Nexus Documentation
CURL vulnerability information (CVE-2023-38545) - Nexus awareness advisory on Microsoft's update KB5014754

Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 38 Next »

This article describes how to protect the Hybrid Access Gateway administrator's web interface with two-factor authentication (2FA).

Prerequisites

 Prerequisites
  • A user group with access to the web resource (the Hybrid Access Gateway administrator's web interface) exists. For information how to create a user group, see xxx.
  • The administrators are added to the user group. For information how to add a user to a user group, see xxx.

Step by step instruction

 Ta bort? Create user group for access to web resource
  1. Go to Manage Accounts and Storage.
  2. Click User Groups > Add User Group...
  3. Select User Group Type and click Next.
  4. Enter general settings for the user group. To view the users in the user group, click View Users.
    Example: DisplayName: MyAdminGroup
  5. Click Finish.
 Ta bort? Add user to the created user group
  1. Go to Manage Accounts and Storage.
  2. Click User Accounts > Add User Account...
  3. Enter general settings for the user.
  4. Click Add Custom-defined User Attribute... and enter settings.
  5. Click Next.
  6. Select any authentication methods for the user account. Mer info behövs
  7. Click Finish.
 Create 2FA access rule
  1. Go to Manage Resource Access.
  2. Click Access Rules > Add Access Rule...

  3. Enter a display name and click Add Rule...

    Example: Display Name

    myAdministratorsAccessRule

  4. Select type of access rule. In this case, select Authentication method and click Next.

  5. Select and add the authentication methods that shall be used for 2FA.

    The selected access rules are used for authorization in the order they are selected.

  6. Specify that they shall be combined with a logical AND and click Next.
  7. Confirm the access rule creation. Click Next.
  8. Click Next and then click Finish.
 Add standard web resource for Hybrid Access Gateway Admin web resource
  1. Go to Manage Resource Access.
  2. Click Standard Resources.
  3. Expand Hybrid Access Gateway Resources.
  4. Click Secure Remote Access to Administration Interface.
  5. Click Add this Standard Resource.
  6. Enter values in the form, click the ?-sign for more help.
Example: Values for standard web resource

Display Name: HAG Admin

Description: Administrator's interface for Hybrid Access Gateway

Host: 10.75.112.20

HTTP port: 80

Related information

  • x
  • y
  • z 
  • No labels

Copyright 2024 Technology Nexus Secured Business Solutions AB. All rights reserved.
Contact Nexus | https://www.nexusgroup.com | Disclaimer | Terms & Conditions