Have an account?

  •   Personalized content
  •   Your products and support

Need an account?

Create an account

Cisco ScanCenter Administrator Guide, Release 5.2

Book Contents
Find Matches in This Book
Available Languages
Download Options

Book Title

Cisco ScanCenter Administrator Guide, Release 5.2

Chapter Title

Account Management

Results

Updated:
April 11, 2019

Chapter: Account Management

Account Management

Editing Your Account Details

Procedure

Step 1

Click the Admin tab to display the administration menus.

Step 2

In the Your Account menu, click Account Details to display the Account Details page.

Step 3

Expand the Personal Details section.

Step 4

In the Title drop-down list, choose your title.

Step 5

(Required) Enter your First Name.

Step 6

(Required) Enter your Last Name.

Step 7

Enter your cellular phone number in the Mobile Phone box.

Step 8

Expand the Organization Details section.

Step 9

Enter your Job Title.

Step 10

(Required) Enter your Organization Name.

Step 11

(Required) Enter your Telephone number.

Step 12

Enter your facsimile number in the Fax field.

Step 13

Enter your city in the City box.

Step 14

Enter your organization’s address, using up to three lines, in the Address boxes.

Step 15

Enter the URL of your organization’s Website.

Step 16

Expand the General Details section.

Step 17

In the drop-down list, click your Country.

Step 18

In the Time Zone drop-down list, choose your time zone. Alternatively, choose UTC.

Step 19

Enter your postal code in the ZIP/Post Code box.

Step 20

Click Save to apply your changes. Alternatively, navigate to another page to abandon your changes.

Changing Your Password

When a new user is created and activated, or an administrator resets the password of a user who has forgotten their password, an email with password instructions is sent to the email address associated with that user.

Passwords expire after a set period of time; 90 days by default. This is configured for you by Cisco Customer Support. You can request that passwords do not expire. If your password has expired, you are prompted to change your password before you can access any other areas of Cisco ScanCenter. Also, you can change your password at any time.

Your new password cannot be the same as any of your five previous passwords. Also, it must contain:

  • At least 8 characters

  • One or more lower case letters

  • One or more upper case letters

  • One or more digits

  • One or more of the following special characters: @#$%^&-=_!:?


Note

Clicking Reset does not reset your password. It only clears the boxes.

Procedure

Step 1

Click the Admin tab to display the administration menus.

Step 2

In the Your Account menu, click Change Password to display the Enter your new password pane.

Step 3

Enter the current password.
Step 4

Enter the new password in the Password and Confirm password boxes. As you type the password, the red crosses change to green check marks when each criterion is met.

Step 5

Once you have entered a valid password, click Save to change the password. Alternatively, click Cancel or navigate away from the page to abandon your changes.

Managing Login Access to Account

Procedure

Step 1

Click the Admin tab to display the administration menus.

Step 2

In the Your Account menu, click Authorized IPs to display the Limit Login Access page.

Step 3

Expand the Add IP Address/Network to Authorized Addresses section.

Step 4

Enter an IP address or a subnet mask in the Addresses field.

Step 5

Click Submit to add the IP address to the authorized list.

Step 6

Authorized IP addresses and networks are listed below the search field. You can search for, edit, or select items to be removed.
Step 7

In the Actions section, you can select what is done when there is a sign in from an unlisted, unauthorized IP address.

  • Send an email to your company administrator which notifies you of any attempt to sign in from an unauthorized IP address.

  • Forbid sign in from any unauthorized IP address or network subnet.

Step 8

Click Save to apply your changes. Alternatively, click Cancel or navigate to another page to abandon your changes.

Changing the Scanned IP Addresses

You must provide us with a list of egress IP addresses that send traffic from your network to our proxy servers.


Note
By default, only IPv4 addresses are enabled. Contact Cisco Customer Support if you require IPv6 address support.

Procedure

Step 1

Click the Admin tab to display the administration menus.

Step 2

In the Your Account menu, click Scanning IPs to display the Scanned IP Addresses pane.

Step 3

Add, remove, or change an IP address. Enter each IP address in CIDR notation. For example, 209.165.200.224/27 (IPv4) or 2001:DB8::/32 (IPv6). You should enter each IP address on a new line. Do not enter private or reserved IP addresses, for example 192.168.0.0/24. IPv4 addresses can also be entered with a netmask, for example 209.165.200.224/255.255.255.224.

