Security management encompasses the control and monitoring of access to the network and associated network management information. This includes controlling user authentication, user authorization and user privileges. The goal of a management system is to provide these functions in a concise manner that shows the entire network as one homogeneous entity.NetMan's security framework adheres to the highly secure JAAS (Java Authentication and Authorization Service) standard Users without the right authorization cannot access any service in the application.
User authentication is one of the fundamental requirements for any application. NetMan's authentication engine uses 128-bit RSA encryption algorithms to ensure that your data is secure. In addition to basic authentication, NetMan also has built-in support for external authentication via RADIUS or Active directory. The capability to support a variety of authentication mechanisms has helped NetMan become widely used across product deployments. The authentication engine also supports out-of-the box user management features such as password aging, user account aging, and the blocking of user accounts.
NetMan's authorization framework is designed and implemented to completely adhere to the JAAS architecture's authorization standard to give the administrator a lot of control. Network administrators can decide on the permitted operations for each user. Administrators can also decide on whether the user shall have read, write, and delete access (wherever applicable) for each function. Administrators can also define the list of right click menus that should be visible or accessible for each user. For instance, an administrator can restrict a user to view faults and restrict them from performing configuration changes to devices.
Resource Specific Authorization
Using NetMan, network administrators can easily control the list of network elements that are visible to each operator. In addition to functional authorization, this built-in ability to grant permissions to network elements can be managed by each user. This helps administrators handle all possible organizational requirements right out of the box.
NetMan's security framework tracks and saves all user activity for several days. Administrators can use detailed accounting reports to answer any questions related to specific users, the times they were active, and the actions they performed.
NetMan comes with built-in tools for recovering the Element Management System from disasters. NetMan can be configured to periodically backup its data and configuration on a remote ftp-server. NetMan based Element Management System and its data will be restored to its last known configuration after a disaster happens. Such features have allowed our customers to pass several security audits conducted by service providers..