User, Teams and Devices

  • Create User(s)

    There are three methods for creating users: manually, through importing, or by using directory synchronization

    IDP Integrations:

    Follow these steps to manually add new user(s) on your network with Timus Manager:

    1. Go to Timus Manager > Users & Teams page.
    2. Click the Create User button in the upper right corner of the page.
    Enter a First Name and Last Name.
    1. Enter an Email address.
    2. Select the Status as Active or Inactive.
    3. Assign the user to a Team like Sales or Unassigned if needed.
    4. Select Allowed Sites for secure remote access. You can select multiple sites for the user to connect or All to include all Allowed Sites instead of selecting them one by one.
    5. Click the "Save" button to complete the process. It is important to note that activation emails will be automatically sent to the users that are imported.
                • The created user will be notified by email.
    6. Once you click on Set Password, you will be forwarded to the page, which you can set your password.
    7. On this page, you can set your password depending on Password Policies defined by the network admin.
    8. While setting or resetting your user's password, you may see the pop-up as shown in the image below.
    9. If you have seen the pop-up above while setting or resetting your user's password, you need to check your password policies as shown in the image below. There 5 password policies, which can cause Invalid Password issue.

    In this example, I have used "john" in my password. Therefore, I have seen Invalid Password pop-up on my screen.

    You need to set your Password Policies, which totally depend on the network admins, for the users.

    Import Users

    • Within the Users tab, you can take advantage of the convenient Import and Export functionality for users in CSV format.
    • This enables you to easily transfer multiple users in a single step, as opposed to the laborious task of manually adding them one by one.
    • This valuable Import Users feature saves you time and simplifies the management of users within your network.
      1. Click the Import button on the Users tab.
      2. You can view the Timus_Users_Sample document by clicking Download Sample text in the upper left corner of the pop-up window.
      3. To import users, you have two options. You can either drag and drop the CSV document onto the designated area on the screen, as shown in the image below, Or you can simply click on the area to browse for the document. Please note that the maximum file size allowed for import is 5MB.
    Pay attention to the following points for the CSV document you will prepare:
    • First Name, Last Name, and E-mail fields must be filled.
    • Up to 70 characters can be entered in the First Name and Last Name fields.
    • Up to 120 characters can be entered in the E-mail field.
    • Remote Access Sites must be one of the sites in the system, or you can leave them empty.
    • Teams that are not in the system will be created as new teams.
    • Team fields can be empty.
    • You can upload up to 500 users at a time.
    • Users whose Remote Access Sites field is empty will not be able to establish a remote connection.
    • Multiple sites in the system can be entered in the Remote Access Sites fields by placing a comma (,) between them.
    After successfully importing your users to Timus Manager, you have the option to export them as Timus Users directly from your network.
    Inactive accounts are not able to login to the system, and do not consume user subscriptions.
    Timus will scan the dark web for users with disclosed or breached email addresses. If scan discovers email exposure, the warning below will arise upon attempting to save.

    Account Security as a part of Vulnerability Assessment

    If the Account Security window appears on your screen with the Breaches tab, you can view this informational text and important data about past breaches:
    "It has been determined that the e-mail address in this account has been included in the following data breaches that have occurred before. A data breach is an event in which data is accessed and exposed in an unauthorized manner, usually due to inadequate access controls or security weaknesses in software."
    • During this step, an Account Security window will appear as part of Timus's Vulnerability Assessment, presenting you with two options:
    • If you select the Cancel option, the user will not be created due to being breached, and you wil go back to the Create User screen again automatically.
    • If you choose to Continue, the user will be created. We strongly advise you to carefully review the list of Breaches, which includes details such as the Source, Domain, Data Classes, Data Count, and Date. This information will help you make an informed decision about the user's security.
    The breached email address check does not include a check for breached or disclosed passwords.
    See more
  • Timus Support : Timus Networks: How to Create Agent Profiles for Adjusting User Behaviors

     

    How to Guide:

    Creating and managing agent profiles in Timus Networks helps in effectively controlling and optimizing user behaviors on your network. By following these steps, you can ensure that network policies are enforced and user experiences are tailored to your organizational needs. If you need further assistance, please feel free to reach out at any time.