Step 4

Click Save to proceed with your proposed changes. Alternatively, click Cancel or navigate away from the page to abandon your changes.

Step 5

On the Scanning IPs Confirmation Page, you are shown what is to be added or removed. Changing the scanned IP addresses will affect traffic from your network to our proxy servers. Click OK to submit your changes. Alternatively, click Cancel to go back and edit your proposed changes.

What to do next

Changes to the scanned IP addresses will normally be updated within one business day. A confirmation email will be sent when the changes are complete. If your change is urgent, contact Cisco Customer Support.

Downloading a List of Dynamic DNS Addresses

Typically, accessing the proxy servers from a dynamic IP address requires the use of Connector configured with group or company authentication keys.

The majority of Cisco and third-party routers can issue Dynamic DNS (DDNS) requests. DDNS enables the router to communicate with an external server to send its current external (WAN) IP address, so that other devices can connect to it using a static name resolved through normal DNS requests. The DDNS server is automatically updated if the external IP address changes. A DDNS update comprises a user name, password, and host name, which can be used by the service to authenticate these devices.

It is also possible to perform DDNS registration with client-side software.


Note

For transparent deployment, DDNS routers must support the ability to port forward traffic to the proxy servers. Alternatively, browser proxy settings (PAC, WPAD, and so on) may be used if required.

Cisco provides a proprietary DDNS service as a means to verify dynamic IP addresses against its authentication database. Any router that has a “custom” option for DDNS should be able to use this functionality.

For detailed instructions on configuring your router, see your router documentation.

Procedure

Step 1

If you have not already done so, create a group authentication key in Cisco ScanCenter.

Step 2

Create a “custom” DDNS on your router.

Step 3

Set the server to ddns.scansafe.net.

Step 4

Set a unique identifier for the username or equivalent parameter.

Step 5

Set the password to the group authentication key that you previously created.

Step 6

Set the hostname to one of the domains associated with your Cisco ScanCenter account, typically your email domain.

Step 7

Set the URL to /dir/register?hostname=.

What to do next

To verify that your routers are working correctly, you may want to view a list of currently registered dynamic DNS addresses. The list is provided as a CSV file containing the current IP address for each device. It does not contain a history of device IP addresses.

To download the list, click the Admin tab to display the administration menus. In the Your Account menu, click Dynamic DNS.

Click Generate Audit to download a comma-separated value (CSV) list of the dynamic IP addresses currently registered with your account. The list contains user names, IP addresses, host names, and the date of the last update.

Managing Admin Users

The Manage Admin Users page enables you to create, edit, and remove admin users. The access rights of an admin user are determined by the role assigned to that user. The available roles are:

  • Full Access
  • Read Only
  • Report Admin
  • Admin with no Forensic Role
  • HR
  • Super User (only available to the default company super user)
  • Threat Analysis
  • Full Read Only

See Role Permissions for details of the access rights associated with each role.


Note

The default company super user can create, edit, and remove super users. Super users can create other admin users but cannot create super users of equal role. The default company super user cannot be removed.

Procedure

Step 1

Click the Admin tab to display the administration menus.

Step 2

In the Your Account menu, click Admin Users to display the Manage Admin Users page.

Creating a New Admin User

Procedure

Step 1

Click Create Admin User.

Step 2

Enter the email address of the new admin user in the Email Login box. This is the username.

Step 3

In the Role drop-down list, choose a role.

Step 4

Click Submit to create the new admin user. Alternatively, navigate away from the page to abandon your changes.

What to do next

Activate the admin user in order to grant access and allow the admin user to log in to Cisco ScanCenter. An email with password instructions is then sent to the admin user.

Editing an Admin User

To activate an inactive admin user, check the Active box.

To deactivate an active admin user, uncheck the Active box.

To reset or change the password of an admin user, click Reset Password. An email with password reset instructions is then sent to the admin user.

To unlock an admin user who has been locked out after multiple failed log-in attempts, click Unlock.

To change the role of an admin user, choose the required Role in the drop-down list.


Note

The organization super user account will never be locked. After 10 failed attempts in succession, the password is invalidated and an email with password setup instructions is then sent to the super user.

Restricting Access to Reports

You can restrict the data that an admin user is able to view when running reports. By default there are no restrictions in place.


