RSA Authentication Manager 6.1 Administrator's Guide - The Ether ...

RSA Authentication Manager 6.1 Administrator’s GuideImportant Administrative ToolsSystem Design ToolsThe following features will help you manage your RSA Authentication ManagerAgent Hosts, tokens, and users more efficiently.Open Agent HostsOpen Agent Hosts are supported for all Agent types. If an Agent Host is “open,” usersare not required to be directly activated on the Agent Host or to be members of agroup activated on the Agent Host. Any user registered in your AuthenticationManager database can be authenticated on an open Agent Host. For more information,see “Agent Host/Authentication Manager Architecture” on page 23.Note: If you plan to use RSA Authentication Agent 6.0 or 6.1 to enable offlineauthentication, and you want only some users to have this capability, you can controlthis on an Agent Host basis. In this case, you would not want to use an open AgentHost. Offline authentication (and related) capabilities are discussed in more detail in“Setting Up Offline Authentication and Password Integration” on page 59.Automated Agent Host Registration and UpdatingAutomated Agent Host registration and updating reduces administrative overhead byenabling new Agent Hosts to register themselves with the Authentication Managerand by enabling existing Agent Hosts to automatically update their own IP addressesand sdconf.rec files. See “Automated Agent Host Registration and Updating” onpage 65.Consolidated LoggingAll log messages are consolidated to the Primary. When activity on a Replicagenerates a log message, the message is eventually sent to the Primary and logged inthe Primary log database. During heavy periods of authentication, consolidation ofthese delta records to the Primary database have a lower priority, but eventually areconsolidated.External AuthorizationYou can use External Authorization to apply additional criteria before users can accessnetwork resources. External Authorization criteria supplement RSA AuthenticationManager authentication—they do not replace it. See “Customizing YourAuthorization Procedures” on page 216.Report Creation UtilityYou can run standard reports (reports that cannot be modified or removed) and youcan create and run custom reports. Audit trail reports are run against the sdlogdatabase. Token statistic reports are run against the sdserv database. For moreinformation, see “RSA Authentication Manager Report Creation Utility (Windows)”on page 174 or “RSA Authentication Manager Report Creation Utility (UNIX)” onpage 183.34 2: Using RSA Authentication Manager Administration Applications