Access security

To enable you to establish access security and prevent unauthorized use of the system, 

provides the following features:

• Access policies
• Command-line access restrictions
• Entitlement groups

Access policies

The Security user ensures the access security by setting up the following access policies:

• Session inactivity timeouts
• Password strength validation
• Password expiration time
• Account lockout after a number of invalid logon attempts
• Possibility of concurrent use of a single user account
• Automatic logon prevention

Configure these and other access policies in the Account policies and Services pages under Administration > Security settings menu item of the 

.

Command-line access

The permissions of CLI accounts (clisystem and cliuser) are limited to the following operations:

• Firmware upgrade
• System reboot and diagnostics
• Network parameters management

These accounts do not have access to traffic data.

Entitlement groups

To distribute access to Watchpoints for Observer users, use the Entitlement groups. Observers who are assigned to an Entitlement group have access to data from only the Watchpoints associated with that Entitlement group.

Enable the use of Entitlement groups in the 

by selecting Administration > Security settings > Account policies, and configure them by selecting Administration > General settings > Entitlement groups.

Related topics

Securing the system
Data security