ecatcher 4 - New Features

Transcription

1 ewon Application User Guide AUG 052 / Rev 1.0 ecatcher 4 - New Features P Contents This document gives an overview of the new features of ecatcher 4 and explains briefly how to use them.

2 Table of Contents i New features of ecatcher 4.0 I. LAN-Devices behind the ewon can now be created and displayed...3 II. Firewalling capabilities...4 III. Talk2M user access security: Password syntax policy...5 IV. Automatic ewon reconnection in case of communication loss...5 V. Faster switch from one ewon connection to another...6 VI. ecatcher now available in different languages...6 VII. Improved ewon list display...7 VIII. ewon properties page has been rearranged to contain more information...9 IX. User properties page has been rearranged to contain more information...10 X. Credit and connection reports now accessible directly from inside ecatcher...10 XI. Notification now possible for offline ewons...11 XII. Possibility to increase the number of concurrent connections instantly...12 XIII. Reservation of concurrent connections now possible...13 Devices & Firewalling 1 Adding LAN Devices Adding Gateways Selecting a Firewall Security Level Ultra Firewall level...17 Feature Matrix Free+ versus Pro Accounts Revision history...19 ecatcher 4 - New Features (Application User Guide) Page 2/19

3 New features of ecatcher 4.0 I. LAN-Devices behind the ewon can now be created and displayed If configured, the devices connected to the ewon are now represented inside the Active connection page. This allows to see directly which are the accessible devices behind the ewon. If the device has a Web browser a hyperlink allows to reach the device by a simple click. Note: The device list will also be available inside M2WEB. The LAN-Devices configuration is accessible via the button Configure LAN devices & firewall.. on the ewon Properties page. To add a new device use the Add LAN device... button. ecatcher 4 - New Features (Application User Guide) Page 3/19

4 The added device(s) appear in the ewon structure II. Firewalling capabilities With ecatcher 3 all devices connected to the ewon LAN were reachable by a connected Talk2M user. Now with ecatcher 4, it is possible to activate a firewall on the Talk2M connection to allow only remote access on specific LAN devices (IP addresses) and on specific ports. Closed padlock indicates that the remote access is firewalled. This means no other address and ports than the one listed will be accessible by the connected user. Different firewalling levels are configurable: For further information on firewalling, have a look at chapter Error: Reference source not found. ecatcher 4 - New Features (Application User Guide) Page 4/19

5 III. Talk2M user access security: Password syntax policy It's now possible to define stronger password policies for the user connections. The following aspects can be set: Minimum number of characters At least one letter, digit or special character Validity duration Use of different successive passwords The Edit Password Policy can be accessed inside the Account page under the advanced settings section. IV. Automatic ewon reconnection in case of communication loss If a user was connected on a specific ewon, ecatcher 4 will now try to reconnect automatically to the ewon if the connection got interrupted. A cancel button is available inside the active section to stop the auto-reconnection action. The first reconnection attempt is made after 10 seconds. If this attempt failed, the next attempt will be after 2 x 10 = 20 seconds and so on each new attempt being made after twice as much time than the previous one. The retries are visible in the active connection area of the ewon page. ecatcher 4 - New Features (Application User Guide) Page 5/19

6 V. Faster switch from one ewon connection to another With ecatcher 3 when a user inside the same Talk2M account switched from one ewon to another, it could take up to 40 seconds. Now with ecatcher 4, when a given ewon is disconnected, the PC remains online with the Talk2M server so that connecting to another ewon is much faster. Note: this fast switch applies only if the ewons are connected to the same VPN server. VI. ecatcher now available in different languages ecatcher is now available in different languages. Currently supported languages: English, French, German A drop down list at the upper right border of the ecatcher page allows to toggle between languages. An ecatcher restart is required to apply the changes. ecatcher 4 - New Features (Application User Guide) Page 6/19

7 VII. Improved ewon list display The user can now decide which information he wants to display inside the ewon list and also define the order of displayed columns. Columns to be displayed can now be selected. Right-click on any column header and select the Chose Columns... context menu. Available columns are for example: Connection Status Name Description Custom fields VPN IP LAN IP Serial number etc. The column width can be adjusted by clicking and holding the left mouse button while dragging. ecatcher 4 - New Features (Application User Guide) Page 7/19

8 The ewon list can also be filtered to show only the devices you want to see. To display the filter page, right click on the header of the column that contains the relevant criteria for your filter, and select the Filter Data context menu. ecatcher 4 - New Features (Application User Guide) Page 8/19

