[ES] Abnormal use of remote operation and maintenance function without remote operation and maintenance authorization
Problem Description
After deploying the ES central endpoint, installing the agent, and testing the "Response Center" – "Remote Operations" function, it was found to be abnormal and unable to select the corresponding terminal.
Alarm Information
280435e4cbf0317ee0.png (105.3 KB)
Process –
- Log in to the web interface of the central terminal, and confirm that the corresponding installed terminal is online in "Terminal Management" – "Terminal Group Management".
868165e4cbf5b73e17.png (218.95 KB)
- In [System Management] – [Authorization Management], check the authorization of the corresponding terminal to confirm that remote operation and maintenance authorization has not been enabled.
550115e4cbfaf02477.png (133.46 KB)
Root Cause
Remote operation and maintenance authorization has not been opened.
Solution
Enable remote operation and maintenance authorization.
Suggestions and Summary
ES center-side authorization is divided into three categories: intelligent defense, intelligent control, and intelligent response. Each category corresponds to certain functions. If you need to use the corresponding functions, you must first activate the corresponding authorization.
Original Link
https://support.sangfor.com.cn/cases/list?product_id=16&type=1&category_id=2493&isOpen=true