Optional Components - Web Interface |
|
|
SecurityAll access to the web-based interface is controlled by means of credentials, and both Windows user authentication and ServerAssist passwords are supported. It is recommended that wherever possible, ServerAssist is accessed using a secure protocol such as the Secure Socket Layer, to ensure that sensitive information is transmitted over the network in plain text.If incorrect credentials are entered, ServerAssist will not accept any logons for one second. This is to prevent a malicious user using a scripting tool to try a large number of passwords in a short space of time in an attempt to crack the ServerAssist security by brute force. Note that ServerAssist web-based interface will never lock out, regardless of how many invalid logon attempts are processed. This is to further prevent a malicious user launching a "denial of service" attack by repeatedly logging on to ServerAssist with a invalid credentials, locking out the application from valid users. CustomisationThe web-based interface is implemented as a number of static HTML pages, ASP pages and cascading style sheets, using the ServerAssist objects to provide all functionality. It is entirely possible to change the look and feel of the interface to suit any particular requirement, either for integration as part of a larger system, or to suit a certain set of corporate standards. The source code is not obfuscated, and the object model documentation can be found in the resource kit. |