Member Portal Administration
The Member Portal is configured with default settings, providing users with an intuitive and straightforward experience. The Settings module includes features that augment the experience of users and truly empower users with timely, relevant information. This section details all the settings that users can leverage to customize the features and functions.
To configure settings for the Member Portal, go to Settings in the lower-left corner.
General Settings
As a member, you can configure the general settings for the Member Portal from this section.
Manage Alert Categories
Alert Categories help you organize and filter the alerts you receive based on their content type. Analysts publish alerts from the Analyst Portal and assign each alert to a specific category. By selecting the categories relevant to you, you control which alerts appear in your Member Portal. This ensures you receive focused, relevant information tailored to your interests and responsibilities.
Types of Alert Categories
All alert categories are configured by analysts in the Analyst Portal and are available in two types:
Admin Enabled Categories: These categories are selected by analysts, and you will always receive alerts for them. While you cannot unsubscribe from these categories, you can choose how you want to be notified, which is through email or mobile notifications.
Optional Categories: These categories are also made available by analysts, but you can decide whether or not you want to receive alerts for them. If you opt in, you can then set your preferred notification channels.
Subscribe to Alert Categories
You can manage which alerts you receive by subscribing to different alert categories. Some categories are mandatory and always sent to you, while others are optional and available for you to choose. This gives you control over the type of alerts you get, ensuring that you only receive the information relevant to you. You can choose to be notified through email or mobile notifications, depending on your preferences for each category.
Steps
To subscribe and manage alert category preferences, follow these steps:
Go to Settings > Alert Categories. The list displays both Admin Enabled and Optional categories.
To manage the alert category preferences, click Edit and use the following information:
To receive notifications for Admin Enabled categories, select your preferred notification channels (Email or Mobile).
Note
You cannot disable Admin Enabled categories in the Member portal.
To subscribe to Optional Categories, enable the toggle for each category you want to receive alerts for, then choose your preferred notification method.
To save your changes, click Update.
Manage Alert Channels
Members can create alert channels to group alerts based on the tags present in alerts. They can also configure notification preferences for alerts received in these channels. If an alert is associated with a tag mentioned in the channel, it is automatically added to the alert channel. This helps members view and track alerts of their choice in a single place.
Alert Channel Types
To view and configure alert channels, go to Settings > General Settings > Channels. Channels are classified into different types based on their usage.
My Channel: Create channels to group alerts based on tags. If any published alerts match the tags that you have added to the channel, the alert is automatically added to the alert channel. You can view alerts based on channels on the Alerts page. If you have cloned a channel that you have subscribed to, it is available in this section. Click the cloned channel to modify the details according to your preference. You can also filter channels in this section by their status (active or inactive).
Default Channel: Displays all channels that are created by administrators in the Analyst Portal and available to you. Turn on the Email Notification or Mobile Notification toggles to receive push notifications for alerts published in the respective channel. Administrators can configure default channels on the basis of tags or info sources.
Shared Channel: Displays all channels that are shared with you, by other members. View the channels and click Subscribe to subscribe to a shared channel. You cannot edit a shared channel, but you can view and get notified for alerts that are part of this channel. You can also copy the link to a shared channel, and share the link with other members. The link opens to the Member Portal, which displays details of the shared channel and the member can choose to subscribe to the channel.
Subscribed Channel: Displays all the channels that you have subscribed to from Shared Channel. Turn on the toggles for Email Notification and Mobile Notification to receive email and push notifications for alerts published in the respective channel. Use the following information to know more about subscribed channels:
Click the horizontal ellipsis of the channel, and click Clone to create a clone of a subscribed channel. A cloned channel is your copy of the channel you subscribed to. This is helpful when you want to reuse details of the subscribed channel and update it to your preference. Cloned channels are available in the My Channel section.
Click Unsubscribe to unsubscribe from the channel. You will no longer receive alerts or notifications related to the channel.
Click Add Filters to filter channels by their status (active or inactive).
Create a New Alert Channel
To create an alert channel, follow these steps:
Sign in to the Member Portal.
Go to Settings > General Settings > Channels.
Click Create New Channel and use the following information:
Enter a title for your channel.
Search and select the tags based on which you want to receive alerts in this channel. You can also choose from recommended tags. To refine your search, you can use the following filter options:
Starts With: Shows tags that begin with your input.
