Table of Contents
Advertisement
Quick Links
Advertisement
Table of Contents
Related Manuals for American Dynamics Intellex Policy Manager
Summary of Contents for American Dynamics Intellex Policy Manager
- Page 1 User’s Guide ® Intellex Policy Manager Version 1.30 Part Number 8200-2603-12 A0...
- Page 2 Customer Service Thank you for using American Dynamics products. We support our products through an extensive worldwide network of dealers. The dealer through whom you originally purchased this product is your point of contact if you need service or support. Our dealers are empowered to provide the very best in customer service and support.
- Page 3 License Information READ THIS LICENSE AGREEMENT BEFORE OPENING THE DISK PACKAGE, INSTALLING THE SOFTWARE, OR USING YOUR SYSTEM. THIS LICENSE AGREEMENT DEFINES YOUR RIGHTS AND OBLIGATIONS. BY BREAKING THE SEAL ON THIS PACKAGE, INSTALLING THE SOFTWARE, OR USING YOUR SYSTEM, YOU AGREE TO ALL OF THE TERMS AND CONDITIONS OF THIS AGREEMENT.
- Page 4 license will substantially perform as described in the user documentation provided with the product when used with the specified hardware. CUSTOMER REMEDIES Sensormatic's entire liability and your exclusive remedy under this warranty will be, at Sensormatic's option, to a). attempt to correct software errors with efforts we believe suitable to the problem, b).
-
Page 5: Table Of Contents
Table of Contents Policy Manager Features ............1 Intellex Management Suite View . - Page 6 Table of Contents Appendix A: Security Concepts for Policy Manager Basic Questions ..........29 Authentication .
-
Page 7: Policy Manager
Policy Manager Intellex® Policy Manager (PM) v1.30 is a software product that is installed on a server computer. It resides on the same network as the Intellex units, Network Client workstations, and/or other API- based remote applications and provides advanced security for the video network. By implementing the advanced security, customers can: •... -
Page 8: Features
Policy Manager Features • The administration client for Policy Manager integrates into the Microsoft Management Console (MMC), so that administering Intellex security is the same as administering other network applications. • In addition to providing more granularity in independently securing Intellex features and functions, Policy Manager integrates into Microsoft Windows security. - Page 9 The directory tree consists of 4 main views: Resources This view shows the group of all instruments of all types and statuses. Intellex Policy Manager This view is the tool for managing advanced security. Intellex Archive Manager This view is the tool for archiving and retrieving data from network attached storage.
- Page 10 Policy Manager Intellex® Policy Manager...
-
Page 11: Icons
Icons Policy Manager Icons and Views Image View This icon represents the Intellex Management Suite. This icon represents Resources. This icon represents the Policy Manager program. This icon represents the policies that PM applies globally to every instrument and user at your site. This icon represents the security settings that you can selectively apply to instruments, users, and zones at your site. - Page 12 Icons Image View This icon represents the license of a specific module, such as Policy Manager or Archive Manager. This icon represents a license management group. Note Windows provides optional views of objects. The views are large icon, small icon, list, or details. Intellex®...
- Page 13 Working with Policies through Global Site Policies Global Site Policies The Global Site Policies node in Policy Manager provides the policies that the security system applies to the site on a global basis. The figure below shows how the information is displayed in the right-hand pane when you select Global Site Policies.