     

    Step 1: Log in to the Timus Mange Portal


    Step 2: Navigate to the “ Users and Teams “on the Left-Pane

    Step 3: Click On “ Agent Profiles ”on the Middle Pane

    Step 4: Click " Create New "

    Step 5: Fill the Template

    Step 6: Choose the Desired Operating System to Apply the User Preferences

    Step 7: Select the Agent Profile Rules You Want

    Step 8 : Click on “ Confirm “ to Create the Profile

    Step 9: Elevate the New Profile to the Upper Section Amidst Existing Profiles by Utilizing the Directional Arrows to Ascertain Its Position within the Hierarchy.

    Step 10: Make Sure That All the Changes Are Applied to the User Account

     

    NOTE: Users are required to disconnect and reconnect in order to access the updated settings.

     

    Conclusion:

    The introduction of a new Agent Profile functionality empowers administrators with granular control over user machine configurations, facilitating seamless integration of preferred rules tailored to organizational needs. This feature encompasses a spectrum of customizable parameters including tunnel type selection, startup configurations, administrative approval requirements for user logins and logouts, and the implementation of productivity tracking mechanisms. By leveraging this advanced toolset, administrators can optimize operational efficiency, enhance security protocols, and streamline user experiences within the system.

    See more
  • Manage Users

    This article contains guidance on managing users, executing bulk actions, and resetting passwords.

     

    Users and Teams Bulk Actions

    • You can select multiple users on the Users tab on the Users & Teams page and take the desired action on the users at the same time.
    • To take bulk action on multiple users, click Users & Teams in the left-side navigation.
    • The Users tab appears. From this screen, select the users you want to take action on.
    • The bulk Actions menu appears above the devices list. Select the action you wish to take (Reset Password, Reset 2FA, Ban/Unban, Delete) from the Actions drop-down menu:
       
     

    Edit Settings

     

    Account Status

    • Keep Existing Settings: This action will not affect the status of the selected users.
    • Activate All: The status of the selected users will be set as active.
    • Deactivate All: The status of the selected users will be set as inactive.
     

    Team

    • Keep Existing Settings: In this case, you do not need to make a selection.
    • Replace All with: Select a team from the dropdown menu. This team will be assigned to all users, including unassigned users.
    • Remove These from All: You can select more than one team from the dropdown menu on the right. The selected teams will be removed from the selected users, and these users will be classified as unassigned in your network after saving the changes.

    Tags

    • Keep Existing Settings: The existing tags of users in your network will not be affected by this action.
    • Add to Existing: The existing tags of users in your network will not be affected by this action. In addition to these tags, the tags you choose from the dropdown menu below will be included in the user's account.
    • Replace All with: The existing tags of the selected users will be replaced with the tag you choose. However, the automatically assigned tags of the users you synchronize with Timus using Integrations will not be changed.
    • Remove These from All: These tags will be removed from the selected users.
       

    Allowed Sites

    • Keep Existing Settings: The existing sites of users in your network will not be affected by this action.
    • Add to Existing: The existing sites of users in your network will not be affected by this action. The site you select will be added alongside the current sites of the selected users.
    • Replace All with: The current sites of the selected users will be replaced with the site you select from the options provided.
    • Remove These from All: These sites will be removed from the selected users.
       

    Ban/Unban

     
    With the 'Ban/Unban' action, you have the ability to restrict users from accessing your network. Whether it is for a specific duration, custom or an permanent period, you can prevent individuals from entering your network.
     
    This functionality can be used for both individual users and multiple users.
     

    Reset Password

    Selecting the 'Reset Password' action will reset the password for the selected users. An email will be sent to guide them through the process of creating a new password.

     

    Reset 2FA

    Selecting the 'Reset 2FA' action will reset the two-factor authentication code for the chosen users. Timus will then send an email to guide them through the process of setting up two-factor authentication.
     
    The user sign-in policies in Zero Trust Security require users to use two-factor authentication.
     

    Drop Connection

    You can manually activate the 'Drop Connection' action if you detect any suspicious activity. This will safeguard your network's security by quickly responding to potential threats.
     

    Delete

    You can delete multiple users from your network all at once using the 'Delete' action.
    See more
  • Agent Profiles

    All users, all teams, and all tags will be selected automatically for you here. Also, you will not be able to take any actions on any fields here but the Description field, because this is a Default Agent Profile.

