Naviteer Program Access Protection
Naviteer uses a multi-pronged approach to securing our client's information.
HTTPS
Naviteer uses a Hypertext transfer protocol secure (HTTPS) is the secure version of HTTP, which is the primary protocol used to send data between a web browser and a website. HTTPS is encrypted in order to increase security of data transfer. This is particularly important when users transmit sensitive data, such as by logging into a bank account, email service, or health insurance provider.
To access the Naviteer login, the browser URL is https://login.naviteer.com. This is a secure connection that is protected by a valid certificate. A lock shown in the URL indicates the site is secure.
TSPlus
When a user accesses the Naviteer program they are required to login to the domain (Naviteer) by entering a user name and password. During this login, the user is accessing the Naviteer program through TS Plus Remote Desktop Access.
TSPlus uses a built-in HTTPS web server and SSH Server to connect any web browser securely with SSH tunneling and port forwarding. SSH is a protocol for securely exchanging data between two computers over an untrusted network. SSH protects the privacy and integrity of the transferred identities, data, and files. It runs in most computers and in practically every server. Secure Shell (SSH) is a cryptographic network protocol for operating network services securely over an unsecured network. For more in depth information on SSH visit: https://www.ssh.com/ssh/server
After a successful login the Naviteer program appears. At the bottom of program screen shows login information.
|
Server
|
Clients are assigned to one of several servers in the Naviteer domain.
|
|
Database
|
This is the name of the database that your login gives you access to. With each login access is allowed to only one database.
|
|
Release Date
|
When the program was last updated.
|
|
Version
|
Internal number to track upgrades to the software.
|
|
Idle Time
|
How long the program will accept not being used before it logs off the user. Typically it is set to 20 minutes.
|
Microsoft Windows Server and Active Directory
Naviteer is installed on a Windows 2019 or newer Microsoft Windows Server. The latest version of Windows Server has been specifically designed to bridge on-premises and the cloud, to help you benefit from cloud computing on your terms. Organizations are using Windows Server to extend their datacenters to the public cloud. They synchronize file servers, securely connect to cloud services, and perform backups. And now you can use Windows Admin Center to simplify everyday server management tasks for Windows Server running anywhere—on physical servers, virtual machines, on premises, and in Microsoft’s cloud offering.
Simply by installing Windows Server 2019, organizations gain protections, because the operating system enables robust security by default. It also provides a large suite of additional multi-layer
security features worth activating. Each organization needs to prioritize which security issues to address and balance tightening security and keeping systems simple to use. Even if you do nothing else, protect your domain controllers, to limit cybercriminal access to admin privileges that can take down your entire environment. Make sure domain controllers are running the latest version of the operating system. Naviteer has a protected domain controller by separating it from the access portal. This is taken from The Ultimate Guide to Windows Server 2019.
Active Directory (AD) is a Microsoft technology used to manage computers and other devices on a network. It is a primary feature of Windows Server, an operating system that runs both local and Internet-based servers.
Active Directory allows network administrators to create and manage domains, users, and objects within a network. For example, an admin can create a group of users and give them specific access privileges to certain directories on the server. As a network grows, Active Directory provides a way to organize a large number of users into logical groups and subgroups, while providing access control at each level. Taken from https://techterms.com/definition/active_directory
Naviteer utilizes Organizational Units, Groups and Users to structure our domain.
Microsoft SQL Server
The Naviteer program uses the Microsoft SQL (MS SQL) server to house the client databases. MS SQL database systems are designed as binary collections. MS SQL Server does not allow any process to access or manipulate its database files or binaries. It requires users to perform specific functions or manipulate files by running an instance. Hence, the hackers lack the option to access or manipulate data directly. This design rule makes MS SQL Server a secure option for database management.
Each client can only access databases that are assigned to their Group.
|