Skip to main content
Versa Networks

Portal for Titan Order Management for MSPs

Versa-logo-release-icon.pngFor supported software information, click here.

As a managed service provider (MSP), you can create reseller and customer accounts, create orders, manage subscriptions, and create customer requests using Titan Portal. An MSP can order private SASE gateway services, initiate hardware and software license purchases, and provide SASE services to customers. This article describes how to perform these tasks.

Titan Portal Home Screen

After you successfully log in as a MSP, Titan Portal displays the home screen, with the Organization menu item selected by default. The home screen includes a list of organizations and tasks, and a settings menu.

A store administrator, MSP, or reseller can create new customers; order new devices; create organization notifications; view the number of total, active, and SASE licenses; and upgrade and renew devices from the Titan dashboard. The customers created and managed from the dashboard are not synced to the MSP portal (Shop). If you plan to use the MSP portal, continue using the MSP portal to create customer and manage licenses.

organization-add-devices-option.png

The left portion of the window displays the menu bar, which contains the following items.

Field Description
Organizations Displays a list of MSP provider organizations, customer organizations, and reseller provider organizations under the MSP. If an MSP has both manage customer and manage service privileges, the MSP can manage the services of any of the organizations.

Configure

Displays the Configure dashboard for the provider organization and for configuring devices or private gateways.

Monitor

Displays the Monitor dashboard for the provider organization and for monitoring the device or private gateways.

Troubleshoot

Displays the Troubleshooting dashboard for the provider organization for troubleshooting active devices.

Inventory

Displays the Inventory dashboard to view the licenses for the devices in the provider organization. An MSP can upgrade, renew, and delete device licenses on this dashboard.
Audit Logs Displays details about API calls and responses. You can view and download the audit logs.

Users

Displays the Users dashboard for viewing a list of MSPs or resellers added under the MSP. An MSP can create, edit, or delete an MSP or a reseller.

Documentation

Click the documentation-icon.png icon to go to the Titan documentation page. The documentation link is available to MSP login.

Titan-portal-home-screen-enterprise1.png

You use Settings > Logout to log out from Titan Portal. This automatically logs out from the Titan documentation page.

settings-logout.png

Bottom Menu Bar

The bottom portion of the window displays the bottom menu bar.

portal-configure-bottom-menu-bar.png

Field Description

Device License

Click CSG1000, CSG700, or CSG300 to display available license packages. Each icon displays the remaining number of available licenses.
Legend

Click to view, download, or print the site legend.

Map View

Toggle to switch between honeycomb and map view.

Group

Toggle to group sites by location.

Filter

Click the Portal_Getting_Started_filter_icon.png Filter icon to display the Visualizations window. Use the toggles to limit the display in honeycomb view, then click Apply.

Portal_Getting_Started_filter_window.png

Wrench

Click the Portal_wrench_icon.png Wrench icon to edit the default configuration. See Default Configuration Values.
Default Configuration Values

Titan Portal has a default configuration. When you create a new site, Titan populates the site's device configurations with the values from the default configuration. You can edit or clone the default template using the Portal_wrench_icon.png Wrench icon on the bottom menu bar in the Configure dashboard. All sites created after you save the configuration changes use the new values. You can select the new configuration template when you configure a new site.

template-select-new-site.png

You can edit defaults for WiFi radios, networking, security, and steering. For information about these settings, see ;Configure WiFi Radios, Configure Device Networking, Configure Security, and Configure Steering. Titan Portal uses only the settings that apply to a device. For example, if a device does not support WiFi, Titan Portal ignores the WiFi settings when creating a site. You cannot edit the LAN or LTE defaults.

Note: When you onboard any new site, this configuration is applied by default to all sites. If you update the default configuration, this configuration is not automatically applied to any site that has already been created on the dashboard.

Use the Easy Quick Picks feature to reset a device configuration to the default values. See Easy Quick Picks.

To edit or clone the default configuration:

  1. In the Configure dashboard, click the Portal_wrench_icon.png Wrench icon on the bottom menu bar.
  2. In the Select Template window, perform the following tasks.

    default-template-select.png
    • Template Name—Displays the name of the default configuration template.
    • # Devices—Displays the number of devices.
    • Clone—Click the icon-clone.png Clone icon to copy the configuration to another template so that you can customize it. Enter a template name and click Continue.

      default-template-clone.png
       
    • Delete—Click the icon-delete.png Delete icon to delete a custom template. You cannot delete a default or custom template if any device is associated with it.
    • Device List—Click the icon-device-list.png Device List icon to view the devices that use the template. Use the search option to search with the device name. Click Continue.

      template-device-list.png

      In the device list, the names that are grey are deployed devices and the names that are blue are activated devices.
  3. Click Continue.

Legend View

Legend provides an explanation of different LEDs, icons, images, etc. on the honeycomb. Legend can be viewed from the Titan Dashboard Configure and Monitor menus.

Click the legend-icon.png icon to view, download, or print the site legend.
 

legend-view.png

Map View

Move the toggle at the bottom of the Configure or Monitor dashboards to the right to switch from honeycomb to map view.

map-view.png

View Audit Logs

Audit logs provide details about API calls and responses. They include detailed information about every request that can be used for debugging. You can view and download the audit logs.

