Specifications

14-54
Cisco NAC Appliance - Clean Access Manager Configuration Guide
OL-28003-01
Chapter 14 Administering the CAM
Admin Users
If an admin user opens a browser, closes it, then opens a new browser, two entries will remain for a period
of time on the Active Session list. The Last Access time does not change for the ended session, and
eventually the entry will be removed by the Auto-logout feature.
Figure 14-39 Admin User Active Sessions
The Active Sessions page includes the following elements:
• Admin Name—The admin user name.
• IP Address—The IP address of the admin user’s machine.
• Group Name—The access privilege group of the admin user.
• Login Time—The start of the admin user session.
• Last Access—The last time the admin user clicked a link anywhere in the web admin console. Each
click resets the last access time.
• “Auto-Logout Interval for Inactive Admins”—This value is compared against the Login Time and
Last Access time for an active admin user session. If the difference between the current time and
last access time is greater than the auto-logout interval configured, the user is logged out. This value
must be in the range of 1 to 120 minutes, with an interval of 20 minutes set by default.
• “Minimum length for Admin Password”—Enter a value here to set minimum password length for
the Admin Password.
• Kick—Clicking this button logs out an active admin user and removes the session from the active
session list.
Administrator User Access Restrictions
The admin user can configure a set of IP addresses of the CAM and CAS web console/SSH that can be
blocked. The access is restricted to the list of IP addresses provided by the administrator.
Use the following procedure to enable the access restriction.
Step 1 Go to Administration > Admin Users > Access Restrictions.