MSSP Dashboard

This section describes how to access Quantum Spark Management through a Managed Security Service Provider (MSSP) account in the Infinity Portal. MSSP accounts can manage multiple child accounts while maintaining centralized visibility and configuration control.

For more information about creating or managing an Infinity Portal MSSP account, see the Infinity Portal MSSP Administration Guide.

MSSP is not supported in these scenarios:

  • Cross-region MSSP configurations

  • Deployments with V1 API

  • MSSP hierarchies with more than three levels (maximum supported hierarchy: Grandparent > Parent > Child)

MSSP accounts include a dedicated dashboard that aggregates information from all associated child accounts.

To open the MSSP dashboard:

  1. Sign in to Quantum Spark Management.

  2. Click Dashboards in the left navigation tree.

  3. Click MSSP Dashboard.

Visibility

The center of the top strip displays aggregated information for the MSSP account. Click anywhere in the strip to view:

  • Accounts - All managed child accounts

  • Gateways - All connected and disconnected Gateways across all accounts

  • Connected - Number of connected Gateways

  • Disconnected - Number of disconnected Gateways

  • Pending Activation - Number of Gateways pending activation

Find Gateway Button

  1. Click on Find Gateway to search for a Gateway.

  2. The Find Gateway window opens. By default, it is empty. Enter a minimum of three characters in the Search for Gateways field to search by:

    • Gateway name

    • Account name

    • Description

    • MAC Address

  3. The search results include these access options:

  • Go to Gateway – Opens the Gateway object and switches to the applicable account

  • Reach My Device (RMD) – Opens the RMD WebUI in a new browser tab

  • IP Address – Opens the IP address in a new browser tab

  • Shell – Opens the shell URL in a new browser tab (part of RMD)

New Gateway Button

  1. Click on New Gateway to open a window for creating a new Gateway directly in a child account.

  2. Select an account that is registered to Spark Management. Spark Management automatically registers any unregistered accounts.

  3. After you create the Gateway Object, the activation key appears in the window.

Note - When you create a Gateway in a child account:

  • The Plan associated with the Gateway is shared with the account.

  • You must specify the Gateway Owner.

  • The Gateway Owner object is created in the assigned account.

This section shows the number of Gateways reporting logs, grouped by log type. Click a category to drill down to a filtered log table:

  • Critical events

  • Assets at risk

  • High risk apps

  • Prevented attacks

  • Detected attacks

This section displays accounts that reported issues through their Gateways. Click a column to drill-down to the applicable dashboards of the affected account:

  • System issues

  • Internet issues

  • VPN issues

  • IoT issues

  • Critical issues

This section is similar to the standard Spark Management "Things to Do" widget and provides:

  • A list of mandatory administrator actions

  • The number of Gateways reporting each issue across all accounts

  • For more information, click the Learn More link if available.

  • Click Show Accounts to open a detailed window with a drill-down option to the applicable page.

This section displays information about Shared Plans:

  • Shared Plans - Lists all Shared Plans

  • Accounts Using Shared Plans - Number of accounts using each Plan (click to drill-down).

  • New overrides in Plans - Number of new overrides made by child accounts (click to open the review window).

The Attacks Timeline by Account section presents a chronological graph of security attacks associated with a specific account.

You can filter the graph by:

  • Detected Attacks

  • Prevented Attacks

This section shows the five accounts with the highest number of detected security events. It provides Administrators with a quick overview of accounts most frequently involved in suspicious

activity.

Managing Shared Plans Across MSSP Accounts

MSSP Administrators can create and manage configuration Plans from the parent account and share them with assigned child accounts.

  • Parent to child - Changes made in the parent account apply to all assigned child accounts and their connected Gateways.

  • Child to Parent - Changes made in a child account apply only to the specific configuration section that was overridden. All other sections of the Plan remains synchronized with the parent. The parent account can always Revert back to Plan for specific sections.

Single-Level Synchronization Behavior:

  • Shared Plans apply to all child accounts across all hierarchy levels. This includes the MSSP account itself and accounts that the MSSP Administrator cannot access.

  • Intermediate accounts cannot customize shared Plans for their own child accounts. To customize a shared Plan, an intermediate account must first clone the Plan and share the clone separately.

Important - Shared Plans do not apply to these settings:

  • VPN settings

  • Local network settings

  • Enhanced notifications

Procedures

  1. In the left navigation tree, click Plans.

  2. Click New.

  3. Enter the required information in the Create New Plan wizard.

  4. (Optional): Copy settings from an existing child account.

  5. Select child accounts with which to share the Plan.

    1. Click +.

    2. Select the relevant accounts.

    3. Click Assign.

    You can view the assigned accounts in the Assigned Accounts table.

  1. Select an existing Plan.

  2. Click Manage.

  3. Click + to view all associated accounts. Use the search field to filter accounts by name.

  4. Review the impact for each account, including the number of affected Gateways. If a Plan with the same name exists in the child account, the parent Plan overrides it.

  5. Select the child accounts.

  6. Click Assign.

  7. Verify completion in the Status column.

Note - The tag in the top-left corner shows the number of accounts using the Plan. Click Manage to open a window showing account names, filters, and drill-down options.

  1. Select the Plan.

  2. Click Manage.

  3. Select the accounts to unassign.

  4. Click X.

  5. Confirm removal.

6. Wait for the account to disappear from the list.

Note - After unassignment, the Plan object remains in the child account but becomes a standalone, unsynchronized Plan.

  1. Open the review window using one of these methods:

    • Select the shared Plan in Manage, then click the override summary row.

    • Click an override value in the Plans widget on the overview page.

  2. Review the accounts with overrides, number of impacted Gateways ,overridden configuration sections.

  3. Select the account(s) on which to act.

  4. Click Keep Override or Revert back to Plan, as applicable.

Notes:

  • Changes are tracked as New Overrides.

  • Parent accounts can revert specific sections without affecting the rest of the Plan.

Frequently Asked Questions