To view or download audit logs:

  1. Click Audit Logs in the left menu bar to display the Audit Logs dashboard.

    portal-audit-logs.png

You can perform the following actions from the audit logs dashboard:

  • Clear—Click the clear-icon.png icon to clear the logs.
  • Download—Click the download-icon.png icon to download the log file.
  • Refresh—Click the refresh-icon.png icon to refresh the audit logs window.

Create an MSP Account

An MSP can log in to Titan Portal and add other MSPs and resellers under the MSP. A confirmation email is automatically sent to the email address that directs customers to the login screen and allows them to set their password. This email address automatically becomes the login name for the account.

To create an MSP account:

  1. Log in to Titan Portal as an MSP.
  2. Enter your username and password, and click Login.
  3. Click Users menu in the left menu bar, click + Add User, and then enter the following information.

    msp-add-user.png
     
    Field Description
    First Name Enter a first name for the MSP.
    Last Name Enter a last name for the MSP.
    Email Address Enter an email address for the MSP. This automatically becomes the login name for the account. You cannot change the email address after creating the account but not the login name.
    Phone Number Select the country code and enter the phone number for the MSP. Titan Mobile pushes notifications to this phone number.
    Two Factor Authentication Slide the toggle to enable or disable two-factor authentication.
    Roles

    Select Managed Service Provider (MSP). An MSP can create another MSP and reseller with the rights to select allowed products and assign privileges.

    Allowed Product

    Select the required products that the MSP can order:

    • Cloud Appliances
    • Dell
    • Versa Appliances
    • Versa Cloud Gateway
    • Versa Virtual Appliances
    • White Box
    Privileges

    Select the privileges:

    • Manage Customer—Click to access the customer's organization and manage customer actions, such as creating a new customer, deleting a customer, and upgrading, renewing, and deleting device licenses.
    • Manage Service—Click to access the dashboard, to read and write customer networks and organizations, and to manage the devices onboarded by this MSP.
  4. Click Create.

Create a Reseller Account

An MSP can create a reseller account and assign user roles and privileges. A confirmation email is automatically sent to the email address that directs customers to the login screen and allows them to set their password. This email address automatically becomes the login name for the account.

To create a reseller account:

  1. Log into Titan Portal as an MSP.
  2. Enter your username and password, and click Login.
  3. Click Users icon in the left menu bar, click + Add User, and then enter the following information.

    msp-add-reseller.png.
    Field Description
    First Name Enter the first name for the reseller.
    Last Name Enter the last name the reseller.
    Email Address Enter an email address for the reseller. This automatically becomes the login name for the account. You can change the email address after creating the account but not the login name.
    Phone Number Select the country code and enter the phone number for the reseller. Titan Mobile pushes notifications to this phone number.
    Two-Factor Authentication Slide the toggle to enable or disable two-factor authentication.
    Roles

    Select Reseller.

    Company Enter the name of the company.
    Deploy Click to create a new region on the Director node for the reseller. Deploy and Regions fields are used for resellers created with provider organization access. If the reseller is created without provider organization access, deploy and regions fields are not mandatory.
    Regions Click to select regions. You can select multiple regions.
    Allowed Product

    Select the products that the reseller can order:

    • Cloud Appliances
    • Dell
    • Versa Appliances
    • Versa Virtual Appliances
    • Versa Cloud Gateway
    • White Box
    Privileges

    Select the privileges:

    • Manage Customer—Click to access the customer's organization so that you manage the customers by creating a new reseller, deleting a customer, and upgrading, renewing, and deleting device licenses. The MSP provides privileges to the reseller when creating the reseller.
    • Monitor Customer Network—Click to access the dashboard and read customer networks or devices onboarded by this specific reseller.
    • Manage Service—Click to access the dashboard and read and write customer networks or devices onboarded by this specific reseller.
  4. Click Create.

Create a New Customer from the Dashboard

An MSP with manage customer privilege can create a new customer under them and then manage the customer.

To create a new customer:

  1. Log into Titan Portal as an MSP.
  2. Enter your username and password, and click Login.
  3. In the Organizations dashboard, click + New Customer.

    organization-home-screen.png
  4. In the Add New Customer popup window, enter the following information.

    organization-create-new-customer.png
     
    Field Description
    First Name Enter the customer's first name.
    Last Name Enter the customer's last name.
    Email Enter an email address for the customer.
    Mobile Number Select the country code and enter the mobile number for the customer.
    Two-Factor Authentication Click to enable two-factor authentication.
    Organization Name Enter the organization name.
    Select Reseller Enter the reseller name or email to search for the reseller, and then select the name.
    Region Select a region for Versa Director. You can select multiple regions.
    Select Installation Methods
    • Versable
    • URL ZTP
    • GZTP
    Versa Director Customer Role

    Select the Versa Director customer role:

    • TenantDashboardOperator
    • TenantOperator
    • TenantSecurityAdmin
    • TenantSuperAdmin
    Privileges Select the customer's privileges.
    • Write Access
    Grant permission to modify the selected network (WAN, LTE, WiFi, and LAN), security, steering, DNS proxy, and miscellaneous settings. Note that DNS proxy tab is displayed only for devices that use secure application optimization license tier.
    • Read Access

    Grant viewing permissions:

    • Versa Director—Grant viewing access to the Live Monitoring dashboard in Versa Director.
    • Analytics—Grant view access to the Versa Director and Analytics dashboard in Versa Director.
    • Audit Logs—Grant viewing access to the Audit Logs dashboard in the Titan Portal.
    Versa Ticketing Support Portal Access Click to enable access to the Versa support portal for ticketing.
  5. Click Submit.

