How To: Restrict access to LogAnalyzer SE Interface

From burstekwiki
Jump to: navigation, search

Contents

How to Restrict access to LogAnalyzer SE™

To restrict access to the LogAnalyzer SE™ interface to authorized users you will need to configure the site permissions in IIS.

In IIS5:

  1. Open Internet Information Services and navigate to the properties of 'LogAnalyzer7'

  2. On the 'Directory Security' tab, click 'Edit' under the 'Anonymous access and authentication control' section

  3. Make sure 'Integrated Windows authentication' is unchecked, and that 'Basic authentication' is checked

  4. Click 'OK', then Click 'OK' again

  5. Go to the web directory for LogAnalyzer SE™ and modify the properties for the accounts that should have access to the interface. Make sure the account used by the LAEEAppPool has Read and Execute, List Folder Contents, Read, and Write permissions

  6. Open a Command window and type 'IISRESET'

  7. When the services have been restarted, test the accounts that should have access

In IIS6:

  1. Open your IIS Manager and Navigate to the 'Properties' of 'LogAnalyzer 7'

  2. In the 'Directory Security' tab, click 'Edit' under the 'Authentication and access control' section

  3. Make sure 'Integrated Windows authentication' is unchecked, and that 'Basic authentication' is checked.

  4. Click 'OK', then Click 'OK' again

  5. Navigate to the 'Permissions' section of 'LogAnalyzer 7.' Here is where you can configure what users/groups will have access to LogAnalyzer. Make sure to include the LAEEAppPool 'Identity' account as well. This can be verified by navigating to the properties of 'LAEEAppPool', and checking the account under 'Identity'

  6. Open a Command window and type 'IISRESET'

  7. When the services have been restarted, test the accounts that should have access

In IIS7:

Ensure that the LAEEAppPool is running with an account that has permissions to the LASE Databases:

  1. Open Internet Information Services (IIS) Manager on the server where the LogAnalyzer SE™ interface is installed
  2. Expand the Web server under the 'Connections' area
  3. Click on 'Application Pools'
  4. The 'LAEEAppPool' application pool should be listed in the middle screen. It will have a column labeled 'Identity.' This account must have rights to the LogAnalyzer SE™ Databases
  5. To change the account used by the identity, right click on the 'LAEEAppPool' and select 'Advanced Settings'
  6. Under the 'Process Model' section, click on the field to the right of 'Identity'
  7. Click on the 3-dot button
  8. Select 'Custom Account' and press the 'Set' button
  9. Enter the 'User Name' in the following format (DOMAIN\USER)
  10. Enter the password and confirm
  11. Click 'OK' to this screen and then 'OK" at the 'Application Pool Identity' and 'Advanced Settings' dialogs
  12. Under 'Actions' on the right side of IIS Manager, select the 'Stop' then 'Start' options under 'Application Pool Tasks'

To change the authentication type of the LogAnalyzer SE™ webpage:

  1. Expand the 'Sites' container under the Web server in IIS Manager 'Connections' window (Default install of the LogAnalyzer SE™ Interface)
  2. Click on 'LogAnalyzer7'
  3. Double-click on 'Authentication' in the 'IIS' section of the middle screen
  4. Make sure 'Basic Authentication' is enabled, and 'Windows Authentication' is 'Disabled'. If 'Windows Authentication' is 'Enabled', the user will not be prompted with a logon box when accessing the URL

To add the users/groups that will only have access to LogAnalyzer SE™:

  1. Right-click 'LogAnalyzer7' in the left-hand 'Connections' menu
  2. Click 'Edit' Permissions'
  3. In the 'Web Interface Properties' window, click the 'Security' tab
  4. Click the 'Edit' button
  5. Remove all groups and usernames and user names that should not have access to the interface
  6. Ensure that the identity used by the LAEEAppPool has 'Full Control'
  7. Add any users that should have access and set the following permissions:
    1. Read & Execute
    2. List folder contents
    3. Read
Personal tools
Namespaces

Variants
Actions
Navigation
Toolbox