Skip to main content

Configure Detection

Duration20 minOfferModule Shadow IT

Objectives​

0 / 3 objectives achieved — check them off as you go through the lesson.

Why It's Useful​

The Shadow IT inventory is powered by the browser extension of VaultysHub: a machine without the extension does not report anything. Before looking at the results, it is necessary to decide how the extension detects (by asking for user consent or not) and how it gets onto the machines.

Your Turn​

  1. Go to Configuration, tab Extension, and expand the section ShadowIT Detection. Three modes are offered:
    • Disabled: no data is sent from the browsers;
    • Ask for consent: the extension asks for user consent once, which can be declined;
    • Forced: the extension sends events (login URLs and usernames on unmanaged applications) without asking anything.
  2. Choose Ask for consent for your test.
  3. Expand the Silent Mode section and activate the switch Enable Silent Mode. → Silent Mode Deployment
  4. Select a browser, leave Pin the extension unchecked, and observe the generated installation command. Choose your platform and click on Download CLI.
  5. On a test machine, execute the copied command with Copy the command, then log in to a web service that is not in your catalog.
Silent mode does not belong to any module

Silent mode is available without a module, but it is only useful with Shadow IT detection: it installs and configures the extension on machines without user action, so that connections are reported even for those who do not use VaultysHub daily.

caution

The copied command contains the deployment secret in plain text. If it has circulated outside of your deployment tool, use Regenerate the secret. Always test the command on a small group of machines before a deployment via MDM (Intune, Jamf, Workspace ONE…).

Check Your Knowledge​

1Where do the applications in the Shadow IT inventory come from?
2With the Ask for consent mode, what happens if the user declines?
3Why leave the Pin the extension option unchecked in Silent mode?
4Does Silent mode belong to the Shadow IT module?

Key Takeaways​

  • No extension, no detection: the module relies on the browser extension.
  • Three modes: Disabled, Ask for consent, Forced.
  • The Silent mode and the VaultysHub CLI deploy the extension without user action, ideally via MDM.

Next lesson: Handle Shadow IT