Cisco CS-MARS-20-K9 - Security MARS 20, Руководство пользователя

Страница: 477 / 588

23-9
User Guide for Cisco Security MARS Local Controller
78-17020-01
Chapter 23 Management Tab Overview
User Management
In MARS, four separate user roles exist that can be assigned to any user who needs to access the web
interface:
• Admin has full read/write privileges. Users in this role can define new users with any desired role.
Users in the role can change the password settings of the accounts in any user role.
•
Security Analyst has full read privileges but is restricted to write for reports privileges. Users in this
role can only define new users (and change passwords of users) with the Notifications Only role.
• Operator has read only privileges. Users in this role cannot define new users or change passwords,
even of their own user account.
•
Notifications Only . This user role has no permissions to access to the MARS web interface; use this
role to identify users who will receive notifications, such as e-mail, SMS, or pager notifications.
No limit exists on the number of user accounts that can be defined in MARS.
While roles are system defined, you can define, edit, and delete user groups. For more information, see
Create a User Group, page 23-12 and Add or Remove a User from a User Group, page 23-12 .
Good security practices suggest strong passwords for use with the MARS Appliances. When defining
user names and password, keep the following guidelines in mind:
Login names and passwords:
• can be alphanumeric characters
•
can contain special characters (!, @, #, etc.)
• cannot contain single or double quotes (‘or “)
•
are case sensitive
Login names can have up to 20 characters. Passwords can have up to 64 characters.
Add a New User
Defining a new user involves specifying the user name, password, role, contact information, and
notification information.
To add a new user, follow these steps:
Step 1 From the Management > User Management tab, click Add . The User Configuration page appears, as
shown in Figure 23-4 .