    Regarding device connections and concurrent logins: A user is limited to a maximum of four active sessions across their devices. This means that while the user can have multiple devices (for example, 10 devices), only four of them can be actively connected to the Timus gateway at any given time. Technically, there is no restriction on the total number of devices a user can have; the limitation applies solely to the number of active sessions on those devices.

    Once you create a new Agent Profile, you are able to change all the fields however you want.

     

    Windows and MacOS:

    This article explains the process of creating and managing Agent Profiles on the Users & Teams page.

    • To manage the Agent Profiles, you can go to Users & Teams > Agent Profiles and you can click on 3 dots to edit the Default Agent Profile or you can create a new Agent Profile if needed.
     
     
    • The Agent Profile page has a drag-and-drop feature, allowing you to prioritize a profile by moving it to the top. Once you move the Agent Profile test to top as shown in the image below, you need to Apply Order to save the configurations.

    • Once you click on 3 dots to edit the Agent Profile, you will see 5 tabs, Source, Windows, MacOS, Android, iOS.

    Source

    • All users, all teams and all tags will be selected automatically here for you. Also, you will not be able to take any actions on any fields here but Description field, because this is a Default Agent Profile.
    • Once you create a new Agent Profile, you are able to change all the fields however you want
     

    Windows and MacOS:

    • You can decide the Tunnel Protocol, WireGuard or OpenVPN, as default here.
    • If you want to let the users decide the options such as Tunnel Protocol, you can click on User can modify. As long as User can modify has been marked, the users will be able to decide the options.
    • If you don't want to let the users decide the options, you can keep User can modify unmarked so that you will be able to force them to use whatever you have decided on the Agent Profiles
    • Start on boot: When enabled, the Timus Connect App will start when the device boots.
    • Connect on application start: When the device is turned on, it will automatically connect to the selected or last connected gateway.
    • Always-on VPN: Enabling Always-on VPN will allow admins to control users' ability to disconnect VPN in Timus Connect app. 'Users cannot disconnect' means users cannot disconnect. 'Users can disconnect with admin approval' means users must submit a request to disconnect, and admin must approve the request. 'Users can disconnect without admin approval' means users must submit a request to disconnect, and request is automatically approved, without the need for admin approval. One request is valid for one disconnect only.
    • You can see the admin approvals for Always-on VPN on the page Insights -> Alerts -> Requests.
    • Trusted Networks: When a device is connected to a trusted network, VPN will automatically disconnect as this is recognized as a secure environment.
     
    • Productivity tracker: If this is enabled, application usage tracking of the user will be enabled. Otherwise tracking will be disabled.
    • Enforce local DNS responder: When enabled, Timus Connect agent will resolve DNS queries locally. When disabled, it will disable domain-based split tunneling.
    • Auto Update: When enabled, Timus Connect application will automatically check for updates.

    Start on boot, Connect on application start, Always-on VPN, Trusted Networks and Productivity tracker options are only available on Windows and MacOS.

     

    Android and iOS:

    • You can decide the Tunnel Protocol, WireGuard or OpenVPN, as default here.
    • If you want to let the users decide the Tunnel Protocol, you can click on User can modify. As long as User can modify has been marked, the users will be able to decide the Tunnel Protocol. vv
       
       
     
    See more
  • Password Policies

    This article explains the process of managing Password Policies on the Users & Teams page.

    • To manage the Password Policies, you can go to Users & Teams > Password Policies and you can click on Edit button to edit both Policy for All Administrators and Policy for All Users
     

    Policy for All Administrators:

    This password policy applies to all administrator accounts of the management portal.

    Policy for All Users:

    This password policy applies to all user accounts that require a Timus password. Users that single sign-on with their third party Identity Provider accounts do not have Timus passwords, thus they are not bound by this policy.

    Active Rules:

    We have 11 password policies. 6 of them are active and 5 of them are inactive in default as shown in the images below. You are able to change the password policies however you want

    Once you click on Edit, you will be able to configure the policies however you want.

    Minimum character length

    This will be active all the time. You are able to change the minimum character length, which is 8 in default, to any numbers that you want.

    Minimum number of lower case letters

    We recommend using at least 1 lower-case letter to make the passwords stronger.

    Minimum number of upper case letters

    We recommend using at least 1 upper-case letter to make the passwords stronger.

    Minimum number of digits (0-9) We recommend using at least 1 digit to make the password stronger.

