MonitorMagic - Tools4Ever.com

MonitorMagic
MonitorMagic can use the HTTP or HTTPS protocol to give web interface users the ability to
monitor and manage their network from a remote location. This means that a user of the web
interface can monitor and manage his/her network over the corporate Intranet or over the Internet.
Although it is recommended that users of the web interface use HTTPS over their corporate
Intranet, HTTP can be used if security is not a concern. When a MonitorMagic web interface user
accesses his/her network over the Internet it is highly recommended that nothing but HTTPS is
used. Even better, using HTTPS over the Internet to access your network should be viewed as a
requirement, not an option.
When a MonitorMagic web interface user employs the use of HTTPS (secure socket layer) they
are using 128 bit encryption, achieved through the use of digital certificates; this is the highest
level of encryption available for HTTPS (secure socket layer). When a MonitorMagic web
interface user logs into the MonitorMagic WebService with his/her Windows NT
username/password the information is transmitted between the MonitorMagic web server and the
clients web browser. When using HTTP the username/password transmission becomes a big
security issue, this is not the case when using HTTPS (secure socket layer). When the Windows
NT username/password is sent over the line using HTTPS it is encrypted, and not readable by
others. Many on-line vendors and on-line banking programs employ the use of HTTPS (secure
socket layer) to make transactions. The use of the MonitorMagic web interface with HTTPS
(secure socket layer) is just as safe as making transactions with on-line vendors or on-line
banking programs.
It is possible that some system administrators may feel that using the MonitorMagic web interface
over HTTPS (secure socket layer) is not a viable option. This is a matter of opinion and
preference. If you feel apprehensive about transmitting administrative passwords over HTTPS
(secure socket layer) preventive measures can be taken. Administrators can build a user account
only for use with the MonitorMagic web interface. This web interface only account should have
limited access rights everywhere on the network. MonitorMagic web interface access rights and
Windows NT access rights are, when using the default settings, completely independent of each
other.
See also:
Configure MonitorMagic WebService: HTTPS
Configure MonitorMagic WebService: Access Rights
HTTP is not safe and secure
Certificates
Man in the middle attack
Certificates
What are Digital Certificates?
Digital certificates serve a similar purpose as your drivers license or company ID. They provide
you with a way to electronically identify yourself. A digital certificate is associated with a pair of
keys, a public key and private key. Public and private keys are used to decrypt, encrypt, and
digitally sign information. Your digital certificate is what makes it possible for you to gain the right
to use someone elses public key, a public key will not be sent to you if you cannot identify
344