9 VIII. ewon properties page has been rearranged to contain more information The ewon properties page contains different sections. Most sections show a Modify... button to edit the properties of this section. The upper part shows general description of the ewon (Name, Comment, Custom fields, etc.) The middle part shows useful VPN information The lower part list the encoded LAN devices for this ewon. The show advanced settings option allows to display further information like linked ewon pools or the Access and Security settings for this ewon. ecatcher 4 - New Features (Application User Guide) Page 9/19

10 IX. User properties page has been rearranged to contain more information The user properties page contains different sections. Most sections show a Modify... button to edit the properties of this section. The upper part shows the general description of the user (Name, , Custom fields, etc.) The middle part shows useful VPN information The lower part lists the permission and User Groups of this user. The ewon to which the user has access are also listed. X. Credit and connection reports now accessible directly from inside ecatcher. No need anymore to connect to the my.talk2m.com web site to retrieve the connection reports. Credit info and reports are now accessible directly from inside the account menu. ecatcher 4 - New Features (Application User Guide) Page 10/19

11 These reports are accessible from the Credit and Payments page (button in Account Properties). The monthly reports can be downloaded as PDF, XML or CSV files. XI. Notification now possible for offline ewons On Pro accounts it is now possible to configure notification to send out a mail when an ewon is offline for an abnormal amount of time. The can be send to all members of a User group, to a special user or to a specified address. Different offline times can be selected: 3 hours, 6 hours, 1 day, etc. The offline notification are linked to ewon pools. A different offline notification can be configured for every ewon pool. ecatcher 4 - New Features (Application User Guide) Page 11/19

12 Inside the ewon list, the ewons for which an offline notification has been send out are displayed as follows: The Offline notification window can be accessed inside the Pools properties window under the advanced settings section. XII. Possibility to increase the number of concurrent connections instantly On Pro accounts, an account administrator can now request from inside ecatcher to increase the number of concurrent connections. The increased number of concurrent connection will be applied instantly. The Update your contract window can be accessed via the Change maximum number of connections button inside the Contract detail window. The contract detail window can be accessed through the account page. ecatcher 4 - New Features (Application User Guide) Page 12/19

13 XIII. Reservation of concurrent connections now possible. On Pro accounts using ecatcher 4 it is now possible to reserve one or several concurrent connections for a special user group. Explanation: On a Pro account with 5 concurrent connections this allows for example that endcustomers share 3 concurrent connections but that 2 concurrent connections will be reserved for the administrator group. The Reserved concurrent connections window can be accessed inside the Account page under the advanced settings section. ecatcher 4 - New Features (Application User Guide) Page 13/19

14 Devices & Firewalling The Device and Firewalling window allows to declare the devices which are connected to the ewon and to define the firewall settings applied to these devices. Furthermore it allows to specify the gateways which are accessible on the ewon. A gateway can either be an Ethernet to serial gateway of the ewon or an entry of the ewon Proxy table. When the highest firewall level is applied (Ultra), then it is also possible to limit the access to the ewon itself. You can for example define that the ewon can be accessed on its Web page but that the FTP access will be refused. The Device & Firewalling configuration window is accessed from the ewon Properties page using the Configure LAN devices & firewall.. button. 1 Adding LAN Devices Click on the Add LAN device... button (1) in the Devices & Firewalling page. The LAN Device page opens. In this page you give a name to your device (2), specify its IP address (3), give it a description (4), and select if all ports are open or only protocol-specific ports (5). Note: The description will be used inside the active window of ecatcher to identify the device. The visible in M2Web option (6) allows to specify whether or not the device will be displayed also inside the M2Web device list. ecatcher 4 - New Features (Application User Guide) Page 14/19

15 For Pro accounts, inside the Permissions area (7) you can define which user(s) is/are allowed to connect to this device. This allows to restrict the access to this device only for special user groups even if other user groups can connect to the ewon. 2 Adding Gateways Click on the Add gateway... button (1) in the Devices & Firewalling page. The Service popup opens. Under the Service (2) field select the gateway of the ewon you want to declare (Modbus, MPI, DF1, etc.) The used port will be displayed just under the Service field. Inside the Description (3) field enter the text that will be used inside the active window of ecatcher to identify the device. For Pro accounts, inside the Permissions area (4) you can define which user(s) is/are allowed to connect to this service. This allows to restrict the access to this service only for special user groups even if other user groups can connect to the ewon. Note: It is also possible to retrieve defined Gateways on the ewon itself using the Retrieve Gateway button. The ewon must be online to use this feature. ecatcher 4 - New Features (Application User Guide) Page 15/19

