Dell PowerEdge 4200 Series, Руководство администратора

Страница: 288 / 440

288 | SRA 6.0 Administrator’s Guide
user logged in, the duration of the session, and the cumulative idle time during the session. An
administrator may terminate a user session and log the user out by clicking the Logout icon at
the right of the user row. The
Active User Session table includes the following information:
Table 20 Active User Information
Access Policies Concepts
The Dell SonicWALL SRA Web-based management interface provides granular control of
access to the SRA appliance. Access policies provide different levels of access to the various
network resources that are accessible using the SRA appliance. There are three levels of
access policies: global, groups, and users. You can block and permit access by creating access
policies for an IP address, an IP address range, all addresses, or a network object.
Access Policy Hierarchy
An administrator can define user, group and global policies to predefined network objects, IP
addresses, address ranges, or all IP addresses and to different SRA services. Certain policies
take precedence.
The Dell SonicWALL SRA policy hierarchy is:
•
User policies take precedence over group policies
•
Group policies take precedence over global policies
•
If two or more user, group or global policies are configured, the most specific policy takes
precedence
For example, a policy configured for a single IP address takes precedence over a policy
configured for a range of addresses. A policy that applies to a range of IP addresses takes
precedence over a policy applied to all IP addresses. If two or more IP address ranges are
configured, then the smallest address range takes precedence. Host names are treated the
same as individual IP addresses.
Network objects are prioritized just like other address ranges. However, the prioritization is
based on the individual address or address range, not the entire network object.
For example:
•
Policy 1: A Deny rule has been configured to block all services to the IP address range
10.0.0.0 - 10.0.0.255
•
Policy 2: A Deny rule has been configured to block FTP access to 10.0.1.2 - 10.0.1.10
Column Description
Name A text string that indicates the ID of the user.
Group The group to which the user belongs.
Portal The name of the portal that the user is logged into.
IP Address The IP address of the workstation which the user is logged into.
Login Time The time when the user first established connection with the SRA appliance
expressed as day, date, and time (HH:MM:SS).
Logged In The amount of time since the user first established a connection with the SRA appli-
ance expressed as number of days and time (HH:MM:SS).
Idle Time The amount of time the user has been in an inactive or idle state with the SRA appli-
ance.
Logout Displays an icon that enables the administrator to log the user out of the appliance.