Edit an Organization

After you create a new customer, you can edit the organization to make any updates. Note that you cannot edit the organization name, region, and select reseller fields.

To edit an organization:

  1. In the Organizations dashboard, locate the organization in the grid, click the 3-dot icon, and then click Edit Organization.

    edit-organization-option.png
     
  2. In the Edit Organization popup window, edit the following information.

    edit-organization.png
     
    Field Description
    First Name Enter the customer's first name.
    Last Name Enter the customer's last name.
    Email Enter an email address for the customer.
    Mobile Number Select the country code and enter the mobile number for the customer.
    Two-Factor Authentication Click to enable two-factor authentication.
    Select Installation Methods
    • Versable
    • URL ZTP
    • GZTP
    Versa Director Customer Role

    Select the Versa Director customer role:

    • TenantDashboardOperator
    • TenantOperator
    • TenantSecurityAdmin
    • TenantSuperAdmin
    Privileges

    Select the customer's privileges.

    • Write Access
    Grant permission to modify the selected network (WAN, LTE, WiFi, and LAN), security, steering, DNS proxy, and miscellaneous settings. Note that DNS proxy tab is displayed only for devices that use the secure application optimization license tier.
    • Read Access

    Grant view permission:

    • Versa Director—Grant access to the Live Monitoring dashboard in the Titan Portal.
    • Analytics—Grant access to the Analytics and Director dashboards in Titan Portal.
    • Audit Logs—Grant access to the Audit Logs dashboard in the Titan Portal.
    Versa Ticketing Support Portal Access Click to enable Versa support portal access for ticketing.
  3. Click Update.

Create a Notification

To create a maintenance notification:

  1. In the Organizations dashboard, select the organization. Then click Create Notification.

    organization-create-notification.png
  2. In the Create Maintenance Notification popup window, enter the message and select the notification area.

    portal-organization-maintenance-notification.png
  3. Click Send. A notification is sent to the user's email address and mobile application. The user must be logged in to view the email message and notification in the mobile application.

Add Devices

To add devices to an organization:

  1. In the Organizations dashboard, locate the organization in the grid, click the 3-dot icon, and then click Add Devices.

    organization-add-devices-option1.png
  2. In the Add Device Details popup window, select the hardware device. The hardware devices are displayed as per the allowed products selected during the MSP account creation:
    • CSG
    • cCSG
    • vCSG
    • Dell
    • White Box
    • Cloud Gateway—MSPs can order SASE gateway services such as SWG and VSA from cloud gateway for customers. If an MSP does not have a provider organization, the MSP cannot order private SASE gateways.
    1. To add a CSG device, click CSG button, and then enter the following information.

      organization-add-devices1.png
       
      Field Description
      Device Type

      Select the hardware device type CSG300, CSG700, or CSG1000

      Region

      Choose a region:

      • Americas & EMEA
      • Asia
      Hardware Add-on Click to display the hardware add-on menu, and then click the add-on.
      Wireless Interface Click to display the wireless interface menu, and then select wireless interface.
      Add-on NIC Click to display the add-on NIC menu, and then select the add-on.
      Software License Tier

      Select the software license:

      • Enterprise Security—Standard license.
      • Advanced Security—Advanced security features.
      • Secure Application Optimization—Secure application optimization license is available on all devices except CSG350 and CSG730 devices. DNS proxy configuration is enabled only on the devices that use the secure application optimization license.
      Subscription Duration

      Select the length of the subscription:

      • 1 year
      • 3 years
      • 5 years
      PO License Start Date Enter the purchase order license start date
      PO Number Enter the purchase order number
      Hardware Replacement

      Select the hardware replacement time:

      • Next business day
      • Same business day
      Quantity Enter the number of hardware devices to order.

       
    2. To add cCSG, vCSG, Dell, or whitebox device, click the hardware button, and then enter the following information.

      organization-add-devices2.png
       
      Field Description
      Device SKU

      Select the hardware device SKU:

      • For cCSG devices:
        • cCSG-L
        • cCSG-M
        • cCSG-XL
      • Dell
      • For vCSG devices:
        • vCSG-L
        • vCSG-M
        • vCSG-XL
      • Whitebox
      • Cloud Gateway—MSPs can order SASE gateway services such as SWG and VSA from cloud gateway for customers. If an MSP does not have a provider organization, the MSP cannot order private SASE gateways.
      Software License Tier

      Select the software license:

      • Enterprise Security—Standard license
      • Advanced Security—Advanced security features
      • Secure Application Optimization—Secure application optimization license is available on all devices except CSG350 and CSG730 devices. DNS proxy configuration is enabled only on the devices that use the secure application optimization license.
      Subscription Duration

      Select the length of the subscription:

      • 1 year
      • 3 years
      • 5 years
      PO License Start Date Enter the purchase order license start date. Based on the subscription year, the expiry date is calculated.
      PO Number Enter the purchase order number
      Quantity Enter the number of hardware devices to order.

