eScan Blog
eScan Website
eScan Forum
eScan Feeds From eScan Wiki
| Revision as of 12:08, 30 November 2021 TechContent (Talk | contribs) ← Previous diff |
Current revision TechContent (Talk | contribs) |
||
| Line 1: | Line 1: | ||
| - | <h1 style='color:#077FFF;font-size:24.0pt;font-family:"Open Sans"'>Administrator Password</h1> | + | <h3 style='color:#007FFF;font-size:20.0pt;font-family:"Open Sans"'>Administrator Password</h3> |
| - | <p style='font-size:11.0pt;font-family:"Open Sans"'>Administrator Password lets you create and change password for administrative login of eScan protection center for Linux computers. It also lets you keep the password as blank, wherein you can login to eScan protection center without entering any password. | + | <p style='font-size:11.0pt;font-family:"Open Sans"'>Administrator Password lets you create and change password for administrative login of eScan protection center and Two-Factor Authentication.</p> |
| - | It also lets you define uninstallation password which will be required before uninstalling eScan Client from managed computers manually. The user will not be able to uninstall eScan Client without entering uninstallation password.</p> | + | <h4 style='color:#007FFF;font-size:18.0pt;font-family:"Open Sans"'><b>eScan Password</b></h4> |
| - | <p style='font-size:11.0pt;font-family:"Open Sans"'>To Add/Change eScan administrator password</p> | + | <p style='font-size:11.0pt;font-family:"Open Sans"'>It also lets you keep the password as blank, wherein you can login to eScan protection center without entering any password for read-only access.<br>There is also an option to set a uninstall password. An uninstallation password prevents personnel from uninstalling eScan client from their endpoint. Upon selecting Uninstall option, eScan asks them for uninstall password. To set an uninstall password, select check box Use separate uninstall password.</p> |
| - | <p style='font-size:11.0pt;font-family:"Open Sans"'><b>Set Password</b></p> | + | <h4 style='color:#007FFF;font-size:18.0pt;font-family:"Open Sans"'><b>Two-Factor Authentication</b></h4> |
| - | <p style='font-size:11.0pt;font-family:"Open Sans"'>Click this option, if you want to set password.</p> | + | <p style='font-size:11.0pt;font-family:"Open Sans"'>Your default system authentication (login/password) is Single-Factor Authentication which is considered insecure as it may put your organization's data at high risk of compromise. The Two-Factor Authentication, also more commonly known as 2FA, adds an extra layer of protection to your basic system logon. The 2FA feature requires personnel to enter an additional passcode after entering the system login password. So, even if an unauthorized person knows your system credentials, the 2FA feature secures a system against unauthorized logons.<br> |
| - | <p style='font-size:11.0pt;font-family:"Open Sans"'><b>Blank Password</b></p> | + | With the 2FA feature enabled, the system will be protected with basic system login and eScan 2FA. After entering the system credentials, eScan Authentication screen (as shown below) will appear. The personnel will have to enter the 2FA passcode to access the system. A maximum of three attempts are allowed to enter the correct passcode. If the 2FA login fails, the personnel will have to wait for 30 seconds to log in again.</p> |
| - | <p style='font-size:11.0pt;font-family:"Open Sans"'>Click this option, if you do not want to set any password for login.</p> | + | <p style='font-size:11.0pt;font-family:"Open Sans"'>To enable the Two-Factor Authentication feature, follow the steps given below:</p> |
| - | <p style='font-size:11.0pt;font-family:"Open Sans"'>When you click this option, the <b>Enter new Password</b> and <b>Confirm new Password</b> fields become unavailable.</p> | + | <li style='font-size:11.0pt;font-family:"Open Sans"'>In the eScan web console, go to Managed Computers. </li> |
| - | <p style='font-size:11.0pt;font-family:"Open Sans"'><b>Enter new Password</b></p> | + | <li style='font-size:11.0pt;font-family:"Open Sans"'>Click on Policy Templates > New Template.</li><br> |
| - | <p style='font-size:11.0pt;font-family:"Open Sans"'>Enter the new password.</p> | + | <table class="MsoNormalTable" style="width: 502.1pt; background: #DBE5F1; border-collapse: collapse; border: none;" border="1" width="616" cellspacing="0" cellpadding="0"> |