Exact Match: Shows tags that exactly match your input.
Contains: Shows tags that contain your input anywhere within the tag name.
Turn on the Status toggle to activate the channel.
Turn on the Email Notification and Mobile Notification toggles to receive notifications for alerts received in this channel.
In Sharing dropdown, select sharing as Global if you want to make this channel available to other members and analysts. Select sharing as Organization if you want to make this channel available only to members and analysts within your organization.
In Match channel tags to, use the following information to select your alert grouping preferences:
Select Alert tags to enable matching of channel tags with tags attached to the alert. For example, a channel with the tag Vulnerabilities groups all the alerts with tags Vulnerabilities attached to them.
Select Alert content to enable matching of channel tags with the entire content of the alert, which includes alert title, description, custom or system text fields, additional information, and tags. For example, if you create a channel and add Malware as a tag, you can view an alert with the title Ongoing Malware Attacks, even if the alert did not have Malware as a tag.
By default, Alert tags is selected.
Click Save to create the alert channel. When alerts are published with tags that match the tags in your alert channel, you can view these alerts on the Alerts page.
View Alerts from Alert Channels
To view alerts that are linked to alert channels that you have configured, follow these steps:
Sign in to the Member Portal. By default, you view alerts from the default channel configured in Profile Settings. For more information, see Member Profile.
To view alerts from a different channel, click Channel in the Filters section.
From the dropdown, select if you want to view default channels, subscribed channels, or channels created by you.
Based on your selection in the previous step, click the channel for which you want to view the alerts, and click Apply. All alerts related to the channel are now visible.
Delete an Alert Channel
You can delete alert channels if they are no longer relevant to you. You can only delete channels created by you or cloned by you in My Channel. You can delete both active and inactive channels.
To delete an alert channel, follow these steps:
Sign in to the Member Portal.
Go to Settings > General Settings > Channels > My Channel.
Hover over the channel that you want to delete, click the horizontal ellipsis, and click Delete Channel. After deleting a channel, you cannot recover it.
Manage Your Crisis Profile
The Crisis Profile section allows CSAP Member portal users to configure Crisis Notification call and SMS preferences according to their working hours. This section is split into three different parts in order to help users to completely configure the Crisis Notification feature preferences for complete transparency and optimal operation patterns.
Note
This feature will not be available if your organization has not subscribed to it.
Navigate to the Crisis Profile screen via the left menu of the Settings module.
Why Crisis Notification?
Crisis Notification is a structured information dissemination feature that allows security executives with appropriate permissions to send an Alert to a group or specific CSAP Member portal users. Usually, it is initiated in case of an emergency wherein the security executives want to alert the employees of the organization about an ongoing or impending crisis situation. This feature allows users who receive these Alerts to respond to and report their situation.
Crisis Notification Alerts are initiated from the CSAP Dashboard and are delivered to the users over Member portal, Mobile App, Email, SMS, and Phone calls to CSAP Member portal users.
Steps to set up Crisis Profile
Fill in the fields required in the forms as appropriate to configure Crisis Profile Call and SMS Alert preferences.
Field name | Definition |
Business Hours | |
From / To* | Function It allows members to mention the working hours for the Crisis Notification Alert Recipient. For example, the recipient working hours can be between 9 AM and 6 PM every day. Activity Choose the “From” and “To” time from the appropriate drop-down list. |
Select Timezone* | Function It allows members to mention Time Zone of the Crisis Notification Alert Recipient's region. This helps Crisis Alert Publishers to communicate to recipients at different locations of the globe. About Time Zone A Time Zone is a region of the globe that observes a uniform standard time for legal, commercial, and social purposes. Time zones tend to follow the boundaries of countries and their subdivisions because it is convenient for areas in close commercial or other communication to keep the same time. Activity Specify the appropriate Time Zone for your region. |
Call Preference | Function It allows members to choose the (Interactive Voice Response) IVR Voice Preference for the Crisis Notification Alert Calls. You can choose a Male or Female voice. |
Once done, click on "Next" to navigate to the Contact Details section.
Note
The Next button will not be enabled until you fill the mandatory fields.
