3 Implementing Session Monitor Security

This chapter explains the security features of Oracle Communications Session Monitor.

Setting Up User Accounts

Session Monitor allows administrators to create end-user accounts for users to perform their day-to-day tasks. Secure user access by doing the following:

Create a temporary password for the user account and require that the user change the password. It is possible to set the temporary password to expire and force a user to change the password.
Set the user permissions to allow only the tasks the user can perform.

Oracle recommends enforcing strict passwords policy by enabling the features Require complex passwords and Regularly expire passwords.

Refer to Operations Monitor User's Guide and Session Monitor Mediation Engine Connector User's Guide to enable these features.

Configuring and Using Authentication

Authentication is the process of verifying a user's identity and determining whether the user has access to a system using credentials such as user name and password.

Session Monitor supports RADIUS authentication. When you enable RADIUS authentication, Session Monitor performs RADIUS authentication against a RADIUS server each time a user logs in.

When you configure RADIUS authentication, you must specify a shared secret that is shared by Session Monitor and the RADIUS server. The shared secret is used to validate that the RADIUS messages are sent between a RADIUS client and server that share the same secret.

See Operations Monitor User's Guide for more information about RADIUS authentication.