内容配置手册.pptx

Identity AwarenessSystem Interactions Agenda2134567System ComponentsADQueryIA First-Time WizardAgent SSOPortalAuthentication/AuthorizationEnforcement MechanismSystems ComponentsHR DatabaseFinance Database protected resourceIdentity ServerpdpIn admin guide:“Security Gateway with Identity Awareness”Security Gatewaypep Microsoft Active DirectoryDomain Controller (DC)Agenda2134567System ComponentsADQueryIA First-Time WizardAgent SSOPortalAuthentication/AuthorizationEnforcement MechanismADQueryDomain Logon642513Identity sharing user@machine@ipGroups, rolesIdentity ServerIdentity ServerRegister to receive notification of new event logsUser@domainMachine nameSource IP addressID Server queriesrelevant groupsLDAPMicrosoft Active DirectoryDomain ControllerMicrosoft Active DirectoryDomain ControllerWMIHR DatabaseFinance Database Security Gateway SourceDestinationApplicationuser@machineData CenterSAPIdentity Access RulebaseADQuery SW componentsIdentity Serverpdp daemonadlogpep daemonMicrosoft Active DirectoryDomain ControllerMicrosoft Active DirectoryDomain ControllerHR DatabaseFinance Database Security Gateway push/pull(sharing)SourceDestinationApplicationuser@machineData CenterSAPIdentity Access RulebaseAgenda2134567System ComponentsADQueryIA First-Time WizardAgent SSOPortalAuthentication/AuthorizationEnforcement MechanismIA First-Time Wizardentity Server“Perform connection test”Launch Wizard, enter Admin credentialsAdmin presses “Connect” buttonConnectivity statusDNS(SRV) –Get DC listWMI LDAP connections are tested“Perform connection test”LDAP: get Admin login DNSmartCenterSmartDashboardMS Active DirectoryDomain ControllerServes as DNS server1st time wizard - troubleshootingConnection between SmartConsole machine and DCTest DNS settingsConnection between gateway and DCUse test_ad_connectivity utility on the gatewayAfter wizard has finished, running adlog a dcon the gateway should show connected DCsAgenda2134567System ComponentsADQueryIA First-Time WizardAgent SS