       
    3. To add a cloud (SASE) gateway, click Cloud Gateway button, and then enter the following information. A store administrator, MSP, or reseller can add a device or cloud gateway for a customer.

      organization-add-device-details-cloud-gateway1.png
       
      Field Description
      SASE Gateway Region

      Select the SASE gateway region.

      Versa Secure Web Gateway (SWG) Service (Group of Fields) Click to enable the SWG service.
      • Service Tier

      Select the service tier:

      • Essential
      • Professional
      • Users
      Enter the number of authorized users. You must add minimum 50 users.
      Versa Secure Access (VSA) Service (Group of Fields) Click to enable the VSA service.
      • Service Tier

      Select the service tier:

      • Essential
      • Professional
      • No of Client User
      Enter the number of client users. You must add minimum 50 users.
      User Authentication

      Select the user authentication:

      • Enterprise Active Directory—Authenticate using an LDAP server.
      • Local User Directory—Authenticate using a username and password.
      Subscription Duration

      Click the length of the subscription:

      • 1 year
      • 3 years
  3. Click Submit.

Prerequisites for Deploying cCSG Devices

This section describes the prerequisites for deploying a cCSG device on any cloud through the Versa Titan dashboard.

Before you begin, perform the following tasks on the cloud:

  • Create a cloud server and mount it to the internal gateway to reach the internet.
  • On the deployed cloud server, install VOS Release 20.2.x, depending on the software running on Versa Director.
  • Collect the LAN subnet information for the cloud server. Note that before you deploy the cCSG device, you must configure the& cCSG LAN interfaces to match the cloud environment networks.

Deploy SASE Gateway Services

SASE gateways are multitenant gateways hosted and maintained by Versa Networks at various data centers in the U.S., Japan, and Europe. SASE gateways provide security firewalls and QoS-enabled traffic steering for branch networks and secure access clients. Customer branch devices are automatically connected to all the gateways in the SD-WAN as a full mesh. You can create steering and firewall rules for SD-WAN, internet, and secure web gateway zones.

When you are enrolled for the SASE gateway service, the corresponding tenant is instantiated on the SASE gateway and an instance of the SASE gateway becomes available in the Versa Titan customer dashboard. To configure security and SD-WAN steering policies options in a Titan branch, see Configure Security and Configure Steering.

In Release 8.2.0, Versa Networks manages SASE gateway for customers. In Releases 9.1.0 and later, only a store admin, MSP, or reseller can manage private gateways and purchase SWG and VSA services for customers.

Add SASE Gateway Devices

SASE gateway is supported on the following Versa Networks hardware appliances:

  • CSG700 series appliances
    • CSG770 model
  • CSG1000 series appliances
    • CSG1300 model
    • CSG1500 model
  • cCSG appliances
    • cCSG-L model
    • cCSG-XL model
  • Dell
    • VEP4600-V910
    • VEP4600-V930
  • vCSG appliances
    • vCSG-L model
    • vCSG-XL model

To add a SASE gateway device:

  1. Log in to Titan Portal as an MSP.
  2. Enter your username and password, and click Login.
  3. In the Organizations dashboard, locate the organization in the grid, click the 3-dot icon, and then click Add Devices.

    organization-add-devices.png
  4. In the Add Device Details popup window, select the hardware device. MSPs can order a private SASE gateway from a cloud gateway for customers. For more information, see Add the SASE Gateway Service.
    • CSG
    • cCSG
    • vCSG
    1. To add a CSG device, click CSG as the hardware device, and then enter the following information.

      organization-add-device-details-csg-sase.png
       
      Field Description
      Device Type

      Select the hardware device type CSG700 or CSG1000.

      Region

      Choose a region:

      • Americas & EMEA
      • Asia
      Hardware Model

      Select the hardware model:

      • For CSG700 series, select any CSG770 model.
      • For CSG1000 series, select any models.
      Wireless Interface Click to display the wireless interface menu, and then select wireless interface.
      Add-on NIC Click to display the add-on NIC menu, and then select the add-on.
      Private Gateway Click to enable Versa Secure Web Gateway (SWG) service and the Versa Secure Access (VSA) service.
      Subscription Duration

      Select the length of the subscription:

      • 1 year
      • 3 years
      • 5 years
      PO License Start Date Enter the purchase order license start date
      PO Number Enter the purchase order number
      Hardware Replacement

      Select the hardware replacement time:

      • Next business day
      • Same business day
      Quantity Enter the number of hardware devices to order.
      SASE Gateway Options  
      Versa Secure Web Gateway (SWG) Service (Group of Fields) Click to enable SWG service.
      • Service Tier

      Select the service tier:

      • Essential
      • Professional
      • Users
      Enter the number of users. You must add minimum 50 users.
      Versa Secure Access (VSA) Service (Group of Fields) Click to enable VSA service.
      • Service Tier

      Select the service tier:

      • Essential
      • Professional
      • No of Client User
      Enter the number of client users. You must add minimum 50 users.
         

