For Google Workspace.
For Microsoft 365.
Question:
Are there any sample settings for HENNGE Access Control?
Answer:
In order for you to use our HENNGE One Access Control Service, it is necessary for you to decide which settings (restriction policies) to be allocated to what type of company employee.
The followings are the standard restriction policies at the time of introduction, the target employees, and the samples of allocation setup.
Please utilize it according to your using scene.
-Restriction policies
The restriction policies defines what kind of access to be permitted (or to be rejected) according to a specified condition.
4 samples are shown as the policies those which are applicable for the accesses in the predicted business scenes.
Please choose the ones which match your company business operation.
1.Enabling the Access from your company employee.
Restriction by the access source IP address.
Register the outbound gateway IP address of your company and permit the access via that IP address.
2.Enabling the access from smart phones.
Restriction using Secure Browser.
In order to avoid the risk caused by the loss of the phones, the Secure Browser use should be recommended.
3.Enabling the employee's Access using the PC outside the office.
Restriction by the access experience.
Determine if it is a terminal which has experienced access from the internal IP.
Once the access from the terminal is successful, the access from it should be enabled for a certain validity period. (Even outside the office, the seamless access should be enabled.)
4.Enabling the employee's access from his/her home PC
Restriction using OTP
If it cannot prove the access experience (such as home PC), OTP restriction will be applied.
・Each time issuance: request the system department for the issuance
・Self-issuance: issuance using the OTP generator
━━━━━━━━━━━━━━━━━━━━━━━━
-Setting sample for various types of employees
The followings are samples of restriction policies which are applicable for the various types of employees and their various types of work styles.
Firstly, please focus on the point [restrict the access] to sort out the employees into some groups. Then, apply the appropriate restriction policy to each group.
[old styled office worker] Management worker, Office clerk, In-house worker, Part time worker, etc.
Works only inside the office
Works only using the PC provided by the company
Has no smartphone provided by the company
=> Provided PC: 1.restricted by the IP address
[Active senior] Managerial worker
Uses the PC only inside the office.
Outside the office, perform the task only those which can be done by the simple action on the terminal such as replies to the mail and confirms the schedule by smartphone, checks the document, and the circulation approvals.
Occasionally uses the smartphone provided by the company and his/her own smartphone.
=> Provided PC: 1.restricted by the IP address
Smartphone: 2.restricted using Secure Browser
[PC mobiler] Sales representative,SE, etc.
Always carries the mobile PC provided by the company.
In the interval between visiting a customer and the other, works on the mobile PC.
Returns to the office one time a day or so.
Always carries the smartphone provided by the company.
=> Provided PC: 1.restricted by the IP address and the access experience
Smartphone: 2.restricted using Secure Browser
[Alternative worker] Playing manager,Employee takes nursing care of his/her children and elderly family
Occasionally does his/her work at home.
Takes the provided mobile PC back home to work on it or uses his/her own PC.
The smartphone is provided by the company for the business purpose use.
=> Provided PC: 1.restricted by the IP address and 3.the access experience
Home PC: 4.restricted by the OTP
Smartphone: 2.restricted using Secure Browser
[Remote worker] Employee who are on an overseas assignment, takes nursing care of his/her children and elderly family, on an outsourcing destination, part time executive
Seldom comes to the office.
Works on the PC provided by the company or home PC.
No smartphone provided by the company.
=> Home PC: 4.restricted by the OTP
-Others
・Number of Password creating letters; For password, how many letters are at least needed.
・For password, which kind of letter should be used including numerical ones, English ones, and signs? What combination is required?
・Password validity Period
・Account Lock
・Forcible change of the initial password
Please note that this is just a sample. It is also possible to make it more complicated.
If you have a specific idea, please contact support team.
The setting procedure will be shown.