Server Security - Novell ZENWORKS PATCH MANAGEMENT 6.4 SP2 User Manual

A
Patch Management Server Reference
This section contains reference information pertaining to your Patch Management Server.

Server Security

There are multiple layers of security for ZENworks Patch Management. These layres
include:
Web Site Authentication
Internet Information Services (IIS) controls authentication in to the ZENworks Patch
Management web site, which means the operating system itself is validating users and
their passwords.
Web Site Encryption via SSL
SSL provides an encrypted wrapper around all web communication to and from the
product. Therefore installing ZENworks Patch Management with SSL will provide another
level of protection.
User (Security) Roles
Every feature, page and action throughout ZENworks Patch Management has been
assigned to a series of Access Rights. These access rights combine together to form a
user role. Roles also contain a list of devices and device groups. Regardless of how a user
is authenticated, the access and permissions are defined solely by the ZENworks Patch
Management Administrator.
: ZENworks Patch Management default security settings prohibit the use of any browser
NOTE
other than Internet Explorer 6 SP 1 and above. If you need to remove this restriction, and disable
the enhanced security settings available with IE 6 SP1, refer to the Novell Knowledgebase .
Server Error Pages
The ZENworks Patch Management Server provides several distinct error pages. these
pages are:
• Access Denied - This page is displayed whenever a users fails to provide valid
credentials when accessing the Patch Management Server or they attempt to access an
area to which they do not have access.
• Internal Server Error - This page is displayed whenever an unspecified internal error
occurs. In most cases, closing the browser window and restarting your task will resolve
the issue.
• Refresh User Data - This page is displayed whenever the current session expires, such
as when there has been an extended period of inactivity.
ZEN
WORKS
- 327 -
P M U
ATCH ANAGEMENT
G
SER UIDE