    Minimum number of special characters

    If selected, password must include special characters such as !@#$-%&*+. We recommend using at least 1 special character to make the password stronger.

    Maximum number of consecutive digits

    For example; if 3 is selected, up to 3 consecutive digits such as 01, 012, 123, 456, 789 can be included in the password, 4 consecutive digits like 0123 cannot.

    Cannot use commonly used passwords

    Commonly used passwords can be very easily detected by automated tools of bad actors, thus using them leads to a vulnerability. This check is insensitive for upper-case and lower-case letters.

    Cannot contain keywords

    You can add the keywords, which you don't want the users/admins to use in their passwords, into here so that the users/admins are not able to use these keywords. Maximum 10 keywords can be entered.

    Cannot contain first part of user's email address

    For example, the password of the user with the email address johndoe@abc.com cannot contain the text 'johndoe'.

    Cannot contain user's first name

    If you activate this, the users/admins will not be able to use their user's first name in their passwords. This check is insensitive for upper-case and lower-case letters.

    Cannot contain user's last name

    If you activate this, the users/admins will not be able to use their user's last name in their passwords. This check is insensitive for upper-case and lower-case letters.

    Password expires in

    Entered value will be set as the administrator's password expiration limit. Minimum value is 1 day and maximum value is 10.000 days.

    See more
  • Productivity Tracker
    This articles explain the process of using and managing Productivity Tracker on the Users & Teams page.
    If Productivity Tracker is enabled, application usage tracking of the user will be enabled. Otherwise tracking will be disabled.
    This feature is only available on Windows and MacOS.
    • To activate Productivity tracker, you need to go to the page Users & Teams -> Agent Profile -> Edit Default Profile or create a new Agent Profile by clicking on Create New button at the top right of the screen as shown in the image below
    • Once you click on Edit the Default Profile, you will see the pop-up as shown in the image below. You will not able to change Users, Teams and Tags here. They have already been selected as all users, teams and tags due to being the Default Profile. If you want to specify these such as selecting specific users, teams or tags, you need to create a new Agent Profile.
    • Once you select one of the tabs, Windows or MacOS, at the top of the pop-up screen, you will see the screen where you can enable/disable the Productivity tracker as shown in the image below.
    This feature does not provide User can modify option. Therefore, if it is enabled by the admin, the users, selected by admin, will be tracered
    • To analyze the data belonging to the users of Productivity tracker, you need to go to the page Users & Teams -> Users -> select a user here -> click on 3 dots on the right of the user row -> View as shown in the image below.
     
    • Once you click on View, you will see the page as shown in the image below to be able to analyse the Productive, Unproductive and Neutral tabs regarding the Productivity tracker.
    • Windows: Certain security applications, such as Kaspersky and McAfee, may interfere with the functionality of the Productivity Tracker feature, specifically C:\Program Files\Timus Connect\resources\service\lib\active-win\active-win-windows.exe process. To ensure proper operation, verify that this executable is not obstructed by any Endpoint Protection Platforms (EPPs) or other security software. It is crucial to whitelist active-win.exe in your security configurations.
    • macOS: To prevent any interference with the Productivity Tracker, please ensure that the Timus Connect Application has been granted Full Disk Access, Accessibility, and Screen Recording permissions as illustrated in the accompanying image. Failure to provide these permissions may result in suboptimal performance of the Productivity Tracker. If you use Privilege Manager, please ensure that the Timus Connect Application is whitelisted.

     
    See more
  • Always-on VPN
    This article explains the process of using and managing Always-on VPN on the Users & Teams page.

    Always-on VPN will allow admins to control users' ability to disconnect VPN in Timus Connect app. 'Users cannot disconnect' means users cannot disconnect. 'Users can disconnect with admin approval' means users must submit a request to disconnect, and admin must approve the request. 'Users can disconnect without admin approval' means users must submit a request to disconnect, and request is automatically approved, without the need for admin approval. One request is valid for one disconnect only.

    This feature is only available on Windows and MacOS.

