McAfee MAP-3300-SWG - Web Security Appliance 3300, Product Manual

Page: 242 / 336

• User Accounts, Roles and Login Services
• Session Management Settings
• User Login Notification
User Accounts, Roles and Login Services
Initially, the appliance has one administrator account — the Super administrator, scmadmin — which
has access to all the appliance features. You cannot change or remove the features for this
administrator. The appliance has some other administrator roles for email, web and reports, which you
can change or remove.
Table 235 Option definitions for creating users
Option Definition
User name
Displays the name that the user types at logon.
Full name Displays the name that appears in the top left corner of the main window at
User
.
Role Displays the user's role, as selected from the list of
Roles
.
From a Content Security Blade Server, you may be given an additional role of
Scanning
Appliance Administrator
, depending on your selected administrator privileges.
Account Type
Choose
Local user
to add a user that will be authenticated by the appliance, and choose
External user
to add a user that will be authenticated by either RADIUS or Kerberos.
Edit
Opens a window where you can change the details for the user. You cannot change
details for the System Administrator.
Delete
Delete the user. You cannot delete the System Administrator.
To reset a password for another user, a super administrator can click on
the
Edit
icon in the user's row in the table. By default, other
administrators cannot change the settings on this page.
You can create any number of users, each with their own password, where applicable. The users'
capabilities depend on their role. If you intend to use Kerberos or RADIUS authentication, first
configure the authentication service.
You cannot specify a local user and an external user with the same user
name.
Table 236 Option definitions for creating roles
Option Definition
Role Displays the name of the Role.
Description
Displays a description of the privileges allowed by this role.
Edit
Opens a window where you can change the details for the user. You cannot change details
for the System Administrator.
Delete
Delete the user. You cannot delete the System Administrator.
Table 237 Option definitions for creating Login services
Option Definition
Service Name
Displays the user-configured name entered when setting up the service.
Service Type The
Service Type
will show either
RADIUS
or
Kerberos
, depending on the service configured.
Overview of System features
Users, Groups and Services
242 McAfee Email and Web Security Appliances 5.6.0 Product Guide