.

You can also view traffic details for the following components by going to the Insights dropdown > Traffic Logs page:

• Logs
• User
• Team
• Device
• Application
• Website
• Network

Manage Templates

1. Go to Timus Manager -> Insights -> Automated Reports page.
2. To manage templates, click on the "Manage Templates" button located in the upper right corner of the Reports page.
3. From here, you can view the available templates, which are divided into two categories:
   Predefined and Custom.

Before creating a report, it is important to first manage the templates. This will allow you to choose analytics and insights you want to include in your report, using either predefined or custom templates.

To view the template or create a report using Timus's default Predefined Weekly Template, click the ellipsis icon next to it.

You also have the option to use the template as a basis for a new one:

Create Custom Template

To create a custom template,

1. Click the "Create Custom Template" button in the Manage Templates screen and enter the title of the new template.
2. After entering a title for the new template and clicking the Create Custom Template button, the page for your newly created template will be displayed on your screen.
    
3. To add widgets to the template's screen, click the "Add Widget" button. This will open the
   "Add Widget" pop-up window where you can select the widgets you want to display.
4. After you click the "Add" button, use the drag-and-drop method to move widgets around the page and arrange the template as desired.
5. If you want to view different data ranges or components, you can add the same widget multiple times.
6. Click "Configure" to adjust the number of components displayed in the tables and view data in the widgets with different Data Range Types.
7. 
8. You can choose between Relative or Fixed data range types and select Daily, Weekly, Monthly, or Yearly parameters for the Data Range.

Create Report

1. Next, go to the Reports page and then, either click the "Create Report" button or select
   "Create Report" from the ellipsis icon of the template row on the Manage Templates pop-up screen.
2. On the Create Report screen, enter a title for the report.
3. Select the Type of report and Template.
4. Add recipients from the Recipients section by entering their information and selecting their email language.
   
   
5. Click "Save" and wait for the Successfully Created notification to appear.
6. To view the report, click the ellipsis icon in the row of the report you created, then click "View".
7. To generate the report, click the Actions button in the upper-right corner of the Reports page and select "Generate Report".
8. You will see a notification that says "Report Result successfully created. Click here to see the result in your browser".
9. Click "Here" to view your on-demand report in your browser.
10. When you add a Recipient, your report will be sent to their e-mail address.
11. If you've scheduled a report, the system will automatically generate and send it to the recipient of your choice.
    • The automated report you created for Daily events is scheduled to run every day without any issues.
    • For Weekly events, the report is set to run every Monday.
    • Monthly reports are generated on the 1st day of each month, such as November 1st and December 1st.
    • Yearly reports are generated on January 1st of every year.

Once your report is created, you can view the results by clicking on the Actions button and selecting the Go to Results page option on the report's page.

The generated reports will be saved on the report's page. You can access and view all reports generated on different dates by using the Displayed Report filter.

To configure the widgets, click on the "Show Template" option located on the report page. This is the same process as when you access it from the "Manage Templates" -> "Edit" page.

Timus and ConnectWise integration helps MSPs automate billing tasks by syncing product catalog details and usage data directly with ConnectWise agreements. This setup simplifies invoicing, making it easier to manage customer billing automatically and keep everything accurate without manual input. Here's how to set up ConnectWise integration:

1. Create a Security Role for Timus

This role will generate an API key for the integration. You may use another role with the necessary permissions if preferred.

• Go to ConnectWise PSA and navigate to System > Security Roles.

• Click the “+” button to add a new security role.

• Name the role and save it.

• Assign the required permissions, then click “Save”.
• Set “Inquire Level” to “All” for “Company Maintenance” under the “Companies” section.
• Set “Add Level”, “Edit Level” and “Inquire Level” to “All” for “Agreements” under the “Finance” section.
• Set “Inquire Level” to “All” for “Product Catalog” under the “Procurement” section.

2. Generate an API Key

• Navigate to System > Members > API Members and click the “+” button to add a new API member.

• Fill in the “Member ID” and “Member Name” fields, and choose the security role you created.

• Save the member details.
• Go to the “API Keys” tab, click “+” to create a new API key, enter a description, and save.

• Go to the “API Keys” tab, click “+” to create a new API key, enter a description, and save.

Note: Save the public and private keys. The private key is only visible upon creation.

3. Set Up the ConnectWise Integration on the Partner Portal

• Go to Settings > Integrations in the Partner Portal.

• Select ConnectWise PSA to configure the integration.

