DOCSEARCHbyAlgolia
Submit Docs

Xiid Documentation

website·Indexed 33 days ago

https://docs.xiid.com

Documentation for the Xiid platform, including the Terniion platform, SealedTunnel (STLink), Xiid Commander, and Connector nodes. Covers deployment, domain name routing, geoclusters, and integration with Cloud VMs and SMB/Samba file shares. Includes version 4.0.0 and 3.1.0 guides for installation, upgrades, and enterprise management.

Tokens
78.9K
Snippets
152
Records
652
Agent score
48%

What's inside Xiid

  1. Overview of the Xiid STLink agent

    The STLink is an agent software that must run on or near endpoints (processes) to enable SealedTunnel to connect them. Deploying an STLink allows users to manage connectivity via the STLink Portal, utilizing Bindings and Mappings to facilitate resource access.

  2. Overview of Xiid Security Technology

    Xiid provides security technology designed to lock down directory services and secure user permissions behind firewalls. Its core value proposition is to allow authentication without requiring inbound ports to be opened on the directory service, obfuscating the directory behind a secure intermediary layer.

  3. Overview of Xiid Terniion Architecture

    Xiid Terniion is a networking architecture designed to exceed NIST Zero Trust Tenets. It secures enterprise networks and critical infrastructure through four primary mechanisms:

    1. Elimination of Attack Surface: Open inbound ports are never used, even during connection instantiation.
    2. Quantum-Secure Encryption: All traffic is wrapped in three layers of quantum-secure encryption, preventing intermediaries from decrypting data.
    3. Zero Knowledge Proofs (ZKP): Users are authenticated without transmitting sensitive information or credentials.
    4. Data Privacy: Endpoints and the Zero Trust vendor are prevented from gaining excessive knowledge of each other's sensitive data or physical locations.

  4. Overview of Standalone SealedTunnels

    Standalone SealedTunnels are always listening on the client machine for incoming connections. They secure the connection to and from a resource but do not handle authentication, which is left to the endpoint. Standalone SealedTunnels do not require Xiid IM, although they can be used in conjunction with it. Configuration is managed via the Entrypoint in the Tunnels tab of the Agent Configuration Portal.

  5. Overview of Xiid Enterprise Management Tools

    Xiid provides three primary tools for deploying and updating software across an enterprise environment:

    1. Xiid Group Policy Template (.admx and .adml files): Required to manage Xiid software on client and server machines. The .admx files define the policies and their locations, while the .adml files provide localized strings (English only).
    2. Xiid Enterprise Management PowerShell script: Used for the installation and updating of software across all machines.
    3. Enterprise Management executable: Specifically used for STLink to bulk-create Entrypoints for client-side machines to simplify deployment for large numbers of employees.

  6. Overview of Xiid AbsoluteZero Trust (AZT) Architecture

    Xiid employs the AbsoluteZero Trust (AZT) model, a cybersecurity strategy where no technical component establishes a trust relationship that grants access to resources. The architecture is designed as a non-invasive overlay that does not require changes to existing network or domain structures. It eliminates the need for inbound ports by using outbound polling to retrieve requests, effectively closing the network perimeter to direct inbound traffic.

  7. Overview of Terniion™ network security and access

    Terniion™ is a network security and access solution designed to make enterprise networks invisible to threat actors by eliminating the need for open inbound firewall ports or public IP addresses. It provides on-demand 'SealedTunnel' connections featuring triple-encrypted, quantum-secure, process-to-process tunneling. It supports any TCP/IP or UDP/IP communication, including SSH, RDP, and standard web traffic, between remote resources.

  8. Overview of Xiid.IM V3 Identity and Credential Shield

    Xiid.IM V3 is the cornerstone identity and access management (IAM) and Single Sign-On (SSO) solution for cloud and hybrid-cloud SaaS delivery. It is designed to prevent credential harvesting via XOTC Authentication and ensures that Active Directory (AD) data is not copied outside the network perimeter, mitigating risks of malicious code and ransomware payload injection.

  9. Overview of Xiid Zero Knowledge Networking (ZKN) Architecture

    Xiid's Zero Knowledge Networking (ZKN) is designed to provide secure access to internal network resources without requiring open inbound ports. The architecture consists of four primary components: the XOTC Authenticator, Collectors, SealedChannels/SealedTunnels, and Agents. This setup ensures that all communication is outbound-only from the enterprise network, significantly reducing the attack surface.

  10. Overview of Xiid Terniion Architecture

    Xiid Terniion is a networking architecture designed to exceed NIST Zero Trust Tenets. It eliminates the network attack surface by ensuring open inbound ports are never used, even during connection instantiation. Key security features include:

    • Triple-layer quantum-secure encryption for all traffic, preventing intermediary decryption.
    • Zero Knowledge Proofs (ZKP) for user authentication to avoid transmitting sensitive credentials.
    • Privacy guarantees ensuring endpoints and vendors have no excessive knowledge of each other's sensitive data or physical locations.

  11. Overview of Xiid Connectors

    Xiid Connectors act as the front-end of the Xiid platform, stitching together outbound-only connections between two STLinks. They are designed to mitigate malicious attacks (such as DDoS and Slowloris) and ensure high availability. Connectors do not store sensitive information; data flowing through them is secured with two layers of end-to-end, quantum-secure encryption.

    Note: In Xiid SaaS deployments, Connectors are fully managed by Xiid. Self-hosted deployments are managed via the Connector Portal.

  12. Overview of the Xiid Sandbox Domain

    The Xiid Sandbox Domain is a pre-configured, basic domain setup designed for testing Xiid's Zero Knowledge Networking software in a cloud environment without affecting production domains. It includes a Virtual Private Cloud (VPC) with security groups that wrap the domain controller and RDP instances to restrict inbound and outbound network access.

    Warning: Sandbox deployment scripts are strictly for testing and must not be used in production or as scaffolding for production infrastructure.