Field name | Definition |
Contact Details | |
Primary Contact* | Function It allows members to enter the Primary Contact number, Contact Type, and SMS Preferences. Activity
|
Secondary Contact | Function It allows members to enter the Secondary Contact number, Contact Type, and SMS Preferences. Activity
|
Once done, click on "Next" to navigate to the Call Settings section.
Note
The Next button will not be enabled until you fill the mandatory fields.
Field name | Definition |
Call Settings | |
On Weekdays (during business hours) | Function It allows members to choose Contact number (s) for First Priority, Second Priority, and Third Priority when a Crisis occurs during business hours. Activity Specify the number for the First Priority, Second Priority, and Third Priority. Only numbers specified in the Contact details form can be chosen here from the drop-down list. Impact
|
On Weekdays (after business hours) | Function It allows members to choose Contact number (s) for First Priority, Second Priority, and Third Priority when a Crisis occurs after business hours. Activity Specify the number for the First Priority, Second Priority, and Third Priority. Only numbers specified in the Contact details form can be chosen here from the drop-down list. Impact
|
On Weekends | Function It allows members to choose Contact number (s) for First Priority, Second Priority, and Third Priority when a Crisis occurs during weekends. Activity Specify the number for the First Priority, Second Priority, and Third Priority. Only numbers specified in the Contact details can be chosen here from the drop-down list. Impact
|
Once done, click on "Save".
Note
You can navigate back to the "Crisis Notification" section via the Settings module to make changes to the existing preferences. Once done, click on "Save".
Modify Crisis Notification Preferences
You can always navigate back to the "Crisis Profile" section from the Settings module to make changes to the existing preferences.
After making changes to the available fields, click on the "Save" button from the "Call Settings" form to save the new preferences.
Note
Fields marked with * are mandatory. You cannot update new preferences by leaving behind mandatory fields in the Business Hours, Contact Details, and Call Settings forms.
Manage Your Recipient Groups
As a member, you can request to join invite-only recipient groups. Analysts or member admins can review the requests. If your request is approved, you start receiving alerts when the recipient group is added to the alert.
Note
To access the Recipient Groups setting, contact your administrator.
To manage and request to join invite-only recipient groups, go to Settings > Recipient Groups in the Member Portal. Alternatively, if you want to join public recipient groups, go to Profile Settings. For more information, see Member Profile.
The following columns are available:
Group Name: The name of the recipient group.
Group Info: The description of the recipient group.
TLP: The Traffic Light Protocol (TLP) associated with the recipient group.
Actions: Click Request to Join to join the recipient group. After your request to join has been approved by a member admin or analyst, the column displays Joined.
Generate Open API Credentials
Notice
This feature is available in CSAP v3.7.3.0 onwards.
In the Member Portal, use open API credentials for various actions such as viewing the list of alerts, getting details of each alert, sharing threat intel, and other actions. You can generate one set of credentials at a time. Additionally, you can also generate open API credentials for the Intel Library which helps you access data directly from Intel Exchange (CTIX).
After generating the credentials, you can first test connectivity with Collaborate and then start making API calls using these credentials. You can use any endpoint that is available for you, as a member. For more information, see CSAP API Documentation.
Generate Collaborate (CSAP) Credentials
To generate open API credentials for all other actions in Collaborate apart from the Intel Library, ensure this setting is enabled for your organization by the Collaborate administrator.
Steps
To generate open API credentials for Collaborate, follow these steps :
In the Member Portal, go to Settings > General Settings > API Credentials.
To generate a new set of credentials for CSAP, click CSAP and then click Generate API Credentials.
App Name: This name acts as an identifier for the API credentials you generate.
Allowed IPs: Enter the IP address from which you want to make API calls from. You can add multiple IP addresses separating each by a comma. You can only make API calls using the specified IP addresses.
After entering the details, click Generate. Your API credentials are available for your reference. Click Download as CSV or copy the credentials for your reference.
Note
It is recommended to download or save the API credentials as you cannot recover the credentials later. The access ID and secret key are encrypted after you close the window.
Generate Intel Library API Credentials
To generate open API credentials for Intel Library, ensure this setting is enabled for you, as a member, by the Collaborate administrator.
Steps
To generate open API credentials for Intel Library, follow these steps:
In the Member Portal, go to Settings > General Settings > API Credentials.
