First settings (administrator)
What an administrator sets up in the first week, in an order that avoids going back over things.
The order below saves you from undoing what you have just done. Each step points to its detailed page.
Day one: access
- Start by turning on your own two-factor authentication.
- Set up customer security: second-factor methods, sign-out after inactivity, SSO if you have one. See Customer security and SSO.
- Create your team's accounts with the right role (viewer, operator, administrator) and, if needed, restrict each person's modules. See Users and roles.
- Configure email sending in the SMTP tab and send yourself a test. Without SMTP, no alert goes out by email. See Customer settings.
Day one: the first agents
Install the agent on a few pilot computers with NetDiag, NetFlow and AssetMonitor (Install the agent). Check that they show as Online in FSI Agents, then open Network diagnostics: the first measurements arrive within a few minutes. Finally, decide on the fleet's update policy.
First week: widen the scope
| Step | What you get | Page |
|---|---|---|
| Agent with SI-Tracer on the domain controllers | Authentication, accounts at risk | SI-Tracer |
| Agent with FileMonitor on the file servers | Who changed or deleted what | FileMonitor |
| Declare firewalls and gateways | Logs, VPN, threats | Firewalls and gateways |
| UniFi or Peplink providers, SNMP | Sites, Wi-Fi, tunnels | NetworkMonitor |
| Monitors for critical services | Availability, status page | HostMonitor |
| Default SIEM rules, then switch them on one by one | Security correlation | SIEM |
First week: data and compliance
Automatic purging is off by default, and as long as it is off, nothing is ever deleted. Set the retention period, then turn purging on; see Data, GDPR and audit.
Keep NetDiag's sensitive options (open files, window titles) turned off unless you have a specific, documented need. See NetDiag.
Later, as needed
- Connect your ticketing tool and pre-diagnostics: Connectors, Ticket pre-diagnostics.
- Give the support team access to Microsoft 365: Microsoft 365.
- Give the AI your context (in-house vocabulary, common causes): Customer AI and guidelines.
- Connect your other tools through the API: Getting started with the API.
Source: · FirstSI Docs · updated 2026-10-10