• Enter your ConnectWise Site URL, Company ID, Public Key, and Private Key. Test the integration before saving.
• For example, if you are logging in to ConnectWise through this link https://na.myconnectwise.net/, enter “https://na.myconnectwise.net” to the ConnectWise Site URL field.
• If the test is successful, click “Save”.
• Enable the integration by switching the Status toggle, then click “Save” again. Now, you can access the “Customers” and “Products” tabs for mapping.

4. Customer Mapping

• Navigate to the Customers tab. Select the corresponding ConnectWise Company and agreement, then click the “Map” icon.

1. Repeat for all customers.

5. Product Mapping

• Go to the Products tab to map your products. Users and gateways need to be mapped separately.
• Ensure the ConnectWise product’s “Class” is set to “Agreement” for it to be listed.
• Select the corresponding ConnectWise product and click the “Map” icon.

• Repeat for all products.

5. Synchronization

• When an invoice is generated in Timus, relevant subscriptions are automatically synced with ConnectWise. Only subscriptions with "Monthly" or "Annual with Monthly Payments" cycles are included in the sync.
• The integration creates or updates additions when you assign, update, or cancel a subscription. To ensure a smooth workflow, map all customers and products in ConnectWise; only mapped items will sync correctly.
• When a new subscription is assigned, Timus creates prorated additions in ConnectWise to cover the period from the subscription's start date to the last day of the month. In these cases, the “Effective” date is set to the assignment day, and the “Canceled” date is the month’s end.
  • Note: Timus also prorates the price you enter when creating the products. Unit costs are auto-filled to align with Timus invoices.
• For consolidated invoices, Timus creates a main addition in ConnectWise to reflect the full monthly billing amount. Each main addition has an “Effective” date on the first day of the month and remains active until a further change is made. These additions don’t have a “Canceled” date, as Timus subscriptions renew automatically.
• For any mid-month updates—like adding users or upgrading plans—Timus generates prorated additions covering the time from the change date to the month’s end. These entries are marked with an “Effective” date on the change date and a “Canceled” date at the month’s end to ensure accurate partial-period billing.
  • At the end of the month, the main additions for these subscriptions are set to end. New main additions are then created with the updated details when a consolidated invoice is generated at the start of the following month. This approach ensures that billing in ConnectWise stays in sync with the latest subscription adjustments made in Timus.
• If a subscription is canceled, Timus updates ConnectWise by setting the main addition to end on the last day of the month when the cancellation occurs.

Are you experiencing slower speeds than expected after connecting to the Timus Network? 

Several factors can contribute to this, but don't worry! This guide will help you troubleshoot the issue and get your connection back up to speed.

Initial Steps:

1. Application Updates: Ensure you're using the latest version of the Timus Network client application. Outdated software can sometimes lead to performance issues. You can set automatic updates within the Timus Network client application by accessing your device settings within manage.timusnetworks.com.
2. Conflicting Software: Uninstall any other VPN or network software running in the background. Even unused software might consume resources and affect your bandwidth.

If your client is up-to-date and there are no other programs running that could impact your connectivity. Please check the following troubleshooting steps:

• Check Maximum Transmission Unit (MTU)
• Ping Test with Varying Packet Sizes
• Identify Network Issues (Traceroute & MTR)
• Check Endpoint Configuration
• Performance Testing (Optional)
• Quality of Service (QoS) and ISP Throttling
• Firewall and Security Software

1. Identify Current MTU Setting

macOS:

1. Open Terminal.

2. List network services:

   networksetup -listallnetworkservice
   

3. Check current MTU:

   networksetup -getMTU <network_service>
   

Windows:

1. Open Command Prompt.

2. Check current MTU:

   netsh interface ipv4 show interfaces
   

2. Ping with Specific Packet Sizes

macOS:

1. Open Terminal.

2. Ping with a specific packet size:

   ping -D -s 1472 <gateway_public_ip>
   

Windows:

1. Open Command Prompt.

2. Ping with a specific packet size:

   ping -f -l 1472 <gateway_public_ip>
   

3. Adjust Packet Size Incrementally:

   • Start with 1472 bytes.
   • Reduce the packet size by small increments if you encounter packet loss or errors.
   • Find the largest packet size that does not result in fragmentation or packet loss.

3. Use Traceroute and MTR

Traceroute:

macOS:

1. Open Terminal.

2. Install traceroute (if not already installed):

   brew install traceroute
   

3. Run traceroute:

   traceroute <gateway_public_ip>
   

Windows:

1. Open Command Prompt.

2. Run tracert:

   tracert <gateway_public_ip>
   

MTR:

macOS:

1. Open Terminal.

2. Install mtr (if not already installed):

   brew install mtr
   

3. Run mtr:

   mtr -rw <gateway_public_ip>
   

Windows:

1. Open Command Prompt.
2. Install WinMTR (if not already installed) from https://sourceforge.net/projects/winmtr/.
3. Run WinMTR and enter the gateway IP to start the test.

