Raritan CC-SG, Administrator'S Manual

Page: 40 / 258

26 C
OMMAND
C
ENTER
S
ECURE
G
ATEWAY
A
DMINISTRATOR
G
UIDE
•
Devices —are Raritan products such as Dominion KX, Dominion SX, Dominion KSX, IP-
Reach, Paragon II System Controller, Paragon II UMT832 with USTIP, and others, that CC-
SG manages. These devices control the target systems, or nodes, that are connected to them.
•
Nodes —are the target systems or servers that CC-SG can access and manage. In CC-SG, you
can click a node to access and manage the node via interfaces.
Associations
--
Defining Categories and Elements
Raritan devices and nodes are organized by categories and elements. Each category/element pair
is assigned to a device, a node, or both. Therefore, you need to define your categories and
elements before you add a Raritan device to CC-SG.
A category is a group of similar elements. For example, to group your Raritan devices by location,
you would define a category, Location, which would contain a set of elements, such as New York,
Philadelphia, and New Orleans.
Policies also use categories and elements to control user access to servers. For example, the
category/element pair Location/New York can be used to create a Policy to control user access to
servers in New York.
Other examples of typical Association configurations of Category and Elements are as follows:
C
ATEGORY
E
LEMENTS
Location New York City, Philadelphia, New Orleans
OS Type Unix, Windows, Linux
Department Sales, IT, Engineering
Association configurations should be kept simple to accomplish server/node organizational
objectives and user access objectives. A node can only be assigned to a single element of a
category. For example, a target server cannot be assigned to both the Windows and Unix
elements of the OS Type category.
A useful approach to organizing your systems when servers are similar and need to be randomly
organized is the following:
C
ATEGORY
E
LEMENT
usergroup1 usergroup1node
usergroup2 usergroup2node
usergroup3 usergroup3node
As you add devices and nodes to CC-SG, you link them to your predefined categories and
elements. When you create node and device groups and assign policies to them, you will use your
categories and elements to define which nodes and devices belong in each group.