-
Page 14: Working With Policies Through Global Site Policies
Working with Policies through Global Site Policies Action Description Select box in column to Brings up a Yes /No selection box. Select Yes to authorize more than one right of Allow multiple administrator at a time to access and control this site. Select No to concurrent administration authorize only one administrative session to access and control this site. -
Page 15: Managing Intellex Advanced Security Through Security Settings
Managing Intellex Advanced Security through Security Settings Securable Items of Intellex Units Running in Advanced Security Mode The figure below presents the All Secured Instruments module in Policy Manager, which shows all the instruments currently registered with the Policy Manager site, regardless of their respective zone assignments. -
Page 16: Instrument Menu
Managing Intellex Advanced Security through Security Settings At startup, each Intellex (instrument) notifies Policy Manager that it is available for use. If the server does not recognize the instrument, it rejects the call. If so, the Intellex unit performs an initial registration with the server. -
Page 17: Deleting An Instrument
Managing Intellex Advanced Security through Security Settings Deleting an Instrument Note You can delete only inactive instruments. 1 Open the Policy Manager administration client, and right-click on the instrument that you want to delete. 2 Select Delete and then OK. This removes the instrument from the site, as well as the zone (if any) it was assigned to. -
Page 18: Editing Security Settings Of An Intellex
Managing Intellex Advanced Security through Security Settings Editing Security Settings of an Intellex To edit the security for any of the securable items in the right-hand list, position the mouse over the item (the cursor becomes a pointer), and click. The Windows Access Control Editor appears. If you selected a container object (the objects in the list that have a small box before the name), like Multi Media Data or Administration, a generic editor appears, such as the one below. -
Page 19: Adding Or Removing Users Or User Groups
Managing Intellex Advanced Security through Security Settings • If you did not select the Full Access option, specific default permissions are granted. These differ from object to object. The table in the section Securable Features List provides an overview of the current default settings for the various security objects. •... - Page 20 Managing Intellex Advanced Security through Security Settings 4 Alternately, you can check the boxes to the right of cameras 1 and 2 in the Deny column to explicitly deny access to those cameras, as presented below. Note Simply unchecking the boxes in the Allow column may not actually keep an individual or group from viewing live video on those cameras.
-
Page 21: Propagating (Copying) Security Settings From One Intellex To Another
Managing Intellex Advanced Security through Security Settings Propagating (Copying) Security Settings from one Intellex to Another This figure presents the Propagate Security Settings dialog box, which allows you to copy instrument settings from one instrument to one or more other instruments. A directory tree contains a list of zones and member instruments. - Page 22 Managing Intellex Advanced Security through Security Settings Intellex® Policy Manager...
-
Page 23: Working With Zones
Working with Zones The second element under Policy Manager is Security Zones. Security Zones allow the administrator to organize instruments into separately managed security units. Each zone contains a default instrument that represents the security settings applied to all zone member instruments. By creating zones and assigning instruments to them, the administrator implements a corporate or site security topology that Policy Manager maintains automatically. -
Page 24: Deleting A Zone
Working with Zones Deleting a Zone Upon deleting a zone, all the instruments assigned to that zone are returned to the unassigned instrument zone. They can be reassigned to a different zone at any time. No instruments are deleted with the exception of the zones default instrument, which is no longer needed. -
Page 25: The Single Zone Menu
Working with Zones The Single Zone Menu 1 Select Action from the main menu, or right-click a specific Zone in the object tree to display the zone menu. The menu contains a combination of default MMC menu items and Instrument Group-specific items. -
Page 26: Moving An Intellex Unit To A Security Zone
Working with Zones Moving an Intellex Unit to a Security Zone The Assign Instrument dialog allows you to assign an instrument to a zone. A selection list contains the zones where you can move the instrument. The list does not show the zone to which the instrument is currently assigned. - Page 27 Working with Zones 7 If the old instrument was assigned to a zone, move the new one to the same zone. Note Be sure not to propagate the default security settings from the zone to the new instrument; you have already copied the settings from the old instrument. 8 Delete the old instrument.
- Page 28 Working with Zones Intellex® Policy Manager...
