Vasco IDENTIKEY AG-3 Series, Руководство по установке

Страница: 50 / 54

aXsGUARD Gatekeeper Installation Guide v2.7
aXsGUARD Gatekeeper Security Concepts
11.3 Groups
A group is a set of users who are grouped together based on their location (department), access rights (e.g.
allowed Internet sites, e-mail rights, rights to use FTP, etc.) or position within the organization (e.g.
accountants, HR, managers, etc.).
Users automatically adopt the access rights which are configured for their group, unless overruled at the user
level.
The aXsGUARD Gatekeeper is preconfigured with a default group. The following policies are applied to the
default group, depending on the modules enabled on your aXsGUARD Gatekeeper (see section
1.2 ):
Website Access rights: the default group is assigned the Web access filter predef-no-porn , which allows
access to all Internet sites, except for pornographic sites.
E-mail rights: the default group is assigned the default e-mail policy, which allows users to send and
receive all e-mails, except those with dangerous executable attachments or those which are identified as
spam. If the aXsGUARD Gatekeeper spam detection system identifies a message with a sufficiently high
spam-rate, the message is deleted. If not, the message is labeled as spam, but still delivered.
Firewall rights: the default group is assigned the
sys-base firewall policy, which allows access to the
aXsGUARD Gatekeeper DNS and Proxy services.
11.4 Users
A user is a person who:
is registered and may authenticate with the aXsGUARD Gatekeeper.
has certain access rights depending on the applicable security policy.
(if the e-mail server feature is enabled) has an aXsGUARD Gatekeeper mailbox (see section 9.8.1 ).
Users first need to be registered on the aXsGUARD Gatekeeper and assigned to a group before they can
authenticate and be granted firewall and Web access rights. The user automatically adopts the access rights
defined for his/her group, unless these rights are overruled and customized at the user level.
©
August 2010 - VASCO Data Security 50