Working with Settings on

Working with Configuration Files

Mon, 01 Jan 0001 00:00:00 +0000

The Product Files screen displays the configuration files of all the products that are installed in ESA. You can view, modify, delete, upload, or download the configuration files from this screen. In the ESA Web UI, navigate to Settings > System > Files to view the configuration files.

The following table describes the different products and their respective configuration files that are available in ESA.

Product	Configuration Files	Description
OS – Radius Server	Dictionary	Contains the dictionary translations for analyzing requests and generating responses for RADIUS server.
OS – Radius Server	custom_attributes.json	Contains the configuration settings of the header data for the RADIUS server.
OS –Export/Import	Customer.custom	Lists the custom files that can be exported or imported. For more information about exporting custom files, refer here.
Audit Store-SMTP Config Files	smtp_config.json	Contains the SMTP configuration settings for sending email alerts.
Audit Store-SMTP Config Files	smtp_config.json.example	Contains SMTP configuration settings and example values for sending email alerts. This is a template file.
Policy Management – Member Source Service User Files	exampleusers.txt	Lists the users that can be used in policy. For more information about policy users, refer Policy Management.
Policy Management – Member Source Service Group Files	examplegroups.txt	Lists the user groups that can be used in policy. For more information about policy user groups, refer Policy Management. .
Settings → System → Files → Downloads - Other files	contractual.htm	Lists all the third-party software licenses that are utilized in ESA. Note You cannot modify the file.
Distributed Filesystem File Protector – Configuration Files	dfscacherefresh.cfg	Contains the DFSFP configuration settings such as, logging, SSL, Security, and so on. For more information about the `dfscacherefresh.cfg` file, refer to the Protegrity Big Data Protector Guide 9.2.0.0 . Note Starting from the Big Data Protector 7.2.0 release, the HDFS File Protector (HDFSFP) is deprecated. The HDFSFP-related sections are retained to ensure coverage for using an older version of Big Data Protector with the ESA 7.2.0.
Cloud Gateway –Settings	gateway.json	Lists the log level settings for Data Security Gateway. For more information about the `gateway.json` file, refer to the Protegrity Data Security Gateway User Guide 3.2.0.0.
Cloud Gateway –Settings	alliance.conf	Configuration file to direct syslog events between servers over TCP or UDP.

The following figure illustrates various actions that you can perform on the Product Files screen.

Working with File Integrity

Mon, 01 Jan 0001 00:00:00 +0000

The content modifications can be viewed by the Security Officer since the PCI specifications require that sensitive files and folders in the Appliance are monitored. This information contains password, certificate, and configuration files. The File Integrity Monitor makes a weekly check and all changes made to these files can be reviewed by authorized users.

To check file modifications at any given time, click Settings > Security > File Integrity > Check. The Security Officer views and accepts the changes, writing comments as necessary, in the comment box. Accepting changes means that the changes are removed from the viewable list. Changes cannot be rejected. You must not accept deletion of system files. These files must be available.

Managing File Uploads

Mon, 01 Jan 0001 00:00:00 +0000

You can upload a patch file of any size from the File Upload screen in the ESA Web UI. The files uploaded from the Web UI are available in the /opt/products_uploads directory.

After the file is uploaded, in the Uploaded Files section, select the file to view the file information, download it, or delete it.

To upload a file:

Navigate to Settings > System > File Upload.
The File Upload page appears.

Configuring Date and Time

Mon, 01 Jan 0001 00:00:00 +0000

You can use the Date/Time tab to change the date and time settings. To update the date and time, navigate to Settings > System > Date/Time.

The Date and Time screen with the Update Time Periodically option enabled is shown in the following figure.

The date and time options are described in the following table.

Setting	Details	How to configure/change
Update Time Periodically	Synchronize the time with the specified NTP Server, upon boot and once an hour.	You can enable this option using Enable button and disable it using Disable. Only enable or disable NTP settings from the CLI Manager or the Web UI.
Current Appliance Date/Time	Manually synchronize the time with the specified NTP Server. You can use NTP Server synchronization only if NTP service is running.	You can force and restart time synchronization using Reset NTP Sync. You can display NTP analysis using NTP Query button.
Set Time Zone	Specify the time zone for your appliance.	Select your local time zone from the Set Time Zone list and click Set Time Zone.
Set Manually Date/Time (mm/dd/yyyy hh:mm)	Set the time manually.	Type the date and time using the format mm/dd/yyyy hh/mm. Click Set Date/Time. Note: The Set Manually Date/Time (mm/dd/yyyy hh:mm) text box appears only if the Update Time Periodically functionality is disabled.

Configuring Email

Mon, 01 Jan 0001 00:00:00 +0000

The SMTP setting allows the system to send emails.

You can test that the email works by clicking Test. Error logs can be viewed on the Audit Store > Dashboard > Discover screen.

For more information about Discover, refer Working with Discover.

Some scripts run after you click Save.
Ensure to save the details only when the connection is intact.

Working with Settings on

Working with Configuration Files

Note

Note

Working with File Integrity

Managing File Uploads

Configuring Date and Time

Configuring Email