TightGate-Pro

Dediziertes Remote-Controlled Browser System
zum Schutz vor Gefahren aus dem Internet

Automatisch generierter Auszug aus dem Administrationshandbuch

Datum: 11.04.2019

Herausgeber:

m-privacy GmbH

Technische Redaktion

Werner-Voß-Damm 62

12101 Berlin

Fon: +49 30 243423-34

support@m-privacy.de

www.help.m-privacy.de

Allgemeine Hinweise zu diesem Handbuch

Alle Materialien und Ausführungen wurden mit Sorgfalt erarbeitet und zusammengestellt. Den­noch sind Fehler nicht auszuschließen. Die m-privacy GmbH übernimmt keine Haftung für Schäden, die aus Unrichtigkeit einzelner Angaben entstehen.

Im Sinne einer raschen Orientierung und zur Vermeidung von Sicherheitsrisiken werden besonders wichtige Aspekte durch wiederkehrende Stichworte gekennzeichnet. Diese sind:

Hinweis
Unter diesem Stichwort werden nützliche Details zur rationellen Verwendung von TightGate-Pro er­läutert.

Achtung
Unter diesem Stichwort erfolgen Hinweise zur Problemvermeidung bzw. zur Vorbeugung von Betriebs­störungen bei TightGate-Pro.

Warnung
Unter diesem Stichwort erfolgen Hinweise auf mögliche Fehler bei der Konfiguration und Verwendung von TightGate-Pro, die weitreichende Sicherheitsrisiken bergen oder zu schwerwiegenden Betriebs­störungen führen können.

Inhaltsverzeichnis

Services

Under the menu item Services, settings are made for system services that TightGate-Pro accesses. In addition to the virus scanner, this also includes settings for central logging and monitoring as well as remote maintenance access.

The following setting options are provided:

Virus/malware scanner configuration

Maintenance and updates

Log export to a central log server

OPSWAT for file cleansing at the TightGate-Schleuse

Further service configurations

The following table provides an overview of other services:

Menu item	Description
Backup server*	IPv4 addresses of servers to which data backups are to be outsourced. Up to 25 entries are possible. The administrator makes the final selection as to which server the backup is to be outsourced to backuser. See chapter Creating a backup.
Nagios-NRPE support*	If TightGate-Pro is to be monitored by the Nagios system monitoring service or another NRPE-based service, this setting must be activated. This menu item is mandatory when using automatic load balancing in the cluster. You can find an overview of available measuring points here. The IP addresses of the monitoring should be set in the menu item Nagios/SNMP IP in the Network settings.
Start SNMP service*	Activates or deactivates the SNMP service for monitoring TightGate-Pro via the network. You can find an overview of available measuring points here. The IP addresses of the monitoring servers should be set in the menu item Nagios/SNMP IP in the Network settings.
Send SNMP traps*	Activates or deactivates the active SNMP requests from TightGate-Pro to the monitoring server. Note: This menu item is only available if the SNMP service has been started.
SNMP service password*	Assignment of the password for the SNMP user snmp-user for monitoring the TightGate-Pro via SNMP. Note: This menu item is only available if the SNMP service has been started.
ZenTiV job processing*	Activates the control of TightGate-Pro via the central TightGate administration (ZenTiV).
ZenTiV job upload key*	Uploads the public key of the ZenTiV server for centralised administration of TightGate-Pro. Note: The menu item is only available if the ZenTiV job processing is activated.
—–
Restart (time-controlled)	TightGate-Pro can be restarted at regular intervals if required. After selecting a day of the week, the desired hour can also be stored. If no day of the week is selected, there is generally no automatic restart. The time-controlled restart only affects the server on which the setting is made. If the server is part of a cluster, all servers must be set individually. The non-time-controlled restart of an entire cluster is possible at any time as Administrator maint at any time.
Shutdown (time-controlled)	TightGate-Pro can be shut down on a time-controlled basis if required. After selecting a day of the week, the desired hour can also be entered. If no day of the week is selected, there is generally no shutdown. The time-controlled shutdown only affects the server on which the setting is made. If the server is part of a cluster, all servers must be set individually. The non-time-controlled shutdown of an entire cluster is possible at any time as Administrator maint at any time.
Cluster-controlled restart	This menu item is only relevant for TightGate-Pro clusters that work as CEPH-BOOT-CLUSTER! If this is the case, this menu item is used to set the time at which this TightGate-Pro server should be restarted. The restart is only carried out if a new core is available for TightGate-Pro started via Ceph boot.