This chapter explains the security features of Oracle Communications Session Monitor.
Session Monitor allows administrators to create end-user accounts for users to perform their day-to-day tasks. Secure user access by doing the following:
Create a temporary password for the user account and require that the user change the password. It is possible to set the temporary password to expire and force a user to change the password.
Set the user permissions to allow only the tasks the user can perform.
Oracle recommends enforcing strict passwords policy by enabling the features Require complex passwords and Regularly expire passwords.
Refer to Operations Monitor User's Guide and Session Monitor Mediation Engine Connector User's Guide to enable these features.
Authentication is the process of verifying a user's identity and determining whether the user has access to a system using credentials such as user name and password.
Session Monitor supports RADIUS authentication. When you enable RADIUS authentication, Session Monitor performs RADIUS authentication against a RADIUS server each time a user logs in.
When you configure RADIUS authentication, you must specify a shared secret that is shared by Session Monitor and the RADIUS server. The shared secret is used to validate that the RADIUS messages are sent between a RADIUS client and server that share the same secret.
See Operations Monitor User's Guide for more information about RADIUS authentication.
For all HTTPS connections (ME-MEC, ME-FDP, ME-ISR, ME-Probe) it is ensured that a proper SSL certificate validation done.
There is also an option on Trusted Certificates page, if hostname should be validated.
Note:
On the Trusted Certificate page, enable the Skip hostname validation for HTTPS connection checkbox when uploading the certificates that does not contain valid hostnames.