To generate a new set of credentials for Intel Library, click Intel Library > Generate Open API Credentials. Your API credentials are available for your reference. Click Download to download a CSV file of the API credentials.
Note
It is recommended to download or save the API credentials as you cannot recover the credentials later. The access ID and secret key are encrypted after you close the window.
Manage API Credentials
After you have generated API credentials for the first time, you can do the following:
CSAP
To generate a new set of credentials, click Revoke to first revoke the existing credentials and then generate a new set of credentials.
You can copy the base URL and allowed IPs. Other details like access ID and secret key are no longer available after you generate the credentials for the first time.
Intel Library
To generate a new set of credentials, click Reset Credentials to reset the existing credentials. New credentials are generated and you can no longer use the previous credentials.
Customize
This section details some of the additional settings that allow users to configure preferences for the CSAP Member Portal. Functions such as Direct Messaging preferences, Directory preferences, and default My Feed landing page preferences can be configured via this module.
Navigate to the Customize screen via the left menu of the Settings module.
The table below shows how to customize various parameters via the CSAP Member Portal. This is a quick process that requires just a few clicks.
Field name | Definition |
Allow other users to send me direct messages | Function It allows members to enable or disable other CSAP Member portal users from sending direct messages to you using the Discussion Board. Impact
|
Show my profile in Member Directory | Function It allows members to show or hide your User Profile from other CSAP Member portal users in the Directory. Impact
|
Default Channel upon login | Function It allows members to set a Default Channel landing page in the Alerts module. You can set any Channel from the available drop-down list as your Default Landing page. Activity Choose a Channel from the available list. Impact Once you login to the CSAP Member portal you will be shown the Alerts page. Now after you set a My Feed landing page, the feeds from the selected Channel will be displayed in the Alerts module. |
NoteThe "All" option will be set as default if no "My Feed" landing page. This will display feeds from all available Channels. | |
Export
As a member, you can bulk export both alerts and threat intel submissions as reports in .csv format. Export alerts or threat intel submissions to prioritize actions, perform advanced threat analysis, and for knowledge sharing.
Before you Start
Ensure that you have export permissions. For more information, contact your administrator.
Steps
To export alerts or threat intel submissions, follow these steps:
Sign in to the Member Portal.
Go to Settings > General Settings > Export.
To export a CSV report for alerts, click Alerts. Alternatively, to export a CSV report for submitted threat intel, click Intel.
To apply filters, use the following information:
Select Date: Choose from predefined durations such as Last 24 Hours, Past Week, Past Month, or Past 3 Months for exporting alerts or threat intel submissions. Alternatively, you can enter a custom date range in Specific Dates.
(Optional) Additional Filters: Select from a range of additional filters to further refine the details in your report.
Note
For intel reports, the only available filters are Status, TLP, and Category. For alert reports, the available filters are channel, category, TLP, or additional filters.
Click Export as CSV.
You will receive the link to the exported file in your email from where you can download it. The link can only be used once and expires in 72 hours from the time you receive it. To download the CSV report directly from the Member Portal, go to Download History, hover over the record, and click Download.
Admin Settings
As a member admin, you can configure the Member Portal with the Admin Settings section of Settings.
Note
As a prerequisite to viewing or interacting with Admin Settings, you must have these permissions enabled by an Analyst Portal user who is an administrator.
Manage Members in Your Organization
The Member Management page is available only if the Organization Management feature is enabled for your organization. This feature allows CSAP Analyst Portal Admins to assign specific members as Member Admins. Member Admins can access the Member Management page to invite other Members to their organization, as well as perform administrator functions.
Other users can be managed using default roles, such as Members or Intel Approvers. However, the Intel Approver Role is only available if a CSAP Analyst Portal Admin has enabled it for your organization. Similarly, the Sector Approver and Sector Admin roles are only available if a CSAP Analyst Portal Admin has enabled it for your organization type or sector.
To access this functionality, click the Settings button, and under Admin Settings, select Member Management.
Note
As a prerequisite to viewing or interacting with Admin Settings, you must have these permissions enabled by a CSAP Analyst Portal user with an Admin role.
The following roles are available:
Member: A basic user that has the ability to use the CSAP Member Portal.
