IronPort - daily management guide - AsyncOS 7.6.1

More documents

Recommendations

Info

Managing Custom User Roles for Delegated Administration 8-26 Step 8 Select whether to use PAP or CHAP for RADIUS authentication. Cisco IronPort AsyncOS 7.6 for Email Daily Management Guide Chapter 8 Common Administrative Tasks Step 9 Optionally, click Add Row to add another RADIUS server. Repeat steps 6 and 7 for each RADIUS server that your appliance uses for authentication. Step 10 Enter the amount of time to store external authentication credentials in the web user interface. Step 11 Select whether to map a group of RADIUS users to a Cisco IronPort role, or grant all RADIUS users the Administrator role. It is recommended that you map RADIUS groups to Cisco IronPort roles. Step 12 If you chose to map a RADIUS group to a Cisco IronPort role, enter the RADIUS CLASS attribute for the group and select the role for users with that CLASS attribute. Step 13 Optionally, click Add Row to add another group. Repeat steps 11 and 12 for each group of users that the appliance authenticates. Step 14 Submit and commit your changes. Managing Custom User Roles for Delegated Administration You can design custom user roles and delegate specific responsibilities to users that align with their roles within your organization, allowing these delegated administrators access only to the email security features they are responsible for and not the system configuration features that are not related to their roles. Delegated administration provides more flexible control over your users’ access to the email security features on the appliance than the predefined administrator, operator, and help desk user roles. For example, you may have users who are responsible for managing mail policies for specific domains on the Email Security appliance, but you do not want these users to access the system administration and security services configuration features, which the predefined administrator and operator roles grant. You can create a custom user role for mail policy administrators who can grant these users access to the mail policies they manage, along with other email security features that they can use to manage messages processed by these policies, such as Message Tracking and policy quarantines. Use the System Administration > User Roles page in the GUI (or the userconfig -> role command in the CLI) to define custom user roles and manage the email security features for which they are responsible, such as mail policies, RSA Email DLP policies, email reports, and quarantines. For a full list of email security features that delegated administrators can manage, see Assigning Access Privileges, page 8-28. Custom roles can also be created when adding or editing a local user account using the System Administration > Users page. See Defining a Custom User Role When Adding a User Account, page 8-33 for more information. You should make sure when creating a custom user role so that its responsibilities don’t overlap too much with the responsibilities of other delegated administrators. If multiple delegated administrators are responsible for the same content filter, for example, and use the content filter in different mail policies, the changes made to the filter by one delegated administrator may cause unintended side effects for the mail policies managed by other delegated administrators. When you have created the custom user roles, you can assign local users and external authentication groups to them like any other user role. See Working with User Accounts, page 8-12 for more information. Please note that users assigned to custom roles cannot access the CLI. Figure 8-19 displays a list of custom user roles defined for an Email Security appliance, including the access privileges assigned to the roles. OL-25138-01
Chapter 8 Common Administrative Tasks Account Privileges Page OL-25138-01 Figure 8-19 List of Custom User Roles Managing Custom User Roles for Delegated Administration When a delegated administrator logs into the appliance, the Account Privileges page displays links to the security features for which the delegated administrator is responsible and brief descriptions of their access privileges. A delegated administrator can return to this page by selecting Account Privileges in the Options menu. Delegated administrators can also access the features that they manage using the menu at the top of the web page. Figure 8-20 shows an Account Privileges page for a delegated administrator with access to mail policies, email reporting, message tracking, and quarantines. Cisco IronPort AsyncOS 7.6 for Email Daily Management Guide 8-27
Page 1 and 2:
Cisco IronPort AsyncOS 7.6 for Emai
Page 3 and 4:
