Enhanced Access Control (EAC) policy can be defined at Permission level and also at an individual at the Access Control EAC object level and these can be associated to the Permission.
The EAC capability defines granular risks scores. Earlier capability included defining risk for every path (file or folder). But with the present functionality one can define the same for every operation on a given path for read, write, delete, execute, separate risk can be defined. The order of EAC policy execution is sequential. In the event of conflict, the first one takes the priority.
The Enhanced Access Control functionality includes the following four categories:
File and Directory Level Access
Application Process Control
Registry Access
Services Start/Stop Control
The earlier functionality with Command Control was limited to Linux/Unix but the present one includes support for Windows.
This ability has control over files and directories permissions to users based on sessions. An administrator can specify a list of paths and each one has access control such as; Read, Write, Delete capabilities.
NOTE:Non-English characters are not supported with Enhanced Access Control on Windows.
Click Access Control > Configuration > Enhanced Access Control > New Policy.
Specify the Name
(Optional) Specify the Description
Select the List Type as Windows.
Click Create.
Click Add Path: Create a path in the target machine. Modify this path rule to create appropriate permissions for file and associate this with the necessary risk score if you want.
Click Save.
Create Resource Pool. For more information see, Resource Pools.
Create User Role. For more information, see Configuring a User Role.
Associate the Resource Pool and User Role with an assignment by clicking permissions for the Enhanced Access Control.
Click Add > Add EAC Policy. The Windows policy is displayed.
Select the Policy and click Add.
Click Finish. The permission is created.
Log into a Windows machine and navigate to the created folder. You can verify that the permissions you had created are successfully configured.
You can view the risk details in Reports > All Sessions Details > Keystrokes.
For more information on Enhanced Access Control on Linux and Unix machine, see Enhanced Access Control.
Click Access Control > Configuration > Enhanced Access Control > New Policy.
Specify the Name
(Optional) Specify the Description
Select the List Type as Linux.
Click Create.
Click Add Path: Create a path in the target machine. Modify this path rule to create appropriate permissions for file and associate this with the necessary risk score if you want.
Click Save.
Create Resource Pool. For more information see, Configuring a Resource Pool.
Create User Role. For more information, see Configuring a User Role.
Associate the Resource Pool and User Role with an assignment by clicking permissions for the Enhanced Access Control.
Click Add > Add EAC Policy. The Windows policy is displayed.
Select the Policy and click Add.
Click Finish. The permission is created.
Log into a Windows machine and navigate to the created folder. You can verify that the permissions you had created are successfully configured.
You can view the risk details in Reports > All Sessions Details > Keystrokes.