Cloud Manager

Cloud Manager

Cloud Manager removes the need to use the DefectDojo cloud site to update firewall rules, preferred maintenance schedule, and submit support inquiries. In addition, the Cloud Manager provides messaging capabilities for SaaS management to communicate with subscription holders.

Note: Cloud Manager is only available to DefectDojo cloud subscribers. The DefectDojo cloud site is also still required for updating or modifying billing information.

Message Portal

The Message Portal acts as a secondary method of communication, outside of email, for cloud management to communicate with cloud subscription holders. Important information such as cancellation dates, bug reports, and trial expiration dates are all examples of data that may be shared with subscription holders by the messenger.

Message Notifications

New messages are collected automatically by DefectDojo. When new messages are received, they will be displayed as popups. After reviewing the contents of the popup, the message can be closed by selecting Acknowledge.

Message Portal

All previously received notifications will be stored and accessible within the message portal. To access previously received messages, navigate to the Message Portal page under the Cloud Manager tab within the sidebar.

Within the message portal, all previously received messages will be listed. As with other objects in DefectDojo, messages can be filtered to find a specific message faster. Although messages are collected automatically, if a user wishes to check for new messages manually, the Refresh button will pull any new messages that may exist.

To view a specific message in full, select the eyeball under the actions column for a specific message. After being redirected, all of the details regarding a specific message will be displayed.

Firewall Rules

Firewall rules restrict whch IP addresses are able to access a given DefectDojo instance. To update or modify existing firewall rules that may have been added in the cloud portal, navigate to the Firewall Rules page under the Cloud Manager tab within the sidebar.

To add a new firewall rule, select the Add New Rule button under the existing rules. This will prompt for a new IP address, mask, and label.

To remove a firewall rule, use the Remove button to the right of the rule details.

In addition to custom firewall rules, DefectDojo offers bulk whitelisting of IP addresses used by GitHub and Jira. If these services communicate with your DefectDojo instance, it may be required for these external services to be enabled.

To enable or disable a specific external service, use the checkbox to the left of the service’s label (i.e. when checked the service is enabled, when unchecked the service is disabled).

To save any changes that have been made to new or exsting firewall rules, use the Submit button. Please note, firewall rule propgation is not instant, and may take a few minutes for the update to take effect.

Maintenance Schedule

Occasionally, DefectDojo cloud subscriptions may need to experience downtime for bugfixes and upgrades. The maintenance schedule allows cloud subscription maintainers to perform neccessary changes to your DefectDojo subscription without interrupting your workflow.

To update preferred maintenance times, navigate to the Maintenance Schedule page under the Cloud Manager tab within the sidebar.

Monthly

The monthly maintenance schedule times are proposed times for major updates to take place. Major updates include activities such as TLS certification renewals, DefectDojo version upgrades, and patches.

Daily

The daily maintenance schedule times are proposed times for minor updates to take place. Minor updates include activities such as emergency bug fixes and/or patches, or general server maintenance.

To save any changes made to preferred maintenance schedule times, use the Submit button.

Contact Support

The contact support page allows for a direct line of communication to the cloud management team from within DefectDojo. This is the fastest method of communication between DefectDojo customers and DefectDojo cloud maintainers.

To submit a new support inquiry, navigate to the Contact Support page under the Cloud Manager tab within the sidebar.

The following fields are required when submitting a new support inquiry:

Subject - the subject field should contain the reason for contact. It is the first thing a cloud maintainer will see when receiving a support inquiry.

Body - a detailed, but brief, description of the problem or question. (Note: Refrain from including any sensitive information within the subject or body of a support inquiry.)

Problem Type - the type of problem or question being submitted. There are multiple options to choose from when submitting a new support inquiry (listed and explained by example below). Select whichever one best matches the request.

• General Question - e.g. unsure of how to create a new product in DefectDojo
• Report a problem with DefectDojo SaaS - e.g. unable to edit subscription
• Report a problem with DefectDojo - e.g. server 500 error on a given url
• Report a problem with a subscription - e.g. unable to access DefectDojo cloud instance
• Pricing inquiry - e.g. questions about custom term agreements
• Billing inquiry - e.g. questions about changing billing information
• Other - e.g. looking to upgrade from DefectDojo Plus to DefectDojo Pro

Once the above fields have been filled out appropriately, send your support inquiry by using the Submit button.

For additional information, please see our pricing page.