CHAPTER 1 Managing the Cisco IronPo
Page 5 and 6:
CHAPTER 4 Quarantines 4-1 OL-25138-
Page 7 and 8:
CHAPTER 5 Logging 5-1 OL-25138-01 M
Page 9 and 10:
OL-25138-01 Monitoring Detailed Ema
Page 11 and 12:
OL-25138-01 Managing Users 8-14 Add
Page 13 and 14:
OL-25138-01 CHAPTER 1 Managing the
Page 15 and 16:
Chapter 1 Managing the Cisco IronPo
Page 17 and 18:
Chapter 1 Managing the Cisco IronPo
Page 19 and 20:
OL-25138-01 Using Email Security Mo
Page 21 and 22:
Chapter 2 Using Email Security Moni
Page 23 and 24:
Page 25 and 26:
Page 27 and 28:
Page 29 and 30:
Page 31 and 32:
Page 33 and 34:
Page 35 and 36:
Page 37 and 38:
Page 39 and 40:
Page 41 and 42:
Page 43 and 44:
Page 45 and 46:
Page 47 and 48:
Page 49 and 50:
Page 51 and 52:
Page 53 and 54:
Page 55 and 56:
Page 57 and 58:
Page 59 and 60:
Page 61 and 62:
Page 63 and 64:
Page 65 and 66:
Page 67 and 68:
OL-25138-01 Tracking Email Messages
Page 69 and 70:
Chapter 3 Tracking Email Messages O
Page 71 and 72:
Chapter 3 Tracking Email Messages R
Page 73 and 74:
Chapter 3 Tracking Email Messages M
Page 75 and 76:
OL-25138-01 Quarantines CHAPTER 4 Q
Page 77 and 78:
Chapter 4 Quarantines OL-25138-01 M
Page 79 and 80:
Page 81 and 82:
Page 83 and 84:
Chapter 4 Quarantines Viewing Messa
Page 85 and 86:
Chapter 4 Quarantines OL-25138-01 F
Page 87 and 88:
Chapter 4 Quarantines Selecting a M
Page 89 and 90:
Chapter 4 Quarantines OL-25138-01 S
Page 91 and 92:
Chapter 4 Quarantines OL-25138-01 W
Page 93 and 94:
Chapter 4 Quarantines OL-25138-01 C
Page 95 and 96:
Chapter 4 Quarantines Cisco IronPor
Page 97 and 98:
Page 99 and 100:
Chapter 4 Quarantines Configuring S
Page 101 and 102:
Chapter 4 Quarantines OL-25138-01 S
Page 103 and 104:
Page 105 and 106:
Chapter 4 Quarantines Disk Space OL
Page 107 and 108:
Chapter 4 Quarantines Ensuring that
Page 109 and 110:
Page 111 and 112:
Chapter 4 Quarantines Deleting Mess
Page 113 and 114:
Chapter 4 Quarantines OL-25138-01 W
Page 115 and 116:
Chapter 4 Quarantines OL-25138-01 T
Page 117 and 118:
Chapter 4 Quarantines Method 2 OL-2
Page 119 and 120:
Chapter 4 Quarantines OL-25138-01 F
Page 121 and 122:
Overview OL-25138-01 Logging CHAPTE
Page 123 and 124:
Chapter 5 Logging OL-25138-01 Table
Page 125 and 126:
Page 127 and 128:
Chapter 5 Logging Logs Enabled by D
Page 129 and 130:
Chapter 5 Logging OL-25138-01 Infor
Page 131 and 132:
Chapter 5 Logging Successful Messag
Page 133 and 134:
Chapter 5 Logging Message with Atta
Page 135 and 136:
Chapter 5 Logging Using IronPort De
Page 137 and 138:
Chapter 5 Logging Successful Messag
Page 139 and 140:
Chapter 5 Logging Examples of Bounc
Page 141 and 142:
Page 143 and 144:
Chapter 5 Logging Domain Debug Log
Page 145 and 146:
Chapter 5 Logging Using IronPort CL
Page 147 and 148:
Chapter 5 Logging Using IronPort HT
Page 149 and 150:
Chapter 5 Logging Using IronPort An
Page 151 and 152:
Chapter 5 Logging Using IronPort LD
Page 153 and 154:
Chapter 5 Logging Safelist/Blocklis
Page 155 and 156:
Chapter 5 Logging Using Updater Log
Page 157 and 158:
Chapter 5 Logging Using Authenticat
Page 159 and 160:
Chapter 5 Logging Configuring Log S
Page 161 and 162:
Chapter 5 Logging Figure 5-1 Creati
Page 163 and 164:
Chapter 5 Logging Logging Message H
Page 165 and 166:
Chapter 5 Logging Rollover By File
Page 167 and 168:
Chapter 5 Logging Viewing Recent Lo
Page 169 and 170:
Chapter 5 Logging Configuring Host
Page 171 and 172:
Chapter 5 Logging OL-25138-01 - PRI
Page 173 and 174:
Chapter 5 Logging OL-25138-01 mail3
Page 175 and 176:
OL-25138-01 CHAPTER Managing and Mo
Page 177 and 178:
Chapter 6 Managing and Monitoring v
Page 179 and 180:
Page 181 and 182:
Page 183 and 184:
Page 185 and 186:
Page 187 and 188:
Page 189 and 190:
Page 191 and 192:
Page 193 and 194:
Page 195 and 196:
Page 197 and 198:
Page 199 and 200:
Page 201 and 202:
Page 203 and 204:
Page 205 and 206:
Page 207 and 208:
Page 209 and 210:
Page 211 and 212:
Page 213 and 214: Chapter 6 Managing and Monitoring v
Page 221 and 222: OL-25138-01 Other Tasks in the GUI
Page 223 and 224: Chapter 7 Other Tasks in the GUI Ex
Page 225 and 226: Chapter 7 Other Tasks in the GUI OL
Page 239 and 240: OL-25138-01 CHAPTER Common Administ
Page 241 and 242: Chapter 8 Common Administrative Tas
Page 263: Chapter 8 Common Administrative Tas
Page 285 and 286: OL-25138-01 Testing and Troubleshoo
Page 287 and 288: Chapter 9 Testing and Troubleshooti
Page 315 and 316:
Chapter 9 Testing and Troubleshooti
Page 317 and 318:
A accessing 2-2 access privileges f
Page 319 and 320:
Injection Connection ID (ICID) 6-4
Page 321 and 322:
subject tagging 4-5 testing message
Page 323 and 324:
work queue, pausing 6-35 X XML 5-2,
show all

IronPort - daily management guide - AsyncOS 7.6.1

Create successful ePaper yourself

Delete template?

Save as template?