Tchater maintenant avec le support
Tchattez avec un ingénieur du support

KACE Systems Deployment Appliance 9.2 Common Documents - Administrator Guide

About the KACE Systems Deployment Appliance Getting started Using the Dashboard Configuring the appliance Setting up user accounts and user authentication Configuring security settings Preparing for deployment Managing device inventory Using labels Creating a Windows or Linux Boot Environment Managing drivers Capturing images Capturing user states Creating scripted installations Creating a task sequence Automating deployments Performing manual deployments Managing custom deployments Managing offline deployments About the Remote Site Appliance Importing and exporting appliance components Managing disk space Troubleshooting appliance issues Updating appliance software Glossary About us Legal notices

Enable SNMP monitoring

Enable SNMP monitoring

The SNMP agent on the appliance enables remote monitoring of the appliance.

The internal SNMP agent uses the standard UDP port 161 and cannot be configured using TRAP and INFORM methods. If you have a primary SNMP agent configured on a different device, it can send GET, GETNEXT, and GETBULK requests to the appliance and have the appliance return the requested information.

1.
On the left navigation pane, click Settings > Control Panel to display the Control Panel, then click Security to display the Security Settings page.
2.
Click Enable SNMP Monitoring to display the SNMP Community String field.
3.
Enter a unique community string, for example newString.
If the community name contains spaces, enclose it in quotation marks (" "). Quest KACE recommends creating a unique string. The default is KaceSDA.
* 
NOTE: In versions prior to 7.0, the community string is set to public by default. If you upgrade from a pre-7.0 version, and SNMP monitoring is disabled, the community string changes from public to KaceSDA. If SNMP monitoring is enabled, the community string stays set to public, you should update it to prevent security issues. Warnings appear on the Dashboard and on the Security Settings page, alerting you to update the community string.
4.
Click Save.

Set session timeout

Set session timeout

You can configure session timeout to meet your security requirements.

1.
On the left navigation pane, click Settings > Control Panel to display the Control Panel, then click Security to display the Security Settings page.
2.
Click Server Session Timeout and select a desired value.
3.
Click Save.

Enable database access

Enable database access

You can enable database access to allow external programs, such as Crystal Reports or Excel® to query the appliance database so that you can create your own reports. By default, the appliance does not allow external connections to the database.

The account for external access to the database is username: report and password: box747.

1.
On the left navigation pane, click Settings > Control Panel to display the Control Panel, then click Security to display the Security Settings page.
2.
Select the Enable Database Access check box.
3.
In Report User Database Password and Verify Password, specify the database password that you want the external resources to use when accessing the appliance database.
The indicator underneath the Report User Database Password field changes color as you type the password string, to indicate the password strength. Red indicates the lowest, and green the highest complexity level. Choose a strong password to prevent unauthorized users from accessing your database records.
If you do not specify a password for the Report User, the programs querying the appliance use the default password, which can allow attackers to expose sensitive data. A warning alert on the Home Dashboard appears, prompting you to change the database password. For more information about the Dashboard, see Using the Dashboard.
4.
Click Save.

You might have to reboot the appliance before external programs can query the appliance database.

Prevent brute-force login attacks

Prevent brute-force login attacks

You can configure the appliance to prevent multiple consecutive attacks from obtaining appliance credentials.

The Brute Force Detection settings on the Security Settings page allow you to configure the number of failed authentication attempts within a specified time frame, after which the appliance prevents any logins for that user name.

1.
On the left navigation pane, click Settings > Control Panel to display the Control Panel, then click Security to display the Security Settings page.
2.
On the Security Settings page, under Brute Force Detection, specify the following:
◦
The maximum number of failed login attempts. You can specify any value between three and ten attempts. The default setting is three attempts.
◦
The number of minutes during which the appliance prevents that specific user from logging in. You can specify any number of minutes between one and 60. The default setting is five minutes.
When the appliance disables a user from logging in, other users are not affected and can log in to the appliance during the specified time period, when they provide valid credentials.
3.
Click Save.
Documents connexes

The document was helpful.

Sélectionner une évaluation

I easily found the information I needed.

Sélectionner une évaluation