What authentication can be utilized while integrating ProxySG/ASG, CAS, & Reporter

Products

• Management Center

Issue/Introduction

We provide clarity on the below.

• Whether the default admin username on Symantec CAS can be renamed.
• What specific credentials can be used to integrate Reporter with Management Center.
• What's the recommended authentication required to integrate Proxy with the MC. 

Environment

Release : 3.1.1.2

Resolution

For Symantec CAS, there is no documented means to rename or delete the default "admin" account on Symantec CAS. On Symantec CAS, you can create multiple local user accounts and assign appropriate privileges to restrict access to configuration of the appliance and analysis of data. Please see the Tech. doc. with the URL below, for reference.

https://techdocs.broadcom.com/us/en/symantec-security-software/web-and-network-security/content-analysis/3-1/admin_tasks_solution/solution_manage_admins/settings_users_local.html 

This way, you do not have to use the the default "admin" credentials to integrate CAS to MC. The account used for integration the CAS to the MC should have the "Administrator" role. For integration, we recommend to use the default "admin" account. See the sample connection parameter in the snippet below, as implemented in our internal lab environment.

For Symantec Reporter, Symantec recommends that you create a new non-administrator Reporter role before adding Reporter to Management Center. If you choose to add a Reporter using the default Admin role, you must specify the role as "_admin.” We recommend to integrate the Reporter to MC using the default "admin" account, in the manner specified. Please refer to the Tech. doc. with the URL below, for the step-by-step guidance. 

https://techdocs.broadcom.com/us/en/symantec-security-software/web-and-network-security/management-center/3-3/add_monitor_devices/add_device/Add-a-Reporter.html 

Also, please refer to the snippet below, for the sample implementation in our internal lab environment.

 

For the ProxySG, please note that you can add ProxySG/ASG to MC either using credential authentication or using Public Key. We recommend to add ProxySG/ASG using public key. For both methods, please refer to the Tech. docs. with the URLs below.

https://techdocs.broadcom.com/us/en/symantec-security-software/web-and-network-security/management-center/3-3/add_monitor_devices/add_device/Add-Device-Credential.html 

https://techdocs.broadcom.com/us/en/symantec-security-software/web-and-network-security/management-center/3-3/add_monitor_devices/add_device/Add-SG-Public-Key.html 

For reference, please refer to the snippet below, for the sample implementation within our internal lab environment.