Yarngate User Guide

Starting Sessions

1. Login to Yarngate

2. Click +Prepare session(s)

   Open

   

3. Add the systems that you would like access to and click +Prepare session

   Open

   

4. Enter the required details for the session including password

5. Review the sessions created

6. Session details

7. Session can then be closed

Starting SSH Session

1. Click SSH Session and create session

2. Select the system

3. Access is granted

Entitlement review

This provides a view of all systems that the user has access to

Off-boarding

Offboarding provides a way to quickly remove all access for a user

1. Create offboard task

2. Search for user and add sessions

3. Start off-board request

Yarn_gate Cache

yarngate makes use of a local cache of target node details that is updated via a reoccurring schedule, which can be used to speed up reporting and allow a consolidated view of all tagets.

Policies

• Account Age Policy

  • This policy is used to age out admin accounts that are discovered on the target system from the local cache used for reporting.

  • As yarngate provisions admin accounts on demand, there could be accounts showing as active/inactive depending on each time access is requested.

• Audit Config Policy

  • This policy is used with the Node Cache to validate Audit config has been enabled on the nodes. The default values are as follows

• Node Age Policy

  • This policy is used to age out nodes that are discovered on the target system from the local cache used for reporting. Nodes may go inactive if under maintenance, network connectivity issues or how often the cache is updated.

Caches

• Admin Users

• Nodes

• Robot accounts

• Subnet Group

• Subnet List

Reporting

Admin users

Create an Admin Users Report

• Report interface selector(s)

  • Customer

  • Cluster

  • Entitlement group

  • Interface

Audit Log

Create an Audit Log Report

• Select Elastic Search Interface and Index database

  • this is usually set to _all

• Report interface selector(s)

  • Customer

  • Cluster

  • Entitlement group

  • Interface

  • manually add node(s)

    • Show all available nodes will provide a list of unique NodeIDs from the database that can be copied in the target node field

Configure Report objectives

• Enter in username(s) or select an App profile to populate the user prefix.

• Configuration changes Toggle provides a summary of changes made to the system(s)

• Access Control Group is used to query enduser or applicationuser that has been manually added to the default cucm admin group via ccmadmin interface

• Field Names - Depending on the database, subfields may need to be specified to prevent wrong tokenisation field data

Audit Syslog Activity

A simple report that shows number of syslog events for a node for the last 3 days queried from elastic search

New Sessions

Provide a list of all sessions created within yarngate and current status

Robot Accounts

Report that list logins from robot accounts defined and compared to expected subnets for the robot accounts

System Access Snapshot

Create System Access Snapshot

• Report type

  • Local yarngate, Queries the Yarngate database only

  • Local Yarngate+remote System, Queries the remote system for current configured information (WIP)

• Filters

  • Username

  • App Profile

  • Customer

  • Cluster

  • Interfaces

  • Time Range

System Audit Check

Provides a report to verify Audit settings have been enabled on Target Systems where supported.

Supported Nodes will have a Pass/Fail if the Audit policy has been applied and/or there is syslog activity detected for the last 3 days.

The audit Policies can be configured for syslog destination(s), Syslog Level, and correct filter(s)