Note

Filters will not be applied to scheduled reports. Filter sets cannot be applied to admin users.

For more information about filters, see Filtering Reports.

Procedure
Step 1

Click Filters to display the list of attributes.

Step 2

Clear the check boxes of the attributes that you do not want to be viewed by the admin user.

Step 3

Add any filters you want to apply to online reports viewed by the admin user.

Step 4

Click Save to apply your changes. Alternatively, navigate away from the page to abandon your changes.

Removing an Admin User


Caution

When an admin user has been removed, it cannot be recovered. Instead, you must create a new admin user.

Procedure

Step 1

Select the check box for the required user. You can select multiple admin users to be removed.

Step 2

Click Remove. You will be prompted to confirm your action.

Managing Service Notifications

Service notifications are displayed in Cisco ScanCenter. Service notifications include new incidents, outages, planned maintenance, incident updates, new features, product updates, and functional changes. View service notifications by navigating to Admin > Your Account > Notifications. Service notifications are displayed with their Status; read or unread, Subject, Category icon; a blue circle for product and feature updates or a yellow triangle for service updates, and the Date Received. For each type of notification, you can create a list of email addresses for recipients to receive the notification. Regardless of these settings, service notifications are always displayed in Cisco ScanCenter. The recipient lists are used for service notifications only; no other emails are sent to these addresses.

Procedure

Step 1

Navigate to Admin > Your Account > Notifications.

Step 2

In the Manage Service Update Settings pane, select the desired check box or boxes.

Step 3

For each recipient, enter the email address in the field and click Add Recipient. You can remove unwanted email addresses by clicking the x icon within each address to remove.

Step 4

Click Apply to save your changes. Alternatively, navigate away from the page to abandon your changes.

Role Permissions

Area Company Super User Super User Full Access Read Only Full Read Only HR Admin (No Forensic) Report Admin Threat Analysis
User Messages R/W R/W R/W R R — R/W — —
Email Alerts R/W R/W R/W R R — R/W — —
Search/Time Analysis R/W R/W R/W R R R R/W R/W —
Detailed Search R/W R/W R/W — R R/W — R/W —
Filter Sets R/W R/W R/W R R R R/W R/W —
Store Search/Remove Stored Search R/W R/W R/W — — — R/W R/W —
Manage Composite Reports R/W R/W R/W R R R/W R/W R/W —
Create/Edit Composite Reports R/W R/W R/W — — R/W R/W R/W —
Managed Scheduled Reports R/W R/W R/W R R — R/W R/W —
Create/Edit Scheduled Reports R/W R/W R/W — — — R/W R/W —
Manage Email Recipients R/W R/W R/W — R — R/W R/W —
Allowed Traffic Reports R R R — R R — R —
Spyware R/W R/W R/W R R — R/W — —
Web Filtering R/W R/W R/W R R — R/W — —
Web Filtering / ISR Exception R/W R/W R/W — — — — — —
Account Details R/W R/W R/W R R R R/W R R
Change Password R/W R/W R/W R/W R/W R/W R/W R/W R/W
Authorized IPs R/W R/W R/W R R — R/W — —
Scanning IPs R/W R/W R/W — R — R/W — —
Admin Users R/W R/W — — R — — — —
Dynamic DNS R/W R/W R/W — R — R/W — —
Authentication R/W R/W R/W — R — R/W — —
Clientless Authentication R/W R/W R/W — R — — — —
User/Group Management R/W R/W R/W — R — R/W — —
Audit Settings R/W R/W R/W — R R/W R/W R/W —
Activity/Access Audit R R R — R R R R —
Dictionaries/File Info DBs R/W R/W R/W R R/W — R/W R/W —
Import User List R/W R/W R/W — R — R/W — —
HTTPS Inspection R/W R/W R/W R R — R/W — —
Hosted Config R/W R/W R/W — — — R/W — —
Log Extraction Credentials R/W R/W — — — — — — —
Threats Tab R/W R/W R — R — — R/W R/W
Policy Backup/Restore R/W R/W R/W — R — R/W — —
Device Management R/W R/W R/W R R — R/W — —

Was this Document Helpful?

FeedbackFeedback

Contact Cisco

Related Cisco Community Discussions

About Us
Contact Us
Work with Us