Sec/User Mgmt: Step 3. Configure System-Level Security Settings

Document created by RSA Information Design and Development on Sep 19, 2017Last modified by RSA Information Design and Development on Oct 2, 2017
Version 3Show Document
  • View in full screen mode
  

This topic explains how to set system-wide security parameters.

Most global security settings, such as the maximum number of failed login attempts to allow, apply to all NetWitness Suite users and sessions. Settings related to passwords in the Password Strength section, such as password expiration period and the default number of days before user passwords expire, apply to internal NetWitness Suite users, but not external users.

Configure Security Settings

  1. In NetWitness Suite, go to ADMIN > Security.
    The Security view is displayed with the Users tab open.
  2. Click the Settings tab.
    Security Settings section of the Admin Security view Settings tab
  3. In the Security Settings section, specify values for the fields as described in the following table.
    FieldDescription
    Lockout PeriodNumber of minutes to lock a user out of NetWitness Suite after the configured number of failed logins is exceeded. The default value is 20 minutes.
    Max Login FailuresThe maximum number of unsuccessful login attempts before a user is locked out. The default value is 5.
    Session Timeout

    The maximum duration of a user session before timing out in minutes. The default value is 600. The session times out when the configured time has elapsed, after which the user must log in again. The maximum allowed value is 30,000.

    Note: If you migrated to NetWitness Suite 11.0 from version 10.6.x and previously used a value of 0 for an unlimited session timeout, the value was reset automatically to 30,000 minutes, as a value of 0 is no longer supported.

    Idle Period

    Number of minutes of inactivity before a session times out. The default value is 10. The maximum allowed value is 30,000.

    Note: If you migrated to NetWitness Suite 11.0 from version 10.6.x and previously used a value of 0 for an unlimited idle period, the value was reset automatically to the default value of 10, as a value of 0 is no longer supported.

    Usernames are case sensitiveSelect this option if you want the Username field on the NetWitness Suite login screen to be case sensitive. For example, if usernames are case sensitive, you could use admin to log on to NetWitness Suite, but you could not use Admin.
  4. Click Apply. The Security Settings take effect immediately. If a password expires, the user receives a prompt to change the password when they log on to NetWitness Suite.
You are here
Table of Contents > Set Up System Security > Step 3. Configure System-Level Security Settings

Attachments

    Outcomes