General Settings

This section allows you to change various general options in the WebAdmin.

Option

Description

Category Alert Processor

This option shows the WebAdmin servers that process URL alerts. Additional Alert Processors (WebAdmin Servers) can be added and separated with commas.

e.g. https://<WebAdminServer>/webadmin/api/alert_process.php

Authorize Category Alert Processing

This setting enables or disables the alert authorization based on referrer and serial. It is off by default.

WebAdmin Event Notify URL

If you want a notification when a WebAdmin log message is generated, you can specify the CGI script called during a log message. The format for this callback is XXX – for example, http://myevent.netsweeper.com/sendemail.php?message=  .

WebAdmin External URL

This is your current WebAdmin URL. The WebAdmin inserts it into Emails and Deny pages.

This value is initially set to ‘Generated’ which means that the WebAdmin automatically composes it from the browser request. But it is recommended that it should be set explicitly. It is necessary if your server is installed behind a firewall, or integrates with a cache, or is a multiple server deployment because in such cases, the web server cannot know its own address outside the firewall. However, even in a simple configuration, it is better to specify the URL address explicitly for security reasons.

The format of the URL should be https://[IP or NAME]/webadmin/ where the host name part is the external IP address or DNS name of the server.

Client Expiry Threshold (days)

This option is used with the ‘Remove All Expired Clients’ function in the 'Bulk Client Cleanup' window of the 'Clients' window.  This number, in days, is the grace period a Client will have when the ‘Remove All Expired Clients’ option is run.

Clock Skew Threshold (seconds)

This is the Clock Skew threshold in seconds that is used in the System Status window to check if a system time is out of sync. The threshold must be between 300 (5 minutes) and 1800 (30 minutes).

Policy List Last Update Check Threshold (minutes)

The default is 30 minutes.  This setting is used by the System Status List window.  The System Status green / red globe for Lists only shows red when the 'Last Update Check' exceeds this threshold.  The maximum value for this setting is three days (4320 minutes).

Force Lowercase Group Creation

Select this checkbox to enable the WebAdmin to force group names to be created in all lowercase letters.

Copy Group from Existing Group

If this is enabled and there is at least one WebAdmin Template, an option will display in the Group Add window and the Group Advanced tab that will allow you to create or reset a Group based on another Group.

Copy Policy from Existing Policy

If this is enabled and there are Policy Templates, an option will display in the 'Add Policy' window and the Policy General tab that will allow you to create or reset a Policy based on another Policy.

WebAdmin SysLog Enabled

This enable a copy of the WebAdmin Logs to be delivered to the System Logger (Syslog).

WebAdmin Syslog Identity

This is the name of the process that will appear in those log entries.  By default, it is WebAdmin.

WebAdmin NSLog Enabled

This enables WebAdmin Logs to be sent to Request Logs. This is an EA feature and is not recommended on systems with high WebAdmin Log change rates. Enabling this feature should be done with proper consideration for performance.

WebAdmin NSLog Host

Set the WebAdmin NSLog Host, this can be the remote logger or the local policy service.

Disable WebAdmin Logging Sections

This will disable WebAdmin Logging for the selected section. The specified log areas are (Policy Management, Authentication, API, Workstation Agent, Account Management, Reporter, Radius Parser, syslog Parser and Other).  As an example, if 'Policy Management' is selected, when creating a Group, there will be no WebAdmin Log for the Group creation.

Managed Services

Select the service you want to enable in the WebAdmin and on the ‘Services’ window. Press the Ctrl-key to select multiple services.  The ‘Service’ page will show or hide the Service that was enabled or disabled.

Enabled Languages

Select the languages you want to enable in the WebAdmin. Press the Ctrl-key to select multiple languages.

Global Language

This allows you to change the language for your WebAdmin.

Default WebAdmin TimeZone

This sets the WebAdmin Global timezone.  If default is chosen, this indicates that the Global timezone is not set and the System Timezone will be used.

Default WebAdmin Theme

This will enable you to change the theme. The theme is the look and feel of the management interface. If you change the theme remember to logout for the changes to take effect.

Delete WebAdmin Log Records older than (days)

By default, this is set to 7 days.  WebAdmin Logs and Alert Logs will be truncated after the number of days specified.  The truncation occurs, by default, at 1 a.m. A zero indicates unlimited.

