Question
We are planning to implement Access Control, but we are unsure what configurations are available.
We would like to know some configuration examples.
Answer
To use Access Control, you need to configure which User can access from which environments.
Below are examples of standard control policies at the time of implementation, the target employees, and how they might be assigned.
Please use these as a reference while comparing them with your own company's security policies.
Control Policies
Control policies define what kind of access is granted (or denied) under specific conditions.
Below are four examples of policies designed for business scenarios. Please select the one that best fits your organization's operations.
-
Access allowed from the office
Control based on the source IP address
Register the IP address of your company's internet gateway, and allow access from that address. -
Access allowed from a Smartphone
Control using Secure Browsers
Considering the risk of loss, allow usage via Secure Browsers. -
Access allowed from a PC outside the office (e.g., during business trips)
Control using Device Certificates (Tenant Certificates)
Allow access from any Device (PC or Smartphone) that has the certificate installed. -
Access allowed from a home PC
Control using a One-Time Password (OTP)
Allow access from a home PC if an OTP is entered.
・Issued on demand: Request issuance from the System department
・Self-issued: Issued using the OTP Generator
※Secure Browsers primarily support the use of email, calendar, and contacts in Microsoft 365 and Google Workspace.
Cloud services other than those listed above may result in unintended behavior.
For details, please refer to the following Help Center article.
HENNGE One System Requirements
Examples of Policy Configurations for Different Types of Employees
Below are examples of various work styles and the "control policies" that fit each of them.
First, focus on the concept of "applying access control" and group your employees accordingly.
After that, simply assign a control policy to each group.
-
Old-style office workers: administrative departments, clerical staff, in-office staff, part-time employees, etc.
Work only in the office.
Use only company-issued PCs for work.
Not provided with a Smartphone.Company-issued PC: Controlled by 1. IP address
-
Active seniors: management staff
Use a PC only in the office.
When out of the office, perform only simple tasks on a Smartphone, such as replying to emails, checking schedules, reviewing documents, and approving requests.
May use either a company-issued Smartphone or a personal Smartphone.Company-issued PC: Controlled by 1. IP address
Smartphone: Uses 2. Secure Browsers -
PC mobile workers: sales staff, engineers (SE), etc.
Carry a company-issued mobile PC.
Work at cafes or on trains between client visits.
Return to the office about once a day.
Carry a company-issued Smartphone.Company-issued PC: Controlled by 1. IP address and 3. Certificate
Smartphone: Uses 2. Secure Browsers -
Alternative workers: playing managers, employees raising children or providing family care
Sometimes work from home.
Bring home a company-issued mobile PC or use a home PC.
Provided with a company Smartphone for contact purposes.Company-issued PC: Controlled by 1. IP address and 3. Certificate
Home PC: Controlled by 4. OTP
Smartphone: Uses 2. Secure Browsers -
Remote workers: employees on overseas assignment, employees raising children or providing family care, outsourced staff, part-time executives
Generally do not come to the office and work from either a company-issued PC or a home PC.
Not provided with a Smartphone by the company.Company-issued/Home PC: Controlled by 4. OTP
Other Considerations
- Password length: minimum number of required characters
- Password character types: which of numbers, letters, and symbols to use, and whether combinations are required
- Password expiration days
- Whether account lockout is enabled
- Force password change for Initial password
Please note that this is just one example, and more complex configurations are also possible.
If you have a specific configuration in mind, please contact HENNGE Technical Support.
We will guide you through the configuration process.
Translation Disclaimer
This article has been automatically translated from the original Japanese version for your convenience.
While we strive to ensure accuracy, we cannot guarantee its reliability or completeness.
In the event of any discrepancies or questions regarding the content, the official Japanese version shall prevail.