    • To activate Always-on VPN, you need to go to the page Users & Teams -> Agent Profile -> Edit Default Profile or create a new Agent Profile by clicking on Create New button at the top right of the screen as shown in the image below
      always-on-vpn-1.png
    • Once you click on Edit the Default Profile, you will see the pop-up as shown in the image below. You will not able to change Users, Teams and Tags here. They have already been selected as all users, teams and tags due to being the Default Profile. If you want to specify these such as selecting specific users, teams or tags, you need to create a new Agent Profile.
    always-on-vpn-2.png
    • Once you select one of the tabs, Windows or MacOS, at the top of the pop-up screen, you will see the screen where you can enable/disable the Always-on VPN as shown in the image below.

    This feature does not provide User can modify option. Therefore, if it is enabled by the admin, the users, selected by admin, will be traced.

    always-on-vpn-3.png

    When you click on Disconnect on Timus Connect Application while you are connected to one of your gateways, you will see a pop-up as shown in the image below as long as Always-on VPN feature is selected as Users cannot disconnect.

    always-on-vpn-4.png

    Once Always-on VPN is selected as Users can disconnect with admin approval and you try to disconnect from the VPN, you will see a pop-up as shown in the image below. You will need to click on Go to My Timus page.

    always-on-vpn-5.png

    Once you click on Go to My Timus page, you will see the page as shown in the image below to send a request to your admin to be able to disconnect from the VPN.

    always-on-vpn-6.png

    Once you click on Create Request as shown in the image above, you will be able to see the pop-up screen as shown in the image below. The request will be selected as Disconnect VPN automatically, you need to write a reason why the admin should let you disconnect from the VPN.

    The reason field is not required, you can leave it blank.

    always-on-vpn-7.png

    Once you save the pop-up screen above, you will be able to see your all requests on the main page my.timusnetworks.com located on the tab Requests if they have been approved or not.

    If you have already sent a request to the admin to be able to disconnect from the VPN, you cannot send a new request until the admin responses your request.

    You can cancel your request anytime that you want while the status is pending.

    The selected admins by the super admin

    always-on-vpn-8.png

    Enabling notifications means that selected admins will get notification emails when a disconnect request is submitted, approved, denied, or cancelled. Emails will be sent for all requests, regardless of whether admin approval is required or not. Maximum 10 admins can be selected.

    The status of Always-on VPN:

    Pending: You have sent a request to the admin to let you disconnect from the VPN, you need to wait on your admin's response.

    Approved: Your request has been approved by the admin. You are allowed to disconnect from the VPN if needed.

    Denied: Your request has been denied by the admin. You are not allowed to disconnect from the VPN.

    Cancelled: You have cancelled the request by yourself. It is no longer under consideration by the admin.

    always-on-vpn-9.png

    Once your request has been approved or denied, you will also be notified by an email as shown in the images below.

    The deny reasons by the admins are as follows:

    • Invalid justification.
    • Insufficient justification.
    • Insufficient justification, please provide more details.
    • Company security policy violation.
    always-on-vpn-10.png
    always-on-vpn-11.png
     
    See more
  • Agent Install

    Once the users are added into the Timus Manager, following the below steps will get them registered as a user & enable connection

    • When the user is created, the user will be notified by an e-mail that their account is ready to set up.
    • To activate the account, the user should set a password by clicking the button on the link.
    • After creating a password, the user will be directed to my.timusnetworks.com and can download the Timus Connect App to connect to their company network.
     
    • In the Profile tab on this page, the user can change their password.
     
     
     

    Install Certificate

    If SSL Inspection is enabled for a device or network, it is necessary to install an SSL Certificate on the device(s) in order to perform security checks when accessing HTTPS websites.
     
    After selecting the appropriate network and platform to connect to, users can download the SSL Certificate for their device by clicking the Download button shown below.
    See more
  • Manage Devices

    View the devices and perform bulk operations for those devices on your network

    Once a user installs the Timus Connect App and is connected to the network, the device can be viewed and configured from the 'Devices' page in Timus Manager.

    • The Name of each device,
    • The MAC address of each device,
    • The IP Address of each device,
    • The OS of each device,
    • The User and Tags assigned to each device.
    • Their online/offline Status on the network,
    • The last time they were active on the network as Last Seen,
    • The Sites they are connected to,

    During the quick setup of Timus Manager, the device you are logged into is displayed on the Devices page without any identification.

