This article explains how to integrate the RN150 appliance with CyberArk. CyberArk integration allows RN150 to securely retrieve and use privileged credentials during discovery and migration planning activities.

If CyberArk was not enabled during assessment setup

CyberArk integration is enabled at the assessment level. If you did not enable it when creating an assessment, it cannot be added later. In that case, you will need to create a new assessment with CyberArk enabled. The CyberArk integration option appears in the RN150 interface only if it was enabled during the creation of the assessment.

• To use CyberArk, create a new assessment and enable CyberArk during setup. Once CyberArk is enabled for an assessment, it cannot be disabled. To change integration, you must create a new assessment.
• Data from the original assessment will remain available, but you will need to configure new scans in the new assessment to take advantage of CyberArk.
• The new assessment can still be linked to the same Flex Deploy Pod (FDP) to avoid significant environmental changes.
• Use your existing subscription code to create a new assessment, which will generate a new bootstrap code for the appliance.
• No data from the original appliance can be migrated; you must re-enter scanned subnets and perform new scans.

Accessing the CyberArk configuration in RN150

If CyberArk integration was enabled:

1. Log in to the RN150 dashboard.
2. Navigate to Interfaces.
3. If CyberArk integration was previously enabled, you’ll see the Configure CyberArk option. Select this to be guided through the configuration process.

4. Provide the required details:
   • AppID
   • Server Address
   • Proxy settings (if required)
   • Authentication method (Windows or SSL; SSL recommended if only one is needed)

5. Click Verify and Save. 

Important considerations

• You do not need to deploy a new FDP.
  • Instead, increase the resources of your existing FDP.
  • When prompted in RN150 to enter the FDP IP address, provide the IP of the existing appliance.
• This approach will result in two separate assessments on the same FDP.
  • Old data will not be erased and will remain accessible as a separate dataset.