16 3 Selecting a Firewall Security Level Once the LAN-Devices and the Gateways have been declared, you can specify which Firewall Security Level you'll apply on this ewon: Standard: All devices on the LAN are accessible. No firewalling will be applied. High: The Firewall is applied on the LAN-Devices. Only the declared LAN devices are accessible on specified ports. The ewon itself and its gateways remains unfirewalled, so accessible by connected users. Enforced: The Firewall is applied on the LAN-Devices and on ewon gateways. Only the declared LAN devices and the declared gateways are accessible. The ewon itself remains unfirewalled, so accessible by connected users. Ultra: Same as Enforced, but the access to the ewon itself will also be firewalled. So only specified Services of the ewon (Http, SNMP, etc.) can be accessed. Selecting a firewall security level is done by moving the slider (1) as shown below: Remark: The padlocks of the Gateway branch (2) and the LAN device branch (3) reflects the current selected/applied firewall level. For example in Standard Firewall mode, all padlocks are open as no firewalling will be applied for the remote access. The padlock will also be displayed inside the Active connection window of ecatcher. Like this the user can directly see which are the firewall settings applied on this ewon. The following table resumes the Padlock display. ecatcher 4 - New Features (Application User Guide) Page 16/19

17 Security level Standard High Enforced (*) Ultra (*) Description Talk2M users connected to this ewon may connect all devices on the LAN, whether declared or not. Talk2M users connected to this ewon will be able to connect to the declared LAN device(s) only. Talk2M users connected to this ewon will be able to connect to the declared LAN device(s) & Gateway(s) only. Talk2M users connected to this ewon will be able to connect to the declared LAN device(s), Gateway(s) AND essential ewon services only. LAN Padlock Gateway Padlock (*) Services Padlock (*) Open Open NA Closed Open NA Closed Closed NA Closed Closed Closed (*) These security levels and padlocks are available only to Talk2M Pro accounts. 4 Ultra Firewall level The Ultra Firewall level has an additional padlock named Services that appears only when this level is set. To define the limitations at this level: Set the slider to Ultra (1), select the Services row in the device structure (2) and click on on the Properties button (3). The ewon Services popup opens (4). Configure the relevant services (protocol and port) which you want to allow on the ewon. Alternatively you can import the ewon services settings by clicking the Get values configured in ewon..., ecatcher 4 - New Features (Application User Guide) Page 17/19

18 Feature Matrix Free+ versus Pro Accounts The following table lists which features are available in Free+ accounts and which are only available in Pro accounts. # Feature Free+ Pro I Creation & display of LAN-Devices Yes Yes II Firewalling LAN-Device-level Yes Yes II Firewalling Gateway-level No Yes II Firewalling Service-level No Yes II Firewalling capabilities: Device-level user access control No Yes III Talk2M user access security: Password syntax policy (*) Yes (*) Yes IV Automatic ewon reconnection Yes Yes V Faster switch from one connected ewon to another Yes Yes VI Multiple language interface Yes Yes VII Improved ewon-list display Yes Yes VIII ewon Properties rearrangement Yes Yes IX User Properties rearrangement Yes Yes X Credit & connection reports available from ecatcher Yes Yes XI ewon offline notification No Yes XII Increase concurrent connections from ecatcher No Yes XIII Reservation of concurrent connections No Yes (*) limited to Standard and High in Free+ while fully configurable in Pro. ecatcher 4 - New Features (Application User Guide) Page 18/19

19 Revision history Revision Level Date Description /09/2013 Initial version i Document build number: 81 Note concerning the warranty and the rights of ownership: The information contained in this document is subject to modification without notice. The vendor and the authors of this manual are not liable for the errors it may contain, nor for their eventual consequences. No liability or warranty, explicit or implicit, is made concerning quality, the accuracy and the correctness of the information contained in this document. In no case the manufacturer's responsibility could be called for direct, indirect, accidental or other damage occurring from any defect of the product or errors coming from this document. The product names are mentioned in this manual for information purposes only. The trade marks and the product names or marks contained in this document are the property of their respective owners. This document contains materials protected by the International Copyright Laws. All reproduction rights are reserved. No part of this handbook can be reproduced, transmitted or copied in any way without written consent from the manufacturer and/or the authors of this handbook ewon sa, Member of ACT'L Group. ecatcher 4 - New Features (Application User Guide) Page 19/19