       
    2. To add cCSG or vCSG device, click cCSG or vCSG button, and then enter the following information.

      organization-add-device-details-ccsg-sase.png
       
      Field Description
      Device SKU

      Select the SKU for the device:

      • For cCSG
        • cCSG-L
        • cCSG-XL
      • For vCSG
        • vCSG-L
        • vCSG-XL
      Private Gateway Click to enable Versa Secure Web Gateway (SWG) service and the Versa Secure Access (VSA) service.
      Subscription Duration

      Click the length of the subscription:

      • 1 year
      • 3 years
      • 5 years
      PO License Start Date Enter the purchase order license start date
      PO Number Enter the purchase order number
      Quantity Enter the number of hardware devices to order.
      SASE Gateway Options  
      Versa Secure Web Gateway (SWG) Service (Group of Fields) Click to enable SWG service.
      • Service Tier

      Select the service tier:

      • Essential
      • Professional
      • Users
      Enter the number of users. You must add minimum 50 users.
      Versa Secure Access (VSA) Service (Group of Fields) Click to enable VSA service.
      • Service Tier

      Select the service tier:

      • Essential
      • Professional
      • No of Client User
      Enter the number of client users. You must add minimum 50 users.
  5. Click Submit.

Configure and Activate SASE Gateway Devices

This section provides step-by-step procedures for configuring and activating SASE gateway devices on supported Versa Networks hardware appliances.

To configure and activate SASE gateway devices:

  1. Create a site using a software license.
  2. Create a device configuration for the site. When you save the device configuration, it is stored in the Titan cloud portal. You should configure two WAN interfaces before deployment.
  3. Deploy the device configuration to the Versa Controller node, to inform the Controller node that the configuration exists.
  4. Activate the appliance.

Create a Site for the SASE Gateway

To create a site for the CSG770 model, CSG1000 series, and vCSG series appliances:

  1. Log in to Titan Portal as an MSP.
  2. Enter your username and password, and click Login.
  3. In the Organizations dashboard, click the MSP provider organization in the grid.

    create-site-sase-gateway.png
  4. Click Configure in the left menu bar to display the Configure dashboard.
  5. Click one of the license package icons to display the available license packages. To add the site to the honeycomb, drag the license package onto the dashboard.
    • CSG700 Series
    • CSG1000 Series
    • cCSG Series
    • vCSG Series

      create-site-sase-gateway1.png
  6. In the New Site: Configuration window, select a region to create this private gateway and click Continue.

    create-site-sase-gateway2.png
  7. Enter information for the following fields, and then click Next.

    sase-create-site-new-site-config.png
     
    Field Description
    Site Name Enter a name for site.
    Address Enter the street address, zip code, city, state, and country.
    Latitude and Longitude
    • Auto Generate—Click the Auto Generate toggle to enable the determination of latitude and longitude coordinates automatically.
    • Manual—Click the Manual toggle to enable the determination of latitude and longitude coordinates manually. This is the default.
    Device FQDN Enter the FQDN for the device. When you create a certificate, the device FQDN name and the VSA certificate domain name must be the same.
    Topology

    Click to configure the site role:

    • Configure as HubConfigure the device as a hub in a hub-and-spoke topology
    • Configure as Hub ControllerConfigure the device as a hub–controller in a hub-and-spoke topology. This device takes up a dual role of a hub and a Controller node. This function is typically required when branches are connected to a private MPLS network that has no direct access to the Versa Networks–hosted Controller node in the public internet.
      Note that you can select the hub–controller topology only if you subscribe to the Secure Application Optimization license tier. The asterisk (*) in the device model in honeycomb view denotes that the device uses this license tier.

    If you do not select a topology, only the SASE gateway is attached.

    Service

    View device details.

    • Serial Number—Enter the serial number of the appliance.
  8. Click the WAN box to display the Network > WAN screen.

    create-site-sase-gateway3.png
     
  9. Enter the static IP address for the WAN1 Port0 interface, and then click Save.

    sase-network-wan-config.png
  10. Click the LAN box to open the Network > LAN > Ethernet Ports screen.

    create-site-sase-gateway4.png
     
  11. Select LAN1 Port1 from the drop-down, and click the delete icon to delete the LAN port.

    sase-create-site-lan1-remove.png
  12. Go to Network > WAN and click +WAN to configure Port1 as the WAN2 secondary port.

    sase-create-site-add-wan.png
  13. Click Continue.

    sase-create-site-add-wan-port.png
  14. Click Save, and then click the down arrow next to Save to display the Deploy popup window. Ensure that the gateway is on for WAN1 and WAN2 before deploying and activating the private gateway.
  15. Click Deploy. Note that you can deploy a SASE gateway like a normal device and you can activate it using the global GZTP, WiFi, and Versable methods. To deploy and activate a device, see Deploy a Device Configuration and Activate an Appliance.

