Overview

This article guides you on how to adjust database settings, set up user access and privileges, and configure various other GFI LanGuard Central Management Server settings.

Solution

Refer to the following topics to review or adjust corresponding settings within the Central Management Server:

• Adjust Database Settings
• Configure User Access
• Managing Sites
• Adding Security Certificates
• Changing email settings
• Configuring Updates

Configuring Central Management Server database settings

Backend database stores collected monitoring data. This data is used by GFI LanGuard Central Management Server to populate the dashboards and for reporting purposes.

The currently configured database can be viewed from Settings > Database. Here you can also specify data retention settings.

To change the current database configuration or create a new database:

1. In GFI LanGuard Central Management Server, go to Settings > Database.
2. Under the Database Server area, modify the following options:
   

   Option	Description
   SQL Server	The name of the SQL Server instance. Enter the name of the server where the database is installed.
   Windows Authentication	Select this option to use Windows credentials when connecting to your SQL Server.
   SQL Server Authentication	If your SQL Server has been installed in SQL Server Authentication Mode, select this option and provide Username and Password.
   Database Name	If you want to create a new database, use this field to type the name of the database you want to create in SQL Server. Ensure that the database name entered is unique, otherwise you will overwrite the existing database.

Specifying Data Retention Settings

Retention policy settings define whether to keep all the historical data stored in the configured database or to delete this data after a specified amount of time. By default, GFI LanGuard Central Management Server is set to keep historical data for a period of 36 months.

To change data retention settings:

1. In GFI LanGuard Central Management Server, go to Settings > Database.
2. Under the Retention Policy area, modify the following options:
   

   Option	Description
   Never delete history	Select to keep all data gathered by GFI LanGuard Central Management Server indefinitely. If selecting this option ensure adequate disk space on the server.
   Keep history for a specified period	Select this option to delete collected data after a defined amount of time. Use the Months field to specify an amount in months. The default is 36.

Configuring Central Management Server user access and privileges

Use this area to configure user access rights to the GFI LanGuard Central Management Server Console. Configured users will be able to access the console from any location using an internet browser. GFI LanGuard Central Management Server uses Active Directory to authenticate users.

GFI LanGuard Central Management Server offers the following roles:

To add a new user:

1. In the top navigation bar, click the settings icon.
2. Select Users.
3. Click the Add User icon.
   
4. Select from the following options:
   

   Option	Description
   Search	Click the Search icon to expand a search field where you can key in a user or group name to search for.
   User / User Group	Key in the name of an existing Active Directory User or Group of users. A list of existing users or groups is automatically displayed as you type. Select the desired name from the list.
   IT Manager	Check the checkbox to assign the role of IT Manager to the user. This role gives users both Site Admin and Auditor rights.
   Can register new sites	Select this option if you want the user to be able to register new sites with GFI LanGuard Central Management Server.
   Default role for new sites	Set the default role for this user for new sites that are added to GFI LanGuard Central Management Server.
   Apply this role for all sites	Select the role for the new user to apply to all existing sites.
   Set role for each site	Use the provided buttons if you want to manually set different roles for different sites. Use the drop-down list to select one of the following options: None, Auditor, Site Admin.

5. Click Save.

Managing connected GFI LanGuard sites

The Sites window lists all the GFI LanGuard instances that have been connected to the GFI LanGuard Central Management Server. The following details are listed:

Editing site details

You can edit details of sites that have been connected to the GFI LanGuard Central Management Server:

1. In the list of sites, click the edit icon next to the site to edit.
2. Select the Identity and Sync Information tab to edit the following details:
   

   Option	Description
   Name	The name of the site where a GFI LanGuard instance is located. You can replace this with a friendly name. This name will appear as alt text when hovering over markers on the home page.
   Location	The name of the country where a GFI LanGuard instance is located.
   Latitude / Longitude	Use the down and up arrows to manually set the latitude and longitude of the GFI LanGuard instance location.
   Description	A description of the site, for example, Main Office.
   Last Sync	This field contains the date and time of the last synchronization between the GFI LanGuard instance and the GFI LanGuard Central Management Server which cannot be edited.

3. Select the Authorized users tab to edit the following details:
   

   Option	Description
   Site admins	Site admins are granted access to the configuration area of GFI LanGuard Central Management Server. Click the Add icon to add new users or groups.
   Auditors	Auditors have access to reports and dashboard areas of the GFI LanGuard Central Management Server Console. Click the Add icon to add new users or groups. Users or groups configured in the Users area will be automatically added to these lists.

4. Select the License information tab to view additional information related to licensing usage and license expiry date.
5. Click Save.

Configuring HTTPS Certificate in Central Management Server

GFI LanGuard Central Management Server Console is accessed securely through HTTPS. Refer to the Configuring HTTPS Certificate in Central Management Server article for information on how to add the GFI LanGuard Central Management Console CA as a trusted Certificate Authority or replace the default certificate with your trusted certificate.

Email settings in Central Management Server

The Email settings page lets you configure alerting options. These are required when GFI LanGuard Central Management Server needs to send important administrative notifications.

1. Click Settings > Email.
2. In the SMTP Server Details area, key in the parameters described below:
   

   Option	Description
   From email address	The sender email address. GFI LanGuard Central Management Server will use this email account to send the required emails.
   SMTP Server	Key in the IP address of the server through which emails are routed.
   Port	Define the port number through which emails are routed. The default value is 25
   Authentication	Enable if the SMTP server requires a username and password to authenticate when sending administrative notifications. Enter a username and password in the appropriate fields.
   Use SSL	Select this option if you have an SSL (Secure Sockets Layer Protocol) encrypted connection to send the required emails.
   Send notifications by email	Enable to send important administrative notifications via email.

3. In the Email Recipients area, key in the following:
   

   Email Address	Emails sent by GFI LanGuard Central Management Server are received by the email addresses configured in this area. Key in the email address in the appropriate field and press the add icon. Add as many email addresses as required.
   Verify Email Settings	Click Verify Email Settings to verify that email settings are configured correctly.

4. Click Save.

Configuring Central Management Server Updates

The Product Updates area displays information about the currently installed GFI LanGuard Central Management Server instance version and build number as well as the history of installed updates. Product updates enable you to keep your GFI LanGuard Central Management Server installation up to date. When enabled, GFI LanGuard Central Management Server checks for new updates at specified intervals, downloads, and installs the updates.

During product updates, the GFI LanGuard Central Management Server services need to be stopped and restarted. This action causes disruption with remote GFI LanGuard instances. Operations can resume once the services are restarted.

To configure system updates:

1. Go to Settings > Updates.
2. Configure the following:
   

   Option	Description
   Install updates automatically	When enabled, GFI LanGuard Central Management Server automatically checks for new updates, downloads newly found packages, and installs them. Click Customize to specify a schedule for the updates.
   Update Now	Click to make the GFI LanGuard Central Management Server check for updates.
   Download from alternative version	Enable this option if you want GFI LanGuard Central Management Server to check in a particular location when looking for new product updates. Specify the URL location where to look for in the available field.
   Proxy Server	Enable if GFI LanGuard Central Management Server needs to connect to a specific Proxy Server to download updates. Provide the following details: Proxy Address - specify the IP address of the server from where GFI LanGuard Central Management Server will download the new updates. Port - Specify the port number used by GFI LanGuard Central Management Server to connect to the Proxy Server. The default is 8080. Authentication - if authentication is required, enable this option and provide the credentials of the target server.

3. Click Save.