Vasco IDENTIKEY AG-3 Series, Руководство по установке

Страница: 47 / 54

aXsGUARD Gatekeeper Installation Guide v2.7
aXsGUARD Gatekeeper Security Concepts
11 aXsGUARD Gatekeeper Security Concepts
11.1 Overview
To help you define your organization's security needs, we describe here the aXsGUARD Gatekeeper Policies
and the levels at which they can be applied.
Explanations are included for an aXsGUARD Gatekeeper serving exclusively for authentication, and for an
aXsGUARD Gatekeeper also serving as a gateway to the Internet with features such as firewall, e-mail server,
Web access, etc. Configurations vary, therefore, depending on the features enabled with your appliance (see
section
1.2 ).
11.2 Security Policies and Levels
Caution
The aXsGUARD Gatekeeper system-wide policy (system level) should enforce the strictest
security!
Authentication and other features such as firewall, e-mail and Web access, are managed by Security Policies,
which implement a combination of rules, for example, whether a user must use a DIGIPASS One-Time
Password in combination with a static password for authentication. The aXsGUARD Gatekeeper applies Policies
at 4 levels: system, computer, group and user levels (see illustration below).
©
August 2010 - VASCO Data Security 47
Image 43: Rules, Policies and Application Levels