Open with table of contents

Managing administrator user access

You can manage the administrator users who have access to Clearswift SECURE Web Gateway , including individual pages and functions within the user interface. These administrator user permissions can be set and modified from the User Center Home page.

In this context, users are specifically administrator users who can access and modify parts of the Gateway, and not the end-users themselves. The Clearswift Gateway system is initially supplied with one administrator account for the Gateway Interface. This is a super-user administrator account, named admin by default. You can rename the default admin account, but you cannot delete it. This account always has full access to all the Clearswift Gateway Centers.

This administrator account can create accounts for additional users and, if any of those users have the appropriate access permissions, can also create accounts for other users.

Tell me about...

• Access Control

  You can configure a user with permission to perform certain tasks while using the Gateway. You can provide a combination of permissions to a user account by selecting any of the available tasks in the Access Control panel. In this way, you can create access permissions to correspond to the role a user performs, for instance as a helpdesk operator, policy administrator, or network administrator. This prevents access to the area of the interface unrelated to the user.

  Use the Access Control panel to create a user with an Administration Role, that is to say, all the default permissions.

  The check box under Administration Role allows you to set the same permissions as the admin super-user account. This grays out all other options, as they are allowed by default. If you want to specify individual permissions, deselect this check box and proceed to the General section of the panel.

  The General section controls what the user can do within the Gateway. Ensure that they have been given the correct access permissions corresponding to the role you've assigned them.

• Anonymize Data

  You can configure an account that is unable to view specific user details.

  For example, you might want to create a user account with access to view reports but not personal information, such as user names or machine numbers. In this scenario, specific user information is not displayed and the data is anonymized.

  This applies to:

  • User Names or User Name lists in reports
  • Machine lists in reports

  Users or User Name lists are groupings of user names under a common policy. Similarly, Machine lists are lists of machine addresses for one or more users under a common policy. You can anonymize the following information by enabling Anonymize client machine and user details for a user account.

  These parameters will be replaced with ****** if the user account has Anonymize Data enabled.

  User accounts with Anonymize Data enabled are unable to view the Web Transaction Log or the Apache Access Log.

  For more information on machine and User Name Lists, refer to the About Content Security Policy topic.

• Login failures

  A user is permitted three failed login attempts. After the third failed attempt, they are locked out of their account for 10 minutes and cannot try again during this time. If the user cannot remember their details and requires you to change the password, edit their account and click on Change the account password in the "What would you like to do?" panel.

• Modifying an account

  If your account has the required permissions, or you are using the admin super-user account, you can modify the details of other accounts, including passwords and access controls. You can also change the details of your own account, except for the access control settings.

How do I...

• Create an account?

  1. From the Home Page, click the Users tab.

     The User Center Home page is displayed.

  2. Click New.

     The Add User dialog is displayed.

  3. Complete the dialog box, as required, for the new user. If required, under Administration Role, select the check box to provide the new user with the same permissions as the admin account. Alternatively, deselect this check box and check the individual boxes under General for the areas to which you want to give the user access.

  4. Click Add.

• Modify an account?

  1. From the Home Page, click the Users tab.

     The User Center Home page is displayed.

  2. Select the user account from the list you want modify and click Edit.

     The Modify User page is displayed.

  3. Click Change the account password in the task panel to change the account password.
  4. Edit the account user name, email address, name, and description by clicking on Click here to change these settings in the Overview panel.
  5. Anonymize personal information by enabling Anonymize client machine and user details in the Anonymize Data panel.
  6. Click on the Click here to change these settings button in the Access Control panel to edit the access controls, which set what the user can view and modify in the Gateway. You cannot change the access control settings for your own account, or for the super-user admin account.
     If required, under Administration Role, select the check box to provide the new user with the same permissions as the admin account.
• Delete an account?

  1. From the Home Page, click the Users tab.

     The User Center Home page is displayed.

  2. Select the user account from the list you want to remove and click Delete

  3. Click Yes in the Confirm Delete? dialog box.

© 1995–2018 Clearswift Ltd.