Install Certificates for VSA

A certificate authority (CA) is an entity that issues digital certificates that are used to verify the ownership of a public key. The digital certificates allow a party to trust the signature that is made by a private key that corresponds to the certified public key.

After a Titan device requests a certificate from a CA server, the CA server issues the certificate. You then need to upload the certificate to the CA database so that it can be used for verification.

Note: After a SASE gateway devices is activated, you need to log in as an MSP user and install all necessary certificates for VSA. MSP must create a tenant only after uploading the VSA certificate. When an MSP user creates a tenant, Titan copies the necessary VSA certificates to the tenant. You need to install the VSA certificate only if a SASE gateway is purchased for VSA service.

The following table describes information about SASE gateway certificate management.

SASE Gateway Certificate Management MSP Provider Organization MSP Tenant Organization Branch or Hub Notes
VSA certificates MSP user must upload necessary certificates to the provider organization. Titan copies necessary certificates to the tenant organization. NA User must upload a VSA certificate after the SASE gateway device is activated. When the user creates other tenant organizations, the same certificate is copied to all tenants.
System-generated TLS decryption certificate TLS decryption profile configured with default certificate. The certificate name and provider organization name are the same. TLS decryption profile configured with default certificate. The certificate name and tenant organization name are the same. TLS decryption profile configured with default certificate. The certificate name and tenant organization name are the same. System generates TLS decryption certificate with the organization name using Versa root certificate.
User-generated TLS decryption certificate User can upload their own certificate. User cannot upload their own certificate. User can upload their own certificate. Only device owner can upload their own certificate.

Before you upload a CA certificate, you must upload a key file with the extension .key.

To upload a key file:

  1. Locate the device in the grid, and then click the 3-dot icon in the Action column to display available actions.

    sase-upload-ca-certificates.png
  2. Click Upload CA Certificates and then click Upload Key.

    portal-inventory-upload-key.png
  3. In the Add Key popup window, enter the following information.

    sase-upload-certificate-add-key.png
    1. Enter a key name and password.
    2. Click Browse file to select the key file to upload. The file must be in .key format.
    3. Click Add.
  4. Click Upload CA Certificates, and then click Upload Certificate.

    portal-inventory-upload-certificate.png
  5. In the Add CA Certificate popup window, enter the following information.

    sase-upload-certificate-add-ca-certificate.png
    1. Enter a certificate name.
    2. Select the key file name.
    3. Click Browse file to select the CA certificate file to upload. The file must be in .crt, .cer, or .pem format.
    4. Click Add. The certificate file is displayed.
    5. Click the download-icon.png icon to download the file.
  6. Click Upload CA Certificates and then click Upload CA Chain.

    portal-inventory-upload-ca-chain.png
  7. In the Add CA Chain popup window, enter the following information.

    sase-upload-certificate-add-ca-chain.png
    1. Enter a CA chain name.
    2. Click Browse file to select the CA chain file to upload. The file must be in .crt format.
    3. Click Add

Add the SASE Gateway Service

An MSP provider organization can select cloud gateway services and order the SWG and VSA services. You can select available SASE gateways and advanced services, such as VLAN and port details. Note that you can select cloud gateway services as an SASE gateway to obtain the service. If you have already added a SASE gateway, you cannot select the cloud gateway option. If you have already purchased a cloud gateway, you can upgrade the services using Inventory menu.

To add a SASE gateway service:

  1. In the Organizations dashboard, locate the organization in the grid, click the 3-dot icon, and then click Add Devices.

    add-sase-gateway-service.png
  2. In the Add Device Details popup window, click Cloud Gateway and enter information for the following fields.

    portal-add-sase-gateway-service-ccsg.png
     
    Field Description
    SASE Gateway Region

    Select the SASE gateway regions.

    • Click Advanced option to enter the VLAN and port details for the SASE gateway services. If you do not select any VLAN ID, the organization ID is taken as the VLAN ID by default.
    • Advanced
    Click the Advanced button to enter the VLAN and port details for the SASE gateway services. If you do not select any VLAN ID, the organization ID is used, by default, as the VLAN ID.
    sase-add-cloud-gateway-advanced.png
    Versa Secure Web Gateway (SWG) Service (Group of Fields) Click to enable the SWG service.
    • Service Tier

    Select the service tier:

    • Essential—Only firewall and URL filtering are available.
    • Professional—All security services are available, including firewall, URL filtering, antivirus, IPS, and TLS decryption.
    • Users
    Enter the number of authorized users. The minimum number of users is 50.
    Versa Secure Access (VSA) Service (Group of Fields) Click to enable the VSA service.
    • Service Tier

    Select the service tier:

    • Essential—Supports only split-tunnel traffic. For a split tunnel, the learned routes are redirected to the SASE gateway and the rest of the traffic is redirected through local internet.
    • Professional—Supports full-tunnel traffic. For full-tunnel traffic, all the tunnel traffic is encrypted and redirected to the SASE gateway.
    • No of Client User
    Enter the number of authorized users. The minimum number of users is 50.
    • User Authentication