    Devices Bulk Actions

    • You can select multiple devices on the Devices page and take the desired action on the devices at the same time.
    • To take bulk action on multiple devices, click Devices in the left-side navigation.
    • The Devices page appears. From this page, select the devices you want to take action on.
    • The bulk Actions menu appears above the devices list. Select the action you wish to take from the Actions drop-down menu:

    From the Devices screen, you can perform bulk operations for common operations that can be adapted to all devices in your network,

    Edit Settings: You can adjust the following settings using the Edit Settings modal in the dropdown menu:

    SSL Inspection

    • Keep Current Settings: This action does not impact the current settings.
    • Enable for All: When you choose this action, SSL Inspection is enabled for all selected devices.
    • Disable for All: When you choose this action, SSL Inspection is disabled for all selected devices.

    Tags

    • Keep Existing Settings: The existing tags of devices in your network will not be affected by this action.
    • Add to Existing: The existing tags of devices in your network will not be affected by this action. In addition to these tags, the tags you choose from the dropdown menu below will be included.
    • Replace All with The existing tags of the selected devices will be replaced with the tag you choose.
    • Remove These from All: These tags will be removed from the selected devices.
    • Drop Connection: You can drop the connections of the users as long as they are online. If not, the Drop Connection will be greyed out so that you will not be able to click on it.
    • Delete: You can operate the delete operation for one or multiple devices with the Delete option from the bulk actions menu.

    You can edit the Device manually by clicking the ellipsis icon at the end of its line and select Edit instead of using bulk actions.

    When you click on the Edit option, you will display the Configure Device screen.

    Disable SSL Inspection: if you don’t want to perform an inspection on SSL traffic on this device. If SSL Inspection is enabled, then the SSL certificate must be installed onto the device to be able to perform the inspection.

    SSL certificate is installed automatically onto the desktop devices when the Timus Connect App is installed. The certificate must be installed manually on mobile devices.

    Assign Static IP: You can assign static IP addresses for the devices by using this option. Once you click on Assign Static IP, you need to select Network and the IP Address according to the Network. Then, you need to hit the Add button on the right side of the IP Address field and hit the Confirm button to apply the changes, which you have made.

    View Active Devices

    To monitor or remove an active device in your network, please follow the steps below:

    • Click on "Devices Online" in the Dashboard to go to the Devices page.
    • Similarly, you can directly access the Devices page by clicking on it in the main navigation menu on the left.
    • On this page, under the Status indicator, you will be able to see devices that are either online or offline.

    You can Drop or manage the connection of any individual device or all devices associated with a user (for this, use the 'Bulk Actions' option for devices located on the right-hand side of the page).

    See more
  • Administrators
    Create new administrators, define their roles, assign these roles to the administrators, and establish new permissions/restrictions for existing roles.

    Roles and Permissions

    Create a new role and configure the names and permissions of existing roles.

    Follow these steps to create a new role:

    1. Click the Settings tab.
    2. Click Administrators then Roles and Permissions
    3. Click on Create Role on the page that opens.
    4. Enter a Role Name and a Role Description.
    5. Choose from the Timus Manager capabilities for the role you are about to create.
    6. Click Confirm at the end of the page.

    You can now view the role you created on the Roles and Permissions page and configure the role with Edit and Delete on the row where the role is located.

    Use the Create Administrator button to create fully authorized Administrators for your company network.
    To create an administrator, follow these steps:
    1. Click the Create Administrator button on the Administrators tab.
    2. Enter the information requested from you.
    3. Select Role for the administrator you are about to create.
    4. Click Confirm.
    5. The created admin will be notified by email.
    6. Once you click on Set Password, you will be forwarded to the page, which you can set your password.
    7. On this page, you can set your password depending on Password Policies defined by the network admin.
    8. While setting or resetting your admin's password, you may see the pop-up as shown in the image below.
    9. If you have seen the pop-up above while setting or resetting your admin's password, you need to check your password policies as shown in the image below. There 5 password policies, which can cause Invalid Password issue.

    In this example, I have used "john" in my password. Therefore, I have seen Invalid Password pop-up on my screen.

    You need to set your Password Policies, which totally depend on the network admins, for the users.

    Audit Logs

    View all changes made on your company network using Timus Manager.

    On the Audit Logs tab,

    • You can Search the audit logs by using the search bar.
    • You can view the logs in a specific date range by selecting a Date/ Time range.
    • You can get detailed information about the old and new values of the modified components in your network.
    See more