Archive for SilverSHielD KB

SilverSHielD License Types

The table below shows an overview of the license types, and related capabilities, for SilverSHielD as of version 6.0. Read more

Using the new User class in SilverSHielD v6.0

SilverSHielD v6.0 drops the old “User” object and introduces the brand new TSilverSHielDUser class, from which you can instantiate as many “user objects” and you need at run-time.

Here’s a short example that shows how to clone a user profile from within a script run by SilverSHielD’s event-handling subsystem:

Read more

Using the catch-all (*) virtual user to relay authentication to an Active Directory

SilverSHielD v6.0 introduces significant enhancements to user management, especially with regards to its support for Active Directory.

It is possible to authenticate all your AD users in SilverSHielD by creating a special user profile and using * (star, or asterisk) as a username; that user must be allowed to perform password authentication, and the “use Windows/AD account auth” option must be enabled. See the image below for a visual example. Read more

Configuring SilverSHielD to backup your Cisco UC

By default Cisco Unified Communication Manager (CUCM) negotiates SFTP protocol version 4 (four) upon connecting to SilverSHielD; however, the use of such protocol version may lead to CUCM being unable to handle the response to the GetAttributes command and eventually the backup may fail.

In order to perform a full and clean backup, the best option is to force CUCM to use the SFTPv3 protocol. This can be done by configuring the proper option in SilverSHielD as shown in the image here below. Read more

How to make SilverSHielD PCI-compliant

Some of our customers operating in specific verticals (especially in the financial sector) need their SSH/SFTP to be PCI compliant.

With SilverSHielD this is just a matter of how you configure it.

In fact, the PCI compliance test performs checks to identify whether or not certain “weak” encryption algorithms are supported. If they are, the test fails.

Therefore you need to disable such weak algorithms, and to do so you have to use the Expert Settings panel. Read more