    Select the user authentication method:

    • Enterprise Active Directory—Authenticate using an LDAP server.
    • Local User Directory—Authenticate using a username and password.
    Subscription Duration

    Select the length of the subscription:

    • 1 year
    • 3 years

     
  3. Click Submit.

View SASE Gateway Licenses

To manage SASE gateway licenses and devices in the Titan Inventory:

  1. Click the Inventory icon in the left menu bar to open the Inventory dashboard.
  2. Select SASE Gateway from the device type drop-down list at the top of the screen.

    sase-view-sase-licenses.png

Upgrade or Renew SASE Gateway Licenses

You must upgrade SASE gateway license before the license expires. If the license has expired, the Configure and Inventory dashboards display the license expired status for the site, and the network configuration window is display in purple and has read access only. You must renew the license to make any changes to the device configuration.

sase-view-sase-licenses4.png

sase-view-sase-licenses2.png

To upgrade or renew SASE gateway licenses in the Titan Inventory:

  1. Click the Inventory icon in the left menu bar to open the Inventory dashboard.
  2. Select SASE Gateway in the Device Type field.
    1. Click Upgrade.

      sase-view-sase-licenses.png
       
      • In the Upgrade popup window, enter the following information.

        sase-gateway-upgrade.png
         
      • For upgrade:
        • Additional Gateway Users for SWG service. The minimum number of gateway users is 50.
        • Additional Client Users for VSA service. The minimum number of gateway users is 50.
      • Enter additional number of days for the renewal of the license.
      • Click Submit.
    2. Click Renewal.

      sase-view-sase-licenses1.png
       
      • In the Renewal popup window, enter the number of days to renew the license.

        sase-view-sase-licenses-renewal1.png
         
      • Click Submit. To verify the SASE gateway licenses, see View SASE Gateway Licenses.

Add an Enterprise Admin or Enterprise User from a Customer Organization

An MSP can add a new account and assign user roles and privileges for enterprise administrators and enterprise users. You cannot assign more privileges than the account you are using. Titan Portal automatically sends an email to the user with instructions for creating an account password and downloading Titan Mobile. Users can use their accounts to log in to both Titan Portal and Titan Mobile.

To add a new user:

  1. Log in to Titan Portal as an MSP.
  2. Enter your username and password, and click Login.
  3. In the Organizations dashboard, click the MSP provider organization in the grid.

    add-enterprise-admin.png
     
  4. Click the Users icon in the left menu bar to display the Users dashboard.
  5. Click the Users drop-down list and select Titan User. Then click the + Add User icon.

    enterprise-admin-msp-user-drop-down.png
     
  6. Enter information for the following fields.

    add-enterprise-admin1.png
     
    Field Description
    First Name Enter the user's first name.
    Last Name Enter the user's last name.
    Email Address Enter an email address for the user. The email address automatically becomes the login name for the account. After creating the account, you can change the email address but not the login name.
    Phone Number Select the country code and enter the phone number for the MSP. Titan Mobile pushes notifications to this phone number.
    Two Factor Authentication

    Slide the toggle to enable or disable two-factor authentication.

    Role

    Assign a role to the account.

    • Enterprise Admin

    Click to assign the Enterprise Admin role. This role has the following privileges:

    add-enterprise-admin2.png

    • Read and write access to DNS Proxy, LAN, LTE, Miscellaneous, Security, Steering, WAN, and WiFi settings. Note that DNS proxy tab is displayed only on the devices that use the secure application optimization license tier.
    • Read access to Analytics, Audit Logs, Titan Shop, and Versa Director.

    By default, an enterprise administrators has the following privileges:

    • Read access to inventory, monitor, troubleshoot, and users menu items.
    • Write access to WiFi radio settings and read-only access to all other configuration settings.
    • Can create a new site.
    • Can create new user accounts but cannot assign more privileges to an account than they themselves have.
    • Enterprise User

    Click to assign the Enterprise User role. This role has the following privileges:
     

    add-enterprise-admin3.png
     

    • Read and write access to DNS Proxy, IPsec Backhaul, LAN, LTE, Miscellaneous, Routing, Secure Access, Security, Steering, WAN, and WiFi settings. Note that DNS proxy tab is displayed only on the devices that use the secure application optimization license tier.
    • Read access to Audit Logs, Analytics, and Versa Director.

    By default, an enterprise user has the following privileges:

    • Read access to monitor and troubleshoot menu items.
    • Write access to WiFi radio settings and read-only access to all other configuration settings.
  7. Click Create to add the new user.

Add a Titan Secure VPN Service User

An MSP can add a new account for Titan secure VPN service user.

