ExtraHop Trace Admin UI, Руководство пользователя

Страница: 34 / 58

ExtraHop 8.8 ExtraHop Trace Admin UI Guide 34
• Restricted Read-only DN: View dashboards shared with the logged-in user.
• Packet Access DN: View and download packets captured through the ExtraHop Trace appliance.
• Packet and Session Keys Access DN: View and download packets and any associated SSL
session keys captured through the ExtraHop Trace appliance.
•
Detections Access DN: View, acknowledge, and hide detections that appear in the ExtraHop
system.
• Remote users have full write access
This option grants remote users full write access to the ExtraHop system. In addition, you can
grant additional access for packet downloads, SSL session keys, and detections.
• Remote users have full read-only access
This option grants remote users read-only access to the ExtraHop system. In addition, you can
grant additional access for packet downloads, SSL session keys, and detections.
2. (Optional) Configure packet and session key access. Select one of the following options to allow
remote users to download packet captures and SSL session keys.
•
No access
• Packets only
• Packets and session keys
3. (Optional) Configure detections access. Select one of the following options to allow remote users
to view detections. This setting is visible only when the global privilege policy for detections access
control is set to Only specified users can view detections .
• No access
• Full access
4. Click Save and Finish .
5. Click Done .
Configure remote authentication through RADIUS
The ExtraHop system supports Remote Authentication Dial In User Service (RADIUS) for remote
authentication and local authorization only. For remote authentication, the ExtraHop system supports
unencrypted RADIUS and plaintext formats.
1. Log in to the Administration settings on the ExtraHop system through
https://<extrahop-
hostname-or-IP-address>/admin
.
2. In the Access Settings section, click Remote Authentication .
3. From the Remote authentication method drop-down list, select RADIUS and then click Continue .
4. On the Add RADIUS Server page, type the following information:
Host
The hostname or IP address of the RADIUS server. Make sure that the DNS of the ExtraHop
system is properly configured if you specify a hostname.
Secret
The shared secret between the ExtraHop system and the RADIUS server. Contact your RADIUS
administrator to obtain the shared secret.
Timeout
The amount of time in seconds that the ExtraHop system waits for a response from the RADIUS
server before attempting the connection again.
5. Click Add Server .
6. (Optional) Add additional servers as needed.
7. Click
Save and Finish .