| - | <p style='font-size:11.0pt;font-family:"Open Sans"'><b>Confirm new Password</b></p> | + | <tr> |
| - | <p style='font-size:11.0pt;font-family:"Open Sans"'>Re-enter the new password for confirmation.</p> | + | <td style="width: 39.9pt; border: solid windowtext 1.0pt; padding: 0in 5.4pt 0in 5.4pt;" width="53"> |
| - | <p style='font-size:11.0pt;font-family:"Open Sans"'><b>Use separate uninstall password</b></p> | + | <p style="font-size: 11.0pt; font-family: 'Open Sans';"><strong>NOTE</strong></p></td> |
| - | <p style='font-size:11.0pt;font-family:"Open Sans"'>Click this option, if you want to set password before uninstallation of eScan Client.</p> | + | <td style="width: 422.2pt; border: solid windowtext 1.0pt; border-left: none; padding: 0in 5.4pt 0in 5.4pt;" valign="top" width="563"> |
| - | <p style='font-size:11.0pt;font-family:"Open Sans"'><b>Enter uninstall Password</b></p> | + | <p style="font-size: 11.0pt; font-family: 'Open Sans';">You can enable the 2FA feature for existing Policy Templates by selecting a Policy Template and clicking Properties. Then, follow the steps given below.</p></td></tr></table><br> |
| - | <p style='font-size:11.0pt;font-family:"Open Sans"'>Enter the uninstallation password.</p> | + | <li style='font-size:11.0pt;font-family:"Open Sans"'>Select Administrator Password check box and then click on Edit.</li> |
| - | <p style='font-size:11.0pt;font-family:"Open Sans"'><b>Confirm uninstall Password</b></p> | + | <li style='font-size:11.0pt;font-family:"Open Sans"'>Click on Two-Factor Authentication tab.<br>Following window appears.</li> |
| - | <p style='font-size:11.0pt;font-family:"Open Sans"'>Re-enter the uninstallation password for confirmation.</p> | + | <li style='font-size:11.0pt;font-family:"Open Sans"'>Select the check box Enable Two-Factor Authentication.<br>The Two-Factor Authentication feature gets enabled.</li><br> |
| - | <p style='font-size:11.0pt;font-family:"Open Sans"'>After filling all fields, click <b>OK</b>. The Password will be saved.</p> | + | <p style='font-size:11.0pt;font-family:"Open Sans"'><b>Login Scenarios</b> <br>The 2FA feature can be used for following all login scenarios: </p> |
| + | <p style='font-size:11.0pt;font-family:"Open Sans"'><b>RDP</b> <br>RDP stands for Remote Desktop Protocol. Whenever someone takes remote connection of a client's system, the personnel will have to enter system login credentials and 2FA passcode to access the system. </p> | ||
| + | <p style='font-size:11.0pt;font-family:"Open Sans"'><b>Safe Mode</b> <br> After a system is booted in Safe Mode, the personnel will have to enter system login credentials and 2FA passcode to access the system.</p> | ||
| + | <p style='font-size:11.0pt;font-family:"Open Sans"'><b>Local Logon</b> <br> Whenever a system is powered on or restarted, the personnel will have to enter system login credentials and 2FA passcode to access the system.</p> | ||
| + | <p style='font-size:11.0pt;font-family:"Open Sans"'><b>Unlock</b> <br> Whenever a system is unlocked, the personnel will have to enter login credentials and 2FA passcode to access the system.</p> | ||
| + | <p style='font-size:11.0pt;font-family:"Open Sans"'><b>Password Types</b> <br> If the policy is applied to a group, the 2FA passcode will be same for all group members. <br> | ||
| + | The 2FA passcode can also be set for specific computer(s).<br> | ||
| + | You can use following all password types to log in:</p> | ||
| + | <p style='font-size:11.0pt;font-family:"Open Sans"'><b>Use eScan Administrator Password</b> <br>You can use the existing eScan Administrator password for 2FA login. This password can be set in eScan Password tab besides the Two-Factor Authentication tab. </p> | ||
| + | <p style='font-size:11.0pt;font-family:"Open Sans"'><b>Use Other Password</b> <br> You can set a new password which can be combination of uppercase, lowercase, numbers, and special characters.</p> | ||
| + | <p style='font-size:11.0pt;font-family:"Open Sans"'><b>Use Online Two-Factor Authentication</b> <br>This option can be enabled for all users or for particular user according to the requirement. </p> | ||
| + | <table class="MsoNormalTable" style="width: 502.1pt; background: #DBE5F1; border-collapse: collapse; border: none;" border="1" width="616" cellspacing="0" cellpadding="0"> | ||
