Frequently asked questions
Short answers to the questions that come up often, with a link to the page that goes into detail.
Account and access
How do I change my password? In Settings → Profile. It needs at least 12 characters, including an upper-case letter, a lower-case letter, a digit and a special character. Details in Sign in.
Why can't I see a particular module? Either it is not active for your organisation, or an administrator has not given you access, or your role doesn't allow it. See Users and roles.
How many security keys can I register? Five. See Two-factor authentication.
My language and theme don't follow me to another computer. That's expected: they are stored in the browser, not in your account. See Find your way around the console.
Agents
Do I need to reinstall the agent to add a module? No, it's done from FSI Agents, with the gear button on the agent's card. See Manage agents.
Is the agent signed? Yes, both the executable and the MSI. Remote updates check that signature. See Install the agent.
Can a computer without Internet access report its data? Yes, through a FirstSI relay or the company proxy. See Network egress.
NetDiag
What does the "Internet" verdict mean? The site's gateway answers, but the targets on the Internet don't. So neither the computer nor the local network is at fault. See NetDiag.
Does the network capture record the content of the traffic? No. It only keeps headers (128 bytes per packet), and the file is kept for 30 days. See NetDiag.
Can NetDiag see open files or window titles? Only if an administrator turns those options on; they are off by default. See NetDiag.
Alerts
I don't get any alert emails. Start with SMTP (Settings → SMTP, send a test), then check the channels of the module concerned. See Alerts.
I installed the SIEM rules and nothing happens. They are installed disabled; you have to switch them on one by one. See SIEM.
How do I silence alerts during maintenance work? With a HostMonitor maintenance window and its option to suppress alerts, or by muting alerts on a network device. See Alerts.
Data
How long is data kept? For the period your administrator chose, 90 days by default, but only if automatic purging is turned on. By default it isn't. See Data, GDPR and audit.
Can we tell who looked up someone's Microsoft 365 account? Yes, every lookup is logged along with the person who was looked up. See Microsoft 365.
AI and integrations
Can the AI Assistant change anything? No. It only reads, with your permissions. See AI Assistant.
Where is the API documentation? In this help: Getting started with the API and the full reference. Your console also serves it at /api/v1/docs.
How many API calls can I make? 600 per minute per token. See Pagination, errors and limits.
Source: · FirstSI Docs · updated 2026-10-10