WebAdmin Log Limit

This sets the number of log entries that are kept. The truncate log script is no longer run with the database backups. The script now only keeps entries based on days, which is set using the 'Delete WebAdmin Log Records older than (days)' setting.

Policy Database Archive Limit

This sets the number of Policy database backups that are stored locally when backups are performed.  This includes the Daily, Weekly or Monthly backup as well as when the database is reset or a new database is uploaded.  The cleanup of extra backups is performed before a database backup.

WebAdmin Logs Database Archive Limit

This sets the number of WebAdmin Logs database backups that are stored locally when backups are performed.  This includes the Daily, Weekly or Monthly backup as well as when the database is reset or a new database is uploaded. The cleanup of extra backups is performed before a database backup.

Reporter Database Archive Limit

This sets the number of Reporter database backups that are stored locally when backups are performed.  This includes the Daily, Weekly or Monthly backup as well as when the database is reset or a new database is uploaded. The cleanup of extra backups is performed before a database backup.

Default WebAdmin Timeout

The sets the timeout in seconds.  This setting is used when the WebAdmin connects to remote hosts or connects directly to the Policy Server.  The default setting is 5 seconds and the maximum setting is 200 seconds.

Poller SNMP Enabled

This option enables or disables the SNMP Poller.  By default, this is enabled.

Poller SNMP Community

This option allows you to add the SNMP Community.  By default, this is 'public'.

Table Entry Options

This is a list of the number of entries that can be selected in WebAdmin tables for paging.  This is a comma separated list.  Zero can be used to specify that all entries can be displayed.  Please note that this setting may cause large delays or timeouts with large tables.

Table Search Delay (ms)

This is the minimum delay between table searches.  The <ENTER> key can be used to override this delay. A value of zero indicates it will not automatically search.

Display Table Processing Indicator

This setting enables or disables the processing message when retrieving data.

Apply Settings Grace Interval (s)

If the NSD last_update_time is greater than the applysettingscheck_delay for the NSD config settings, the System Status will display red.  This setting can be used to define a grace interval for NSD to update the config information.  This is set in seconds.

WebAdmin Session Store Enabled

This setting enables Session Store which allows users to restore previous session information for features such as Tables and Breadcrumbs. Table Settings include: current page, items per page, filtering, and sorting.

WebAdmin Session Store Max Age

This is the number of days since the last modification date that a session will be kept in the database.

Send Email on Account Create

If this is enabled, an email will be sent to the new Account user when the Account is created.

Account Create Email Content

This contains the email format sent if the ‘Send Email on Account Create’ option is enabled.

$username - Login Name

$email - Email Address

$firstname - First Name

$lastname - Last Name

$organization - Organization

$classification - Classification

$description - Description

$expire - Expiry

$theme - Web Admin Theme

$owner - This is the user that created the account in WebAdmin.

Enable Proxy Certificate Deny Page Download Link

This enables a button in the Deny Page Editor that inserts a link in the deny page allowing the user to download a public certificate without authentication. 

WebAdmin Unavailable Deny Page DPID

This is used to configure the Unavailable Deny Page DPID from the System Configuration >WebAdmin Settings page. This can change from the default Unavailable Deny Page to another different deny page. The deny page selected from the WebAdmin Settings page gives the DPID number from the database for the Unavailable Deny Page. From the 'Deny Page Editor', if you hover over or click edit on a Deny Page and open in a new browser window, you can see the DPID.

WebAdmin Secure Deny Page DPID

 

This is used to configure the Secure Deny Page DPID from the System Configuration > WebAdmin Settings page. This can change from the default Unavailable Deny Page to another different deny page. The deny page selected from the WebAdmin Settings page gives the DPID number from the database for the Unavailable Deny Page. From the 'Deny Page Editor', if you hover over or click edit on a Deny Page and open in a new browser window, you can see the DPID.

Client Cleanup Crontab Enabled

If this is enabled, a Client cleanup will run and will delete one client at a time from the Agent Configuration using the TTL for the clients as the gap. This means that if the client expires after 1 hour, the Client will be deleted after 2 hours. If there is no TTL, the Client is deleted after 5 minutes.

Client Cleanup TTL Expire Delay (secs)

How long a Client needs to be expired for before being removed.

Client Cleanup Count Limit

The number of Clients to remove for each cron run. It is recommended that this is set to 1.