- Log in as Admin user
- On user’s menu panel, go to System Manager folder then click Security Policies
- Click the New button to open a new screen
- Add a Policy Name and Description
- Modify the fields that need to be configured. See field descriptions below
- Click the Save button once done.
User Password Policy
Policy Name | Description |
|---|---|
| Allow User to Change Password | If this is enabled then the user can change their password. If it's disabled then prevent the user from changing their password |
| Minimum Password Length | The passwords minimum length |
| Maximum Password Length | The passwords maximum length |
| Password Expires After | The password will expire after the set number of days (0 disables this feature) |
| Display Password Expiration Warning | Display a warning message every time the user logs in xx number of days before the password is set to expire (0 disables this feature) Text for this message: "Your password is going to expire in x days. You will need to change your password on or before the day it expires" |
| Enforce Password History | This will keep track of the last xx number of passwords the user has created and makesure they cannot reuse the same password in that list. (0 disables this feature) |
| Disallow Incremental Passwords | Prevent the user from incrementing their password by 1 number or letter. This will only track the last character of the password. Ex: If the password is My$StrongPassword1 then it should not allow My$StrongPassword2 |
| Maximum Repeated Characters | Prevents the number of characters from being repeated more than the number specified and should be case sensitive. If the value for this is 2 then it should never allow any character or number to be used more than 2 times in the password. (0 disables this feature) Ex: This would be an invalid password: ThisPassword |
| Minimum Unique Characters | Verifies that xx number of characters are unique in the password. If this was set to 4 then a password must have at least 4 different characters, numbers of symbols in it. (0 disables this feature) |
| Minimum Lowercase Characters (a-z) | The password is required to have at least xx number of Lowercase characters. (0 disables this feature) |
| Minimum Uppercase Characters (A-Z) | The password is required to have at least xx number of Uppercase characters. (0 disables this feature) |
| Minimum Numeric Characters (0-9) | The password is required to have at least xx number of Numeric characters. (0 disables this feature) |
| Minimum Special Characters | The password is required to have at least xx number of Special characters. (0 disables this feature) |
| Require Two-Factor Authentication | Requires the User to Enable Two-Factor Authentication. When the user logs in, it should check to see if 2FA is enabled and if not force the user to enable it. Once enabled the user should not be allowed to disable it unless this option is set to False. |
User Lockout Policy
Policy Name | Description |
|---|---|
| Lock Idle User after | Lock the screen if the user is idle for more than xx number of minutes. (0 disables this feature) |
| Require CAPTCHA after | Display a CAPTCHA if the user enters the wrong password more than xx number of times. (0 disables this feature) |
| Lock User Account after | Lock the User from logging in if the user enters the wrong password more than xx number of times. (0 disables this feature) |
| Lock User Account Duration | If the User Account is locked then keep it locked for xx number of minutes. (0 disables this feature) |
| Remember Me Expiration days | If the user checked Remember Me on login screen, after the xx number of days set on the policy, the user will be required to login again |
| After Hours Login | Combo Box with the following options:
|
| Business Hours (Start Time) | Sets the Start of the Business Hours. Disabled when "After Hour Login" is set to Allow and enabled for any other option. The drop down should display the visual Time selector only (no calendar) |
| Business Hours (End Time) | Sets the End of the Business Hours. Disabled when "After Hour Login" is set to Allow and enabled for any other option. The drop down should display the visual Time selector only (no calendar) |
| Supervisor | Combo Box that displays a list of users. The selected user (supervisor) would receive an email when the "After Hours Login" is set to Alert any time the user tries to login outside the defined business hours. Disabled when "After Hour Login" is set to Allow or Prevent. Here is how the email should be formatted. Email Subject: i21 Security Policy Alert - After Hours Login Body: Username logged in at 10:45 PM (EST) from IP address 74.208.161.217. This alert was triggered because it's outside the business hours of 7:00 AM and 6:00 PM. |
- Log in as Admin user
- On user’s menu panel, go to System Manager folder then click Security Policies
- Click the New button to open a new screen
- Add a Policy Name and Description
- Modify the fields that need to be configured
User Password Policy
Policy Name | Description |
|---|---|
| Allow User to Change Password | If this is enabled then the user can change their password. If it's disabled then prevent the user from changing their password |
| Minimum Password Length | The passwords minimum length |
| Maximum Password Length | The passwords maximum length |
| Password Expires After | The password will expire after the set number of days (0 disables this feature) |
| Display Password Expiration Warning | Display a warning message every time the user logs in xx number of days before the password is set to expire (0 disables this feature) Text for this message: "Your password is going to expire in x days. You will need to change your password on or before the day it expires" |
| Enforce Password History | This will keep track of the last xx number of passwords the user has created and makesure they cannot reuse the same password in that list. (0 disables this feature) |
| Disallow Incremental Passwords | Prevent the user from incrementing their password by 1 number or letter. This will only track the last character of the password. Ex: If the password is My$StrongPassword1 then it should not allow My$StrongPassword2 |
| Maximum Repeated Characters | Prevents the number of characters from being repeated more than the number specified and should be case sensitive. If the value for this is 2 then it should never allow any character or number to be used more than 2 times in the password. (0 disables this feature) Ex: This would be an invalid password: ThisPassword |
| Minimum Unique Characters | Verifies that xx number of characters are unique in the password. If this was set to 4 then a password must have at least 4 different characters, numbers of symbols in it. (0 disables this feature) |
| Minimum Lowercase Characters (a-z) | The password is required to have at least xx number of Lowercase characters. (0 disables this feature) |
| Minimum Uppercase Characters (A-Z) | The password is required to have at least xx number of Uppercase characters. (0 disables this feature) |
| Minimum Numeric Characters (0-9) | The password is required to have at least xx number of Numeric characters. (0 disables this feature) |
| Minimum Special Characters | The password is required to have at least xx number of Special characters. (0 disables this feature) |
| Require Two-Factor Authentication | Requires the User to Enable Two-Factor Authentication. When the user logs in, it should check to see if 2FA is enabled and if not force the user to enable it. Once enabled the user should not be allowed to disable it unless this option is set to False. |
User Lockout Policy
Policy Name | Description |
|---|---|
| Lock Idle User after | Lock the screen if the user is idle for more than xx number of minutes. (0 disables this feature) |
| Require CAPTCHA after | Display a CAPTCHA if the user enters the wrong password more than xx number of times. (0 disables this feature) |
| Lock User Account after | Lock the User from logging in if the user enters the wrong password more than xx number of times. (0 disables this feature) |
| Lock User Account Duration | If the User Account is locked then keep it locked for xx number of minutes. (0 disables this feature) |
| After Hours Login | Combo Box with the following options:
|
| Business Hours (Start Time) | Sets the Start of the Business Hours. Disabled when "After Hour Login" is set to Allow and enabled for any other option. The drop down should display the visual Time selector only (no calendar) |
| Business Hours (End Time) | Sets the End of the Business Hours. Disabled when "After Hour Login" is set to Allow and enabled for any other option. The drop down should display the visual Time selector only (no calendar) |
| Supervisor | Combo Box that displays a list of users. The selected user (supervisor) would receive an email when the "After Hours Login" is set to Alert any time the user tries to login outside the defined business hours. Disabled when "After Hour Login" is set to Allow or Prevent. Here is how the email should be formatted. Email Subject: i21 Security Policy Alert - After Hours Login Body: Username logged in at 10:45 PM (EST) from IP address 74.208.161.217. This alert was triggered because it's outside the business hours of 7:00 AM and 6:00 PM. |
Overview
Content Tools