Users_Status
Users > Status
The Users > Status page provides information about users and administrators who are currently logged into the SRA appliance. This section provides general information about how the SRA appliance manages users through a set of hierarchical policies.
This section contains the following sub-sections:
When Streaming Updates is set to ON, the Users > Status page content is automatically refreshed so that the page always displays current information. Toggle to OFF by clicking ON.
The Active User Sessions table displays the current users or administrators logged into the SRA appliance. Each entry displays the name of the user, the group in which the user belongs, the portal the user is logged into, the IP address of the user, a time stamp indicating when the user logged in, the duration of the session, and the cumulative idle time during the session. An administrator may terminate a user session and log the user out by clicking the Logout icon at the right of the user row. The Active User Session table includes the following information:
Table 20: Active User Information
Name
A text string that indicates the ID of the user.
Group
The group to which the user belongs.
Portal
The name of the portal that the user is logged into.
IP Address
The IP address of the workstation which the user is logged into.
Location
The geographical location of the source IP for each user.
Login Time
The time when the user first established connection with the SRA appliance expressed as day, date, and time (HH:MM:SS).
Logged In
The amount of time since the user first established a connection with the SRA appliance expressed as number of days and time (HH:MM:SS).
Idle Time
The amount of time the user has been in an inactive or idle state with the SRA appliance.
Logout
Displays an icon that enables the administrator to log the user out of the appliance.
Access Policies Concepts
The Dell SonicWALL SRA Web-based management interface provides granular control of access to the SRA appliance. Access policies provide different levels of access to the various network resources that are accessible using the SRA appliance. There are three levels of access policies: global, groups, and users. You can block and permit access by creating access policies for an IP address, an IP address range, all addresses, or a network object.
Access Policy Hierarchy
An administrator can define user, group and global policies to predefined network objects, IP addresses, address ranges, or all IP addresses and to different SRA services. Certain policies take precedence.
The Dell SonicWALL SRA policy hierarchy is:
For example, a policy configured for a single IP address takes precedence over a policy configured for a range of addresses. A policy that applies to a range of IP addresses takes precedence over a policy applied to all IP addresses. If two or more IP address ranges are configured, then the smallest address range takes precedence. Host names are treated the same as individual IP addresses.
Network objects are prioritized just like other address ranges. However, the prioritization is based on the individual address or address range, not the entire network object.
For example:
Assuming that no conflicting user or group policies have been configured, if a user attempted to access:
NoteIn this example, the user would not be able to access ftp.company.com using its IP address 10.0.1.3. The SRA policy engine does not perform reverse DNS lookups.
Tip When using Citrix bookmarks, in order to restrict proxy access to a host, a Deny rule must be configured for both Citrix and HTTP services.