TightGate-Pro

Dediziertes Remote-Controlled Browser System
zum Schutz vor Gefahren aus dem Internet

Automatisch generierter Auszug aus dem Administrationshandbuch

Datum: 11.04.2019

Herausgeber:

m-privacy GmbH

Technische Redaktion

Werner-Voß-Damm 62

12101 Berlin

Fon: +49 30 243423-34

support@m-privacy.de

www.help.m-privacy.de

Allgemeine Hinweise zu diesem Handbuch

Alle Materialien und Ausführungen wurden mit Sorgfalt erarbeitet und zusammengestellt. Den­noch sind Fehler nicht auszuschließen. Die m-privacy GmbH übernimmt keine Haftung für Schäden, die aus Unrichtigkeit einzelner Angaben entstehen.

Im Sinne einer raschen Orientierung und zur Vermeidung von Sicherheitsrisiken werden besonders wichtige Aspekte durch wiederkehrende Stichworte gekennzeichnet. Diese sind:

Hinweis
Unter diesem Stichwort werden nützliche Details zur rationellen Verwendung von TightGate-Pro er­läutert.

Achtung
Unter diesem Stichwort erfolgen Hinweise zur Problemvermeidung bzw. zur Vorbeugung von Betriebs­störungen bei TightGate-Pro.

Warnung
Unter diesem Stichwort erfolgen Hinweise auf mögliche Fehler bei der Konfiguration und Verwendung von TightGate-Pro, die weitreichende Sicherheitsrisiken bergen oder zu schwerwiegenden Betriebs­störungen führen können.

Inhaltsverzeichnis

Configuration

The administration of TightGate-Pro is menu-driven in German or English. Several access methods are available for logging in with an administration role:

Access via the console is always possible directly on the server computer for all administration roles.

For the administration roles config, maint, update and backuser allows TightGate-Pro (with the exception of the version TightGate-Pro (CC) Version 1.4 Server ) to additionally establish a remote connection via SSH.

In all administration menus, individual menu items are selected using the UP and DOWN arrow keys (cursor keys). The LEFT and RIGHT arrow keys are used to switch between <OK> and <Abbruch> is selected. <OK> selects the respective option, <Abbruch> causes a return to the menu level above.

The key combination ALT+C and the ESC key are equivalent to <Abbruch>. In the main menu, the top menu item <Ende> closes the administration session.

If administrative access is to take place from an IP address outside the defined client network, this must be entered as the administrator config under Services > Maintenance and updates > Remote administrator IP must be entered.

We recommend the freely available programme "PuTTY" for the administration of TightGate-Pro. Web-based administration of TightGate-Pro is not possible for security reasons.

Configuration changes

The configuration of TightGate-Pro is done as administrator config. The following menus can be used to configure TightGate-Pro:

Configuration menu	Description
Basic settings	Basic settings for computer name, DNS, system languages, time zone, registration and licence.
Network	Settings for network interfaces and accessible servers.
Proxy	Settings for the use of uplink proxies for HTTP or FTP as well as web filtering and logging.
System defaults	System-wide settings for user authentication and active services on TightGate-Pro.
User defaults	Defaults for user profiles for: File transfer, menu function, printing, web filtering and audio.
Services	Settings for malware scanners, maintenance access and other accessible servers.
Cluster	Configuration for the cluster settings in a network computer system. These settings are made at the factory. When the cluster computer system is activated, all menu items that apply to the entire cluster are marked (*).

As soon as changes are made in the configuration menus of TightGate-Pro, they must be saved and applied. A configuration change is signalled in red in the header area of the configuration menu. Several configuration changes can be made and then saved and applied together. Saving and applying takes place at the main menu level. The following options are available for saving and applying:

Value	Description
Save	Configuration file is saved, settings do not yet take effect.
Apply*	Acceptance and activation of the settings made in the system. Existing connections with TightGate-Viewern and to other network resources are not disconnected if possible. In the cluster, the command to apply command is distributed to all nodes and executed automatically after 5 minutes at the latest. If there are circumstances that apply this process is not carried out until Apply is possible again. For example, if the administrator config is still logged on to the system Apply is not possible. Can Apply can only be executed on some, but not all nodes, this can lead to unstable system operation! A warning message in the config-menu indicates the need to apply to apply.

There are individual settings which, in addition to application require the system to be restarted. If this is necessary, it is signalled in red in the header area of the administration menu.