To add a new Titan secure VPN service user:

  1. Click the Users icon in the left menu bar to display the Users dashboard.
  2. Click Users drop-down list in the main pane and select Titan Secure VPN Service User.

    enterprise-admin-msp-manage-sase-clients.png
     
    Field Description
    Users

    Select a user from the Users drop-down list:

    • Titan User
    • Titan Secure VPN Service User
    Licenses

    Displays the license information:

    • Total
    • Used
    Import Users

    Click enterprise-admin-msp-import-user-icon.png icon to import users from an Excel template.
     

    enterprise-admin-msp-users-vsa-import-user.png

    • Click Browse file icon and select the Excel template.
    • Click Upload.
    Name User's first and last name.
    Email User email address. Initially matches username but can be edited.
    Phone User phone number.
    Action

    Click the 3-dot icon to choose an action:

    enterprise-admin-msp-edit-user.png

    • Edit a user
    • Delete a user

     
  3. Click the add-user-icon.png icon at the top right to display the Add User window.

    enterprise-admin-msp-add-admin-user.png
     
  4. Enter information for the following fields.
     
    Field Description
    First Name Enter the user's first name.
    Last Name Enter the user's last name.
    Email Address Enter an email address for the user. This automatically becomes the login name for the account. You can change the email address after creating the account but not the login name.
    Phone Select the country code and enter the phone number for the MSP. Titan Mobile pushes notifications to this phone number.
  5. Click Create.

Edit a User

The enterprise admin can edit user information and change roles and privileges assigned to a user.

To edit a user:

  1. Click the Users icon in the left menu bar to display the Users dashboard.
  2. Hover over the 3-dot menu in the user Actions column and click Edit to display the Edit User window.

    enterprise-admin-msp-edit-admin-user.png
     
  3. Edit the information as needed in the fields provided. Note that you cannot edit the email address.
  4. Click Enterprise User or Enterprise Admin to change roles.
  5. Check or uncheck boxes to change Privileges.
  6. Click Update to save the settings.

Delete a User

The enterprise admin can delete users from the Titan Users dashboard. Deleting an account with an active login automatically logs out the user.

To delete a user:

  1. Click the Users icon in the left navigation menu bar to display the Users dashboard.
  2. Hover over the 3-dot menu in the user Actions column and click Delete.
  3. Click Yes in the pop-up window to delete the user, or click No to return to the Users dashboard without deleting the user.

Export Account Information

To export account details to a file in PDF, CSV, or XLS format:

  1. Click the Users icon in the left navigation menu bar to display the Users dashboard.
  2. Click the Portal_Export_icon.png Export icon to display a drop-down menu.
  3. Select PDF, CSV, or XLS, then use the pop-up window specific to your operating system to save the file.

Task View

Click the task-icon.png icon to view the Titan and Versa Director tasks.

top-menu-bar-task-list.png

You use the Task list to view the details and progress of any activity done by Titan users. Expand an activity to view more information, which you can use to analyze and troubleshoot any issues.

portal-organization-home-task-list.png

Versa Director and Analytics

MSPs can access Versa Director and Analytics using the Settings menu.

analytics-director-settings-menu.png

Manage Profile

MSPs can change passwords from the manage profile option in the Settings menu. If you forget the password, use the forget password link on the login screen.

To change the password:

  1. Log in to Titan Portal as an MSP.
  2. Enter your username and password, and click Login.
  3. Click the Settings icon and then click Manage Profile.

    manage-profile-settings-menu.png
  4. Click Change Password.

    enterprise-admin-msp-manage-profile.png
  5. In the Change Password popup window, enter the old and new passwords and confirm the new password.

    change-password.png
     
  6. Click Set Password.

Manage Device License Inventory

Use the Inventory dashboard to view device licenses and associated devices. You can turn service and security on or off. You can also perform the following tasks and Inventory actions from the dashboard:

  • Management profile
  • Add a cloud account for MSP provider organization
  • Download and export inventory data in PDF and CSV format.
  • Select display fields in the Inventory section.

For more information, see Manage Device License Inventory in the Titan Portal 9.1.0.

An MSP with manage service privilege can view all the menus and inventory options. However, the MSP cannot manage the customer devices (update, renew, and delete) from the Inventory menu.

msp-inventory-manage-service.png

An MSP with manage customer privilege can view only the Inventory menu and they can manage the customer devices (update, renew, and delete) from the Inventory menu.

msp-inventory-manage-customer.png

Inventory Actions

To deactivate (remove) or delete a SASE tenant, renew a license, request the location of a device, upload CA certificates, or perform software upgrades from the Inventory dashboard:

  1. Locate the device in the grid, then click the 3-dot icon in the Action column to display available actions.

    portal-inventory-actions1.png
  2. Click an action.
    • Delete tenant—Delete a SASE tenant from SASE gateway devices.
    • Renewal—Provide the ability to renew an existing license.
    • Request device location—Send a notification on the mobile app to the user requesting the device location.
    • Upload CA Certificates—Upload the key file, CA certificate file, and CA chain file.
    • Deactivate—Remove the device, its site, and its configuration from the Titan dashboard.​​​​​​
    • Software Upgrades—Upgrade the security package (SPack), and download and upgrade the device software.

Note: You must wait 5 minutes after undeploying a configuration before redeploying and activating an appliance. Titan must sync internal data structures when you undeploy. If this process is not complete, you receive an error message when you attempt to activate the appliance.

Supported Software Information

Releases 9.1 and later supports all content described in this article.

Additional Information

Titan Order Management for MSPs

  • Was this article helpful?