Chapter 3
Figure 3.2: Eliminating alerts for authorized changes made through a management UI.
Because the management interface has access to the database of stored configurations, the utility
can store any new, authorized configurations. The devices will still generate an SNMP trap (or
syslog entry or TACACS/RADIUS accounting entry), but the management software's periodic
scan won't detect any differences between the device's now-current configuration and the latest
one stored in the database. Changes made outside the interface (such as manually through a
Telnet session), however, will still trigger an alert because the device will have a different
configuration than the one stored by the management software.
Another advantage to third-party management software is role-based security. Later in this chapter,
I'll discuss role-based security as a best practice. A device-management utility that provides an
alternative, centralized management interface can implement role-based security that is much more
flexible and secure than devices' own built-in security.
49
Summary :
A device-management utility that provides an alternative, centralized management interface can implement role-based security that is much more flexible and secure than devices' own built-in security.
Tags :
management,security,interface,rolebased,deices,stored,database,made,any,utility,still,software,configuration