Owner's manual

ManualsBrandsRaritan Computer ManualsHardwareCC-SG

111

112

113

114

115

116

117

118

119

120

Table Of Contents

Chapter 1: Introduction
- Prerequisites
- Intended Audience
- Terminology/Acronyms
Chapter 2: Accessing CC-SG
- Browser-Based Access
- Thick Client Access
  - Install the Thick Client
  - Use the Thick Client
- CC-SG Window Components
- Check IP Address, Firmware Version, and Application Versions
- Power Down CC-SG
- Compatibility Matrix
Chapter 3: Configuring CC-SG with Guided Setup
- Prepare to Configure CC-SG with Guided Setup
- Guided Setup Overview
- Start Guided Setup:
- Associations
  - Create Categories and Elements
- Device Setup
  - Discover and Add Devices
- Create Groups
  - Add Device Groups and Node Groups
- User Management
  - Add User Groups and Users
Chapter 4: Creating Associations
- Associations
- Association Manager
Chapter 5: Adding Devices and Device Groups
- The Device Tab
- Device and Port Icons
- Search for Devices
- Add a Device
  - Adding a KVM or Serial Device
  - Adding a PowerStrip Device
- Discover Devices
- Edit Device
  - Edit PowerStrip Device
- Delete Device
- Configure Ports
- Device Management
- Viewing Devices
  - Tree View
  - Custom View
- Special Access to Paragon II System Devices
  - Paragon II System Controller (P2-SC)
  - IP-Reach and UST-IP Administration
- Device Group Manager
Chapter 6: Configuring Nodes and Interfaces
- View Nodes
- Nodes and Interfaces Overview
  - About Nodes
  - About Interfaces
- Add Node
- Add an Interface
- Connect to a Node
- Edit an Interface
- Delete an Interface
- Ping a Node
- Edit a Node
- Delete a Node
- Chat
- Node Groups
Chapter 7: Adding and Managing Users and User Groups
- The Users Tree
- Special User Groups
- Add User Groups
- Edit A User Group
- Delete User Group
- Add User
- Edit a User
- Delete User
- Assign Users To Group
- Delete Users From Group
- Other User and User Group Functions
Chapter 8: Policies
- Controlling Access Using Policies
  - Policy Summary
- Node Groups
- Device Groups
- Policy Manager
- Applying Policies To User Groups
Chapter 9: Configuring Remote Authentication
- Authentication and Authorization (AA)
  - Flow for Authentication
  - User Accounts
- Distinguished Names for LDAP and AD
  - Username
  - Base DN
- AD Configurations
- Add LDAP (Netscape) Module to CC-SG
- Add a TACACS+ Module
  - TACACS+ General Settings
- Add a RADIUS Module
  - RADIUS General Settings
- Specify Modules for Authentication and Authorization
- Establish Order of External AA Servers
Chapter 10: Generating Reports
- Audit Trail Report
- Error Log Report
- Access Report
- Availability Report
- Active Users Report
- Locked Out Users Report
- User Data Report
- Users in Groups Report
- Group Data Report
- AD User Group Report
- Asset Management Report
- Node Asset Report
- Active Nodes Report
- Node Creation Report
- Query Port Report
- Active Ports Report
- Scheduled Reports
- CC-NOC Synchronization Report
Chapter 11: System Maintenance
- Maintenance Mode
- Backup CC-SG
- Restore CC-SG
  - Saving and Deleting Backup Files
- Reset CC-SG
- Restart CC-SG
- Upgrade CC-SG
- Shut Down CC-SG
- Restarting CC-SG after Shutdown
- End CC-SG Session
  - Log Out
  - Exit CC-SG
Chapter 12: Advanced Administration
- Guided Setup
- Message of the Day Setup
- Application Manager
  - Adding, Editing and Deleting Applications
  - Default Applications
- Firmware Manager
- Cluster Configuration
- Configure Security
- Notification Manager
- Task Manager
- CommandCenter NOC
- SSH Access to CC-SG
- Diagnostic Console
Appendix A: Specifications (G1, V1, and E1)
- G1 Platform
- V1 Platform
- E1 Platform
Appendix B: CC-SG and Network Configuration
- Introduction
- Executive Summary
- CC-SG Access via NAT-enabled Firewall
- Security and Open Port Scans
Appendix C: User Group Privileges
Appendix D: SNMP Traps
Appendix E: Troubleshooting
- Client Browser Requirements
Appendix F: Two-Factor Authentication
- Supported Environments
- Setup Requirements
- Known Issues
Appendix G: FAQs
Appendix H: Keyboard Shortcuts

106 COMMANDCENTER SECURE GATEWAY ADMINISTRATOR GUIDE

2. For each domain in the Trust Partner column, click the Trust Direction drop-down menu,

and then select the direction of trust you want to establish between the domains. Trust

directions are updated in all AD modules when you make changes to one AD module.

• Incoming: information will be trusted coming in from the domain. In the figure

above, AD Module 2 would trust information coming in from AD Module 1

• Outgoing: information will be trusted going to the selected domain. In the figure

above, AD Module 1 would trust information coming in from AD Module2.

• Bidirectional: information will be trusted in both directions from each domain.

• Disabled: information will not be exchanged between the domains.

3. Click Apply to save your changes, and then click OK to save the AD module and exit the

window.

Edit AD Modules

Once you have configured AD modules, you can edit them at any time.

1. On the Administration menu, click Security.

2. Select the AD module you want edit, and then click Edit.

3. Click each tab in the Edit Module window to view the configured settings. Make changes as

needed. Please refer to the previous sections on

AD General Settings, AD Advanced

Settings, AD Group Settings, and AD Trust Settings for additional information.

4. If you change the connection information, click Test Connection to test the connection to the

AD server using the given parameters. You should receive a confirmation of a successful

connection. If you do not see a confirmation, review the settings carefully for errors and try

again.

5. Click OK to save your changes. You must synchronize the AD user groups you changed, or

you can synchronize all AD modules to synchronize all groups and users in all modules.

Please refer to

Synchronize AD User Groups and Synchronize All AD Modulesfor

additional information.

Import AD User Groups

You must specify Group settings in the AD module before you can import groups from the AD

server. Please refer to AD Group Settings on page

104. After making a change to imported groups

or users, you must must synchronize the AD user groups you changed, or you can synchronize all

AD modules to synchronize all groups and users in all modules. Please refer to

Synchronize AD

User Groups and Synchronize All AD Modulesfor additional information.

Note: Make sure that you have configured the CC-SG DNS and Domain Suffix in Configuration

Manager before attempting to import AD user groups. Please refer to Chapter 12: Configuration

Manager for additional information.

1. On the Administration menu, click Security.

2. Select the AD module from which you want to import AD user groups.