| + | <tr> | ||
| + | <td style="width: 39.9pt; border: solid windowtext 1.0pt; padding: 0in 5.4pt 0in 5.4pt;" width="53"> | ||
| + | <p style="font-size: 11.0pt; font-family: 'Open Sans';"><strong>NOTE</strong></p></td> | ||
| + | <td style="width: 422.2pt; border: solid windowtext 1.0pt; border-left: none; padding: 0in 5.4pt 0in 5.4pt;" valign="top" width="563"> | ||
| + | <p style="font-size: 11.0pt; font-family: 'Open Sans';">Users can be added via Settings > Two-Factor Authentication > Users for 2FA option.</p></td></tr></table><br> | ||
| + | <p style='font-size:11.0pt;font-family:"Open Sans"'>To use this feature, follow the steps given below:</p> | ||
| + | <ol> | ||
| + | <li style='font-size:11.0pt;font-family:"Open Sans"'>Install the Authenticator app from Play Store for Android devices or App Store for iOS devices.</li> | ||
| + | <li style='font-size:11.0pt;font-family:"Open Sans"'>Open the Authenticator app and tap Scan a barcode.</li> | ||
| + | <li style='font-size:11.0pt;font-family:"Open Sans"'>Select the check box Use Online Two-Factor Authentication.</li> | ||
| + | <li style='font-size:11.0pt;font-family:"Open Sans"'>Go to Managed Computers and below the top right corner, click on code for 2FA.<br>A QR code appears.</li> | ||
| + | <li style='font-size:11.0pt;font-family:"Open Sans"'>Scan the onscreen QR code via the Authenticator app.<br> | ||
| + | A Time-based One-Time Password (TOTP) appears on smart device.</li> | ||
| + | <li style='font-size:11.0pt;font-family:"Open Sans"'>Forward this TOTP to personnel for login.</li></ol> | ||
| + | <h4 style='color:#007FFF;font-size:18.0pt;font-family:"Open Sans"'><b>Advanced Setting</b></h4> | ||
| + | <p style='font-size:11.0pt;font-family:"Open Sans"'>Clicking Advanced Setting displays Advance setting.</p> | ||
| + | <p style='font-size:11.0pt;font-family:"Open Sans"'><b>Enable Automatic Download (1 = Enable/0 = Disable)</b> <br> It lets you Enable/Disable Automatic download of Antivirus signature updates.</p> | ||
| + | <p style='font-size:11.0pt;font-family:"Open Sans"'><b>Enable Manual Download (1 = Enable/0 = Disable)</b> <br>It lets you Enable/Disable Manual download of Antivirus signature updates </p> | ||
| + | <p style='font-size:11.0pt;font-family:"Open Sans"'><b>Enable Alternate Download (1 = Enable/0 = Disable)</b> <br>It lets you Enable/Disable download of signatures from eScan (Internet) if eScan Server is not reachable. </p> | ||
| + | <p style='font-size:11.0pt;font-family:"Open Sans"'><b>Set Alternate Download Interval (In Hours)</b> <br>It lets you define time interval to check for updates from eScan (Internet) and download it on managed computers. </p> | ||
| + | <p style='font-size:11.0pt;font-family:"Open Sans"'><b>Disable download from Internet for Update Agents (1 = Enable/0 = Disable)</b> <br>Selecting this option lets you disable Update Agents from downloading the virus signature from internet. </p> | ||
| + | <p style='font-size:11.0pt;font-family:"Open Sans"'><b>Stop Auto change for download from Internet for Update Agents (1 = Enable/0 = Disable)</b> <br> This option is used when an Update Agent didn't find the primary server to download virus signature, then it tries to get virus signature from internet, so to stop Update Agent from downloading from internet this option is to be set to 1(one).</p> | ||
| + | <p style='font-size:11.0pt;font-family:"Open Sans"'><b>Enable Download of Anti-Spam update first on clients (1 = Enable/0 = Disable)</b> <br>Normally while updating a system for virus signatures, we first download the anti-virus signature and then anti-spam signature. This option lets you first download Anti-spam updates on clients. </p> | ||
| + | <p style='font-size:11.0pt;font-family:"Open Sans"'><b>No password for pause protection</b> <br>Selecting this option lets you pause the eScan protection without entering password. </p> | ||
Current revision
Contents |
Administrator Password
Administrator Password lets you create and change password for administrative login of eScan protection center and Two-Factor Authentication.
eScan Password
It also lets you keep the password as blank, wherein you can login to eScan protection center without entering any password for read-only access.
