Secure Computing SG550 Uživatelský manuál stáhnout pdf (Strana 264)

System

260

You may specify the following access controls for each administrative user.

• The Login control provides the user with telnet and ssh access to the command-line

administration interface of the SG unit

• The Administration control provides the user with the ability to make changes to the

SG unit's configuration via the web-based administration interface. This should only

be provided to trusted users who are permitted to configure and reconfigure the unit.

• The Diagnostic control provides the user with the ability to view restricted diagnostic

information via the web-based administration interface. This access control may be

given to technical support users so they can attempt to diagnose but not fix any

problems which occur.

• The Encrypted save / restore all control provides the user to with the ability to save

and restore the configuration of the SG unit via the Save/Restore page (see the

Save/Restore section earlier in this chapter). This access control may be given to a

technician whom you want to be able to restore the unit to a known good

configuration but to whom you do not wish to grant full administration rights.

Warning

A user with Encrypted save / restore all access can conceivably create an

encrypted config file with an arbitrary root password that they can restore, thus

granting them Administration privileges. Therefore, grant Encrypted save / restore

all only to users that you trust with Administration access.

1 2 ... 259 260 261 262 263 264 265 266 267 268 269 ... 296 297

Žádné komentáře

Secure Computing SG550 Uživatelský manuál Strana 264