4. Check Endpoint Configuration

ipconfig /all

macOS:

1. Open Activity Monitor.

2. Monitor CPU and memory usage to ensure they are not maxed out during the VPN connection.

3. Check network interface for errors:

   ifconfig
   

Windows:

1. Open Task Manager.

2. Monitor CPU and memory usage to ensure they are not maxed out during the VPN connection.

3. Check network interface for errors:

   ipconfig /all
   

5. Performance Testing

macOS and Windows:

1. Download and install iPerf3 from https://iperf.fr/.

2. Run iPerf tests to measure raw throughput with and without VPN:

   iperf3 -c ash.speedtest.clouvider.net -p 5200-5209
   

6. Quality of Service (QoS) and ISP Throttling

macOS and Windows:

1. Check network QoS settings on your router or network management interface to ensure no QoS rules are throttling VPN traffic.
2. Confirm with the ISP that there is no throttling of VPN traffic.

7. Firewall and Security Software

macOS:

1. Open System Preferences.
2. Review firewall settings to ensure they are not limiting VPN throughput.
3. Check any installed security software for settings that might affect VPN performance.

Windows:

1. Open Control Panel.
2. Review Windows Defender Firewall settings to ensure they are not limiting VPN throughput.
3. Check any installed security software for settings that might affect VPN performance.

Additional Notes:

• If you're using macOS and don't have Homebrew installed, use the following command in Terminal: /bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)" to install it.  

If none of these steps resolve your bandwidth issue, please contact Timus Network support for further assistance at Support@timusnetworks.com 

What no gateways available mean and possible scenarios

This information message means that if the user is not allowed to connect to any gateway, a specific message will appear in the Timus Connect application.

The administrator must select the remote site for the user in the manager.

But there can be another root cause to show this error when;

• User might not access the Timus Cloud services or doesn’t have internet access.

To verify that, please run:

ping user.timuscloud.com
ping device.timuscloud.com

Also, try to go to user.timuscloud.com or device.timuscloud.com from the browser. If user can not reach connect application will not able to connect.

• timus-connect-background service is not running

  Go to Activity Monitor (Mac) or Task Manager (Windows) on your device and find timus-connect-service.

  Alternatively, you can go to http://localhost:49202 in your browser. If you see the output, it means the service is running.

  

  If you validate that the service is not running, please follow these steps:

  • [MacOS] Validate if service is running

    • Check if the plist file exists

      • Run the commands below to check if they exist:

        #for connect service
        cat /Library/LaunchDaemons/timus-connect-service.plist
        
        #for helper service
        cat /Library/LaunchDaemons/timus-helper-service.plist
        

      • After running the commands, if they exist, please run this command to load the service. After running, please check if the service has started.

        # Avoid if error occurs after running these commands. This is just a make sure none of instance exist on device
        sudo launchctl unload /Library/LaunchDaemons/timus*
        sudo launchctl load /Library/LaunchDaemons/timus*
        

  • [Windows] Validate if service is running

    Find services from search

    

    Make sure this 2 services are exist

    

    If they are not exist and running state try to install them manually see if any error occurs. For clean service install run these commands

    sc.exe stop timus-helper-service
    sc.exe stop timus-connect-service
    
    taskkill /F /IM "timus-connect-service.exe"
    taskkill /F /IM "timus-helper-service.exe"
    
    sc.exe delete timus-connect-service
    sc.exe delete timus-helper-service
    
    cd C:\\Program Files\\Timus Connect\\resources\\service
    
    timus-connect-service.exe -service install && timus-connect-service -service start
    timus-helper-service.exe -service install && timus-helper-service -service start
    

  After validation, if you see that the services are still not running and nothing works, try to start the service manually and check if any crashes occur.

  • [MacOS] Validate if service crash

    Run this command and see if service works

    #for connect service
    sudo /Applications/Timus\\ Connect.app/Contents/Resources/service/timus-connect-service
    
    #for helper service
    sudo /Applications/Timus\\ Connect.app/Contents/Resources/service/timus-helper-service
    

  • [Windows] Validate if service crash

    Run these commands

    cd C:\\Program Files\\Timus Connect\\resources\\service
    timus-connect-service.exe
    

  Let’s assume that a crash happened, which in most cases (99%) is a permission issue.

  At this point, it is better to perform a clean setup by removing all files we have and reinstalling Timus Connect. Please find the section with the clean setup steps for Timus Connect.

  Sometimes, SentinelOne, Bitdefender, or other security tools can prevent Timus Connect from working. We can confirm this by checking the task manager or asking the customer.