There is also an option to set a uninstall password. An uninstallation password prevents personnel from uninstalling eScan client from their endpoint. Upon selecting Uninstall option, eScan asks them for uninstall password. To set an uninstall password, select check box Use separate uninstall password.
Two-Factor Authentication
Your default system authentication (login/password) is Single-Factor Authentication which is considered insecure as it may put your organization's data at high risk of compromise. The Two-Factor Authentication, also more commonly known as 2FA, adds an extra layer of protection to your basic system logon. The 2FA feature requires personnel to enter an additional passcode after entering the system login password. So, even if an unauthorized person knows your system credentials, the 2FA feature secures a system against unauthorized logons.
With the 2FA feature enabled, the system will be protected with basic system login and eScan 2FA. After entering the system credentials, eScan Authentication screen (as shown below) will appear. The personnel will have to enter the 2FA passcode to access the system. A maximum of three attempts are allowed to enter the correct passcode. If the 2FA login fails, the personnel will have to wait for 30 seconds to log in again.
To enable the Two-Factor Authentication feature, follow the steps given below:
|
NOTE |
You can enable the 2FA feature for existing Policy Templates by selecting a Policy Template and clicking Properties. Then, follow the steps given below. |
Following window appears.
The Two-Factor Authentication feature gets enabled.
Login Scenarios
The 2FA feature can be used for following all login scenarios:
RDP
RDP stands for Remote Desktop Protocol. Whenever someone takes remote connection of a client's system, the personnel will have to enter system login credentials and 2FA passcode to access the system.
Safe Mode
After a system is booted in Safe Mode, the personnel will have to enter system login credentials and 2FA passcode to access the system.
Local Logon
Whenever a system is powered on or restarted, the personnel will have to enter system login credentials and 2FA passcode to access the system.
Unlock
Whenever a system is unlocked, the personnel will have to enter login credentials and 2FA passcode to access the system.
Password Types
If the policy is applied to a group, the 2FA passcode will be same for all group members.
The 2FA passcode can also be set for specific computer(s).
You can use following all password types to log in:
Use eScan Administrator Password
You can use the existing eScan Administrator password for 2FA login. This password can be set in eScan Password tab besides the Two-Factor Authentication tab.
Use Other Password
You can set a new password which can be combination of uppercase, lowercase, numbers, and special characters.
Use Online Two-Factor Authentication
This option can be enabled for all users or for particular user according to the requirement.
|
NOTE |
Users can be added via Settings > Two-Factor Authentication > Users for 2FA option. |
To use this feature, follow the steps given below:
- Install the Authenticator app from Play Store for Android devices or App Store for iOS devices.
- Open the Authenticator app and tap Scan a barcode.
- Select the check box Use Online Two-Factor Authentication.
- Go to Managed Computers and below the top right corner, click on code for 2FA.
A QR code appears. - Scan the onscreen QR code via the Authenticator app.
A Time-based One-Time Password (TOTP) appears on smart device. - Forward this TOTP to personnel for login.
Advanced Setting
Clicking Advanced Setting displays Advance setting.
Enable Automatic Download (1 = Enable/0 = Disable)
It lets you Enable/Disable Automatic download of Antivirus signature updates.
Enable Manual Download (1 = Enable/0 = Disable)
It lets you Enable/Disable Manual download of Antivirus signature updates
Enable Alternate Download (1 = Enable/0 = Disable)
It lets you Enable/Disable download of signatures from eScan (Internet) if eScan Server is not reachable.
Set Alternate Download Interval (In Hours)
It lets you define time interval to check for updates from eScan (Internet) and download it on managed computers.
Disable download from Internet for Update Agents (1 = Enable/0 = Disable)
Selecting this option lets you disable Update Agents from downloading the virus signature from internet.
Stop Auto change for download from Internet for Update Agents (1 = Enable/0 = Disable)
This option is used when an Update Agent didn't find the primary server to download virus signature, then it tries to get virus signature from internet, so to stop Update Agent from downloading from internet this option is to be set to 1(one).
Enable Download of Anti-Spam update first on clients (1 = Enable/0 = Disable)
Normally while updating a system for virus signatures, we first download the anti-virus signature and then anti-spam signature. This option lets you first download Anti-spam updates on clients.
No password for pause protection
Selecting this option lets you pause the eScan protection without entering password.
