This topic applies to the page in XInsight for managed systems running QSM 4.2 or later, XEVO 3.2 or later, or KSM 1.1 or later.

The Security page provides settings for controlling system access, reviewing connection records, managing firewall rules and SSL certificates, scanning files for malware, and configuring authentication for self-encrypting drives.

Go to System > Security.

System	Available settings
QSM	Access Control, Connection List, Firewall, SSL Certification, Antivirus, SED Authentication
XEVO	Access Control, Connection List, Firewall, SSL Certification, SED Authentication
KSM	SSL Certification, SED Authentication

Access Control #

Access Control is available for QSM and XEVO systems only.

Access Control determines which IP addresses are permitted to access the system.

Set the Access Control Policy #

Click the edit icon in the Access Control section to open the Set Policy dialog. Select one of the following policies:

Allow all: Allows connections from all IP addresses. No address entries are required.

Deny from List: Allows connections from all IP addresses except those included in the deny list.

Allow List Only: Allows connections only from IP addresses included in the allow list.

For Deny from List or Allow List Only, select one of the following Set Type options:

Single: Enter a single IP address.

Range: Enter the start and end IP addresses to define a continuous address range.

Subnet Mask: Enter an IP address and subnet mask to define a network subnet.

Click Apply to save and apply the access control policy.

Caution: Before applying Allow List Only, make sure that the IP address of your current management client is included in the allow list. Otherwise, you may lose access to the system.

Connection List #

Connection List is available for QSM and XEVO systems only.

The Connection List displays client connections to the system, including the client IP address, connection type, and connection time.

Use the drop-down list to display all connections or filter the records by connection type. Select All to display all connection records, or select a connection type to filter the list.

Available filter options vary by system:

• QSM: WEB_UI, SSH, RESTFUL_API, CIFS, RSYNC, FTP, and WebDAV
• XEVO: WEB_UI, SSH, and RESTFUL_API

Firewall #

Firewall is available for QSM and XEVO systems only.

The Firewall page allows IT administrators to control access to individual system services and manage temporarily blocked IP addresses.

Configure Service Access #

Use the toggle next to a service to enable or disable firewall protection for that service.

Available services vary by system:

• QSM: CIFS, FTP, RESTFUL_API, RSYNC, SSH, WEB_UI, and WebDAV
• XEVO: RESTFUL_API, SSH, and WEB_UI

Add a Blocked IP Address #

Click the + icon under Blocked IP to open the Add Firewall Block IP dialog. Enter the IP address to block, select the applicable service under Type, and select the block duration under Set block time. Click Apply to add the IP address to the blocked list.

Remove a Blocked IP Address #

Click the − icon, select the IP address to remove from the blocked list, and confirm the action.

SSL Certification #

The SSL Certification page displays the certificates installed on the system and their current status.

Upload an SSL Certificate #

Click the + icon to open the Upload SSL Certification dialog. Select the required CRT, PEM, and certificate files, and then click Apply.

Ensure that the uploaded certificate and key files form a valid matching set. The new certificate may take a short time to apply.

Antivirus #

Antivirus is available for the QSM system only.

The Antivirus feature scans stored files for malware and provides controls for manual scans, quarantined files, scan schedules, virus signature updates, and exclusions.

Overview #

The Overview tab displays the antivirus running status and the number of scanned and infected files. It also provides information about the virus signature, last scan time, quarantined files, excluded files and folders, and scheduled tasks. Click Enable to activate the antivirus service.

Run a Manual Scan

Under Quick Start, select one of the following scan modes:

• Full Scan: Scans all supported files.
• Customize Scan: Scans selected files, folders or locations.

Click Start to begin the scan.

Quarantine #

The Quarantine tab lists quarantined files and the time each file was quarantined. Select a file and click Restore to return it to its original location, or click Delete to remove it permanently.

Schedule #

The Schedule tab displays scheduled antivirus tasks, including the task name, scan type, schedule type, and target path. Click Add to create a scheduled scan. Select an existing task and use Run, Edit or Delete to execute or manage it.

Antivirus Settings #

The Settings tab provides antivirus service, virus signature, scanning, and exclusion settings.

Before You Begin #

Before configuring the antivirus service, enable APP Data Storage and select a storage volume. If APP Data Storage is not configured, the antivirus settings are unavailable. For instructions, see APP Data Storage Settings.

Virus Signature Updating

Enable the Auto Update toggle to download virus signature updates automatically. The page displays the last update time and installed signature information. Click Update to check for and install an update manually.

Scanning Settings

Configure the following options:

• Processing Method: Specifies how infected files are handled:
  • Move to quarantine: Moves infected files to the quarantine area.
  • Remove: Permanently deletes infected files.
  • Do nothing: Reports infected files without modifying them.
• Max File Size: Specifies the maximum file size to scan.
• Scan Compressed Files: Includes supported compressed files in antivirus scans.

Warning: Selecting Remove may permanently delete infected files. Back up important data before using this processing method.

Antivirus Exception Settings

Use the Settings tab to exclude specific file types, files, or folders from antivirus scanning.

File Extension Exclusion

Select one or more file extensions that the antivirus scanner should skip. Use the search field to locate an extension.

File & Folder Exclusion

Click the + icon to open the Upload Path dialog. Select the file or folder path to exclude, and then click Apply. To remove an exclusion, select it from the list and click the − icon.

Note: Excluded files and folders are not scanned for malware. Add exclusions only when necessary.

SED Authentication #

SED Authentication protects supported self-encrypting drives (SEDs) by requiring an authentication password to unlock them.

Enable SED Authentication

Turn on the SED Authentication toggle. In the SED Authentication Settings dialog, set or update the authentication password, configure Auto Unlock as required, and click Apply.

Auto Unlock: Automatically unlocks authenticated SEDs when the system starts.

Warning: Store the SED authentication password securely. If it is lost, data stored on locked SEDs may become inaccessible.