-
Page 29: Working With The License Manager
(with or without Network Client site license). The number represents the total, and does not include the additional on top of the free one. If you already have a PID, you should send it in to American Dynamics for an upgrade purchase. -
Page 30: Network Client Corporate License
Working with the License Manager Network Client Corporate License The PID that accompanies the Policy Manager software delivery encodes the presence or absence of an NC Corporate License. The PID is labeled on the jewel case and contains: • Product Type (Policy Manager) •... -
Page 31: Working With The Event Viewer
Working with the Event Viewer Policy Manager creates a custom event log that the administrator can view at any time using the Event Viewer tool from the operating system. The event logs are as follows: Application Application Error Records Policy Manager Custom Log Error Records Security Security Audit Records... -
Page 32: Adding The Event Viewer Snap-In
Working with the Event Viewer Adding the Event Viewer Snap-in To add the Event Viewer snap-in to the MMC console app that was set up during installation: 1 Select Console – Add/Remove Snap-in… 2 Select Add… The Add Standalone Snap-in dialog box appears, as presented below. Intellex®... - Page 33 Working with the Event Viewer 1 Select the Event Viewer and click Add. 2 Alternatively, you can double-click the Event Viewer entry in the list. The Select Computer dialog appears. Note Be sure to select the computer where the Policy Manager server is running. If necessary, navigate to the correct computer with the Browse button.
- Page 34 Working with the Event Viewer Intellex® Policy Manager...
-
Page 35: Appendix A: Security Concepts For Policy Manager
Appendix A Security Concepts for Policy Manager Policy Manager integrates your physical security installation into your existing network security environment. Physical and network security are complex areas of specialization that have teams of dedicated professionals with detailed knowledge specific to their areas. Using Policy Manager, the two groups collaborate to provide an integrated security network for their respective working environments. -
Page 36: The Windows Session
Security Concepts for Policy Manager The authenticating authority is a key concept. The authority, which is usually a specific domain controller in the enterprise, processes network authentication requests. Consequently, the requesting computer must be both physically connected to that domain and recognized by it. If the credentials are valid, i.e., they present the information required for the authenticating authority to recognize a unique person (JSmith for instance), that person’s network identity has been established and he or she has been authenticated. -
Page 37: What Do You Want To Access
Security Concepts for Policy Manager What do you want to access? Returning to the example of JSmith, who has an access card, we now know that the information (credentials) stored on the card is sufficient for the access control system to recognize (authenticate) JSmith. -
Page 38: Users, Groups And Inheritance
Security Concepts for Policy Manager system. The OS then uses this information, together with information it has about the user session making the request, to determine if a user or user group has the permission they are requesting. Let’s assume that JSmith wants to view live video on camera 13. Our three fundamental questions are: •... -
Page 39: Implicit Access
Security Concepts for Policy Manager Implicit access This is virtually synonymous with inherited access. If JSmith is a member of the Boston group, and that group has access to Forcasts.xls, then JSmith has access to Forcasts.xls. When the administrator has to resolve access issues, this kind of access is the most difficult to recognize because there is no entry for JSmith in the security descriptor, and therefore his name does not appear in the access control editor for that descriptor. - Page 40 Security Concepts for Policy Manager Intellex® Policy Manager...
-
Page 41: Appendix B Frequently Asked Questions
Appendix B Frequently Asked Questions What is propagation? The Propagate Settings dialog box allows you to copy the security settings from one instrument to one or more other instruments. Only the security settings are copied; the instrument name and description remain the same. What is inheritance? If you are editing the security settings for an instrument and select a ‘container’... -
Page 42: What Are Default Instruments
Frequently Asked Questions What are default instruments? Default instruments are, in effect, security templates that administrators can use to help maintain a consistent security environment either for the entire site or for different security zones within the site. For example, each zone contains a default instrument that represents the security settings applied to all zone member instruments (you can override this default behavior.) A special default instrument is the site default instrument in the ‘Unassigned Instrument’... -
Page 43: Appendix C Securable Features List
Appendix C Securable Features List Note This is a list of the securable features currently supported by Intellex version 4.2. See the Intellex Installation and Configuration Guide for a more in-depth description of each feature. Category Feature Items Default Instrument All features are This is the top-most level of an instrument. - Page 44 Securable Features List Category Feature Items Default Shutdown the System – allows system shutdown Exit to System Permission – allows exit to the operating system Access System Storage Settings – allows changes to storage volume settings Access Server Settings – allows changes to port addresses Access Date and Time Settings –...