eG Administration

Administration Policy - Manager Settings By default, any user with administrative rights to the eG Enterprise system can login to the eG admin interface and make configuration changes, regardless of where he/she is coming from. High security environments may consider this a vulnerability, as any user on the internet who can hack the login credentials of an administrative user, can gain access to the eG admin interface and make unauthorized changes to the eG Enterprise system! To protect admin user accesses from such security risks, eG Enterprise allows strict administration policies to be configured and enforced. Using an administration policy, you can ensure that admin user access is allowed only for those users who connect to the eG management console from ‘known’ / ‘reliable’ / ‘safe’ locations. These ‘secure locations’ are indicated by an IP address, a range of IP addresses, or IP address patterns. Where an administration policy is set, eG Enterprise allows a user to login to the eG admin interface only if: The user has ‘administrative’ rights to the eG Enterprise system, and; The IP address from which the user is connecting belongs to the list of IP addresses configured under an administration policy. To configure an administration policy, do the following: Follow the Admin -> Settings -> Manager menu sequence in the eG admin interface. In the tree-structure in the left panel of the page that appears, you will find an Account Security node. Expand this node and click the Administration Policy sub-node within. Upon clicking, the right panel of the page will display the policies that pre-exist (if any). To create a new policy, click the Add Policy button. Provide the IP addresses that are to be allowed admin access in the page that appeared. This specification can contain any of the following: An IP address - eg., 192.168.10.35; A range of IP addresses - eg., 192.168.10.20-192.168.1.30; An IP address pattern - eg., 192.168.8.* Then, click the Add More Policy button to add one more administration policy. This way, you can add multiple policies. At any given point in time, you can delete a policy by clicking the encircled ‘-’ icon adjacent to it. To delete all policies, click the Delete All button. /li> After you are done configuring the policies, save them by clicking the Update button.