Intel Approver: A member who can review and publish actionable intelligence shared by other members of the organization. Intel Approvers can manage submitted intel under a dedicated module. Intel submitted by members for approval can be followed up and managed using statuses such as submitted, approved, rejected, and reverted until the intel is published.
Member Admin: A member that can manage other members and Intel approvers in their organization. Member Administrators can see a separate Admin Settings section of the Settings module.
Sector Approver: A member assigned to a particular sector or organization type has permission to review intel provided by all members from various organizations within a sector.
Sector Admin: An admin role assigned to a member of a particular sector or organization type that has the capability to add more members, as well as define their roles for various organizations within a sector.
How many members can a Member Administrator add?
The maximum count of members allowed for an Organization is controlled by the CSAP Dashboard Administrator. Please contact the CSAP Dashboard Administrator to increase or decrease the member count.
Overview
The Member Management page displays a list of members added to your Organization. Details such as Member Name, Title, Role, Status, and Contact Details are displayed.
Steps to add a Member
Click on Add Member from the top right to add a new member to your organization.
Note
Fields marked with * are mandatory.
Field Name | Description |
|---|---|
User Details | |
Name* | Activity Enter the full name of the User. |
Title | Activity Enter the Title for the User |
Email* | Activity Enter the email address to which the invite will be sent. You can edit the email address at any point. Impact The User can only log into CSAP with this email address. Note: Please contact the CSAP Admin or Cyware Support if you see the following error message. "This email domain is not approved for Dashboard accounts." |
Phone Number | Activity Enter the User’s Phone Number. |
Access Levels | The Access Level field allows you to provide necessary application access for the Members and determine the Alert delivery options for the Member. The Alert delivery options that can be assigned to Members are:
By default, Members have all three access permissions enabled for theWeb Portal,Mobile App, andEmailNotification. |
Member Role | Allows you to assign different roles within an organization. The following Roles can be assigned.
Choose a Role for the member. If no role is selected, Member is selected as default. Members can access features that are assigned to their Recipient Groups. |
Active | Mark the box if you want the member to be active as soon as he is created. |
Send Welcome Email | Allows administrators to send a welcome email for members to onboard to the CSAP Member portal. |
Recipient Groups | |
Location | It allows users to mention the Geo-location of the member organization. |
Organization Type | Select the Organization Type for the member. |
Organization | Select the Organization for the member. |
User Recipient Groups |
|
Contact Details | |
Mailing Address | Allows the user to mention a physical address mailing for the members. |
Phone Numbers (For Crisis Notification) | It allows administrators to add contact details of members for alerting via Phone Call or SMS during crisis situations.
NoteThe same contact information will be updated to the member profile in the CSAP Member Portal. |
After finishing, click on Add Member.
Manage Requests to Join Groups
In CSAP, users with a Member Admin role can manage requests by Members to join invite-only Recipient Groups. This ensures that only Members who are qualified to be part of a Recipient Group can join, based on organizational security policies and requirements.
The Request Management page enables Member Admins to approve or reject Member requests. To access this functionality, click the Settings button, and under Admin Settings, select Request Management.
Note
As a prerequisite to viewing or interacting with Admin Settings, you must have these permissions enabled by a CSAP Analyst Portal user with an Admin role.
When viewing Member requests, the following fields are available:
Member Details: The details of the Member. By default, only the Member name displays in the Member Details column. To view more details for a Member, hover over an entry with the mouse to display a tooltip that contains the following information:
Member name
User role
Member email
Joined date (for example, Joined: 2 months ago)
Geographic location (for example, United Kingdom)
Invite-only groups to which the Member belongs
Additionally, Member Admins can click the Messenger icon to initiate a direct chat with the Member. For more information, see Messenger.
Group Name: The name of the Recipient Group that the Member is requesting to join.
TLP: The Traffic Light Protocol (TLP) associated with the Recipient Group, is displayed as a color icon. Available options include White, Green, Amber, and Red.
Request Date: The date the Member submitted the request.
Actions: The actions that an Admin can take to manage a Member's request to join a Recipient Group. The following options are available:
Accept: Click this option to approve the Member request.
The Member is added to the requested Recipient Group.
Reject: Click this option to reject the Member request.
The Member is not added to the requested Recipient Group.
