There are two methods that can be used to deploy ContraForce. This article will cover the two methods available, and highlight the differences and requirements for each respective method. By reading this article, you can decide which method is best.
The two methods that can be used to deploy ContraForce are "Bring Your Sentinel" and "Deploy Your Sentinel." This is shown in the screenshot below. The link to access the Onboarding Wizard Welcome Page will be provided to you by the ContraForce team.
Bring Your Sentinel
Bring Your Sentinel, shown above, allows organizations to deploy ContraForce to an existing Azure Sentinel workspace. The onboarding user picks which Azure subscription, resource group, and log analytics workspace to deploy ContraForce to. In this model, ContraForce is deployed within the selected subscription so that the customer/partner can own all aspects related to consumption and billing.
When ContraForce onboarding is initiated, user sign-in is required. The account used to onboard should be a Global Admin in the organization, owner of the selected subscription, and able to consent enterprise applications.
Deploy Your Sentinel
The Deploy Your Sentinel method shifts the responsibility of managing the Azure infrastructure required to ContraForce. This method is the right choice when your organization does not have an existing Microsoft Sentinel in place, and does not want the responsibility of creating or managing that solution. When this method is selected, you create your ContraForce account by entering your organizations domain, your account's email, and the country where your organization is located.
When ContraForce onboarding is initiated, user sign-in is required. The account used to onboard should be a Global Admin in the organization, and able to consent enterprise applications. Additionally, the Microsoft Partner Agreement is also used for cloud resource management and billing purposes. More information around the Partner Agreement and ContraForce permissions can be found here.
Once the best deployment method is identified for your organization, onboarding can proceed. There is a specific article for each deployment method below that shows the rest of the onboarding process.
If you have any questions, feel free to email us. We can be reached at email@example.com.