Configure Organization Details
The Organization Details page enables users with a Member Admin role to view information about their organization, as well as add multiple domains and IP addresses to the organization page as trusted indicators. Information that is available or updated on this page is automatically synchronized with the Organization Information page in CSAP Analyst Portal.
To access this functionality, click the Settings button, and under Admin Settings, select Organization Details.
On the Organization Details page, in the left-hand pane, the following information is available as a quick view:
Organization Name: The name of the organization.
Organization Level: The service level of the organization.
License Available: The number of available CSAP licenses for the organization.
License Used: The number of licenses the organization is using.
Active/Inactive: The active status of the organization. If an organization is active, this value displays as 1/0.
ID: The unique ID for the organization, in alphanumeric format.
The following topics describe the tabs and fields available when viewing details for an organization.
Basic Info
The following fields are viewable, by default, on the Basic Info tab:
Note
Certain fields are disabled, and you are not able to edit them. To manage information for these fields, contact your CSAP administrator. All other fields can be edited and updated, as needed.
Organization Name: The name of the organization. This field is disabled, by default.
Level: The service level of the organization. This field is disabled, by default.
Allowed Member Admin: The number of Member Admins allowed in the organization. This field is disabled, by default.
Allowed Intel Approver: The number of Intel Approvers allowed in the organization. This field is disabled, by default.
Organization HQ: The location of the organization headquarters.
Organization URL: The URL for the organization.
About Organization: The About Us statement for the organization.
Code: The country code for the organization.
Phone: The phone number for the organization.
Domains: The domains associated with the organization.
ID: The unique ID for the organization, in alphanumeric format.
Organization Logo: The logo for the organization. When editing fields in the Basic Info tab, you can upload a new logo by clicking Upload.
To edit this information, perform the following steps:
Click the Edit icon.
The Basic Info tab changes to edit mode.
Make the necessary changes.
When you are finished, click Update.
The Basic Info tab reverts to view mode.
Alternatively, if you do not want to save your changes, click Cancel.
The Basic Info tab reverts to view mode.
Domain(s)
When viewing or editing information on the Domain(s) tab, the following fields are available:
Showing All: Click this drop-down menu and select the option to show all active or inactive domains for your organization.
Domain: The physical domain address.
Description: The unique description of the domain.
Provider: The service provider for the domain.
Validity: The date range from when a domain is valid to when it expires. The member admin of the organization receives an email alerting them when this domain approaches its expiry date. They will receive an email when the expiry is in seven days.
To add a domain, perform the following steps:
On the Domain(s) tab, click the Add button.
A dialog box opens, where you can enter the information relevant to your domain.
When you are finished entering your information, click Add Domain.
The dialog box closes, and the domain is added.
Alternatively, if you not want to add the domain, click Cancel.
The dialog box closes, and the domain is not added.
To edit a domain, perform the following steps:
On the Domain(s) tab, navigate to the domain you want to edit and click the Edit icon.
A dialog box opens, where you can edit the information relevant to your domain.
When you are finished editing your information, click Update Domain.
The dialog box closes, and the domain is updated.
Alternatively, if you not want to update the domain, click Cancel.
The dialog box closes, and the domain is not updated.
IP Address(s)
When viewing or editing information on the IP Address(s) tab, the following fields are available:
Showing All: Click this drop-down menu and select the option to show all active or inactive domains for your organization.
IP Address: The physical IP address.
Description: The unique description of the IP address.
Provider: The service provider for the IP address.
Validity: The date range from which an IP address is valid to when it expires.
To add an IP address, perform the following steps:
On the IP Address(s) tab, click the Add button.
A dialog box opens, where you can enter the information relevant to your IP address.
When you are finished entering your information, click Add IP Address.
The dialog box closes, and the IP address is added.
Alternatively, if you not want to add the IP address, click Cancel.
The dialog box closes, and the IP address is not added.
To edit a domain, perform the following steps:
On the IP Address(s) tab, navigate to the IP address you want to edit and click the Edit icon.
A dialog box opens, where you can edit the information relevant to your IP address.
When you are finished editing your information, click Update IP Address.
The dialog box closes, and the IP address is updated.
Alternatively, if you not want to update the IP address, click Cancel.
The dialog box closes, and the IP address is not updated.