User Manual
This full user manual provides detailed information on all aspects of Ekran System, including deploying, configuring, maintaining and using the whole system with all of its component parts.
Table of Contents
- Introduction
- System Requirements
- System Overview
- Getting Started & System Deployment
- Updating the System (Checklist & Best Practices)
- The Application Server and the Database
- Comparison of Database Types
- Comparison of Standard and High Availability Modes
- Installing the Remote PostgreSQL Database Server and Configuring Remote Access
- Installing/Uninstalling/Updating the Application Server
- Installing the Application Server
- Backing Up the Master Certificate
- Deleting the Master Certificate
- Importing the Master Certificate
- Reissuing the Ekran System Master Certificate
- Installing the Application Server in the Cloud
- Adding the Application Server Executable to Windows Firewall
- Using an External/Cloud-Based Application Server
- Updating the Application Server
- Uninstalling the Application Server
- Changing the Application Server Port for Client Connection
- Running the EkranServer Service under a User Account
- Adding Permissions for a Non-Admin User to Start EkranServer
- Enabling SWIFT Username Monitoring
- Enabling the Displaying of the Warning and Consent Banner
- The Server Tray Application
- Database Management
- Cleanup Parameters
- One-Time Cleanup
- Scheduled Cleanup
- Editing the Database Parameters
- Cleaning Up the Sessions of Deleted Clients
- Shrinking the MS SQL Database Transaction Log
- Autovacuuming the PostgreSQL Database
- Deleting Clients
- Moving the Server Database
- Validating Monitoring Data
- Deleting the PostgreSQL Database
- Isolating the Database from Clients
- The Management Tool
- Management Tool Installation Prerequisites (Checklist)
- Installing/Uninstalling/Updating the Management Tool
- Opening the Management Tool
- The Management Tool Interface
- Changing a User's Own Password while Logged In
- Management Tool Access Using Smart Cards
- Multi-Tenant Mode
- Application Server Configuration
- Settings Available for the Admin User of the Built-in Default Tenant (the Technician) and Other Users in Single-Tenant Mode
- Settings Available for the Tenant Admin in Multi-Tenant Mode
- Licensing
- User and User Group Management
- The Audit Log
- Windows Clients
- Monitoring Windows Clients
- Installing Windows Clients
- Windows Client Installation Prerequisites
- Installing Windows Clients Remotely Using the Management Tool
- Installing Windows Clients Locally
- Installing Windows Clients through Group Policy Using a .MSI File
- Installing Windows Clients Using Third Party Software
- Installing Windows Clients on Amazon WorkSpaces
- Installing Windows Clients Remotely Using PsExec
- Configuring an Ekran System Client Golden Image
- Cloning a Virtual Machine with the Client Installed on It
- Unassigning the License on Virtual Machine Shutdown
- Updating Windows Clients
- Reconnecting Windows Clients to Another Application Server
- Uninstalling Windows Clients
- Viewing Windows Clients
- Windows Client Configuration
- The Windows Client Description
- The Protected Mode Parameter
- The Update Client Automatically Parameter
- The Display Icon when Recording Parameter
- The Client Tray Icon Parameter
- The Jump Server Parameter
- The Detection of Disconnected Clients Parameter
- The Windows Event Log Integration Parameter
- The Auto-Cleanup Parameters
- The Client Log Level Parameter
- The Custom Path for the Client Installation Folder Parameter
- The Offline Cache Size Parameter
- The User Activity Recording Parameters
- The Keystroke Logging Parameter
- The Start Monitoring on Detection of Keyword Parameter
- The Keystroke Filtering Parameter
- The Clipboard Monitoring Parameter
- The Detect System Idle Event Parameter
- The Register Idle Event Parameter
- The File Monitoring Parameter
- The SWIFT Username Monitoring Parameter
- The Monitoring Log Parameter
- The URL Monitoring Parameter
- The Application Filtering Parameters
- The User Filtering Parameter
- The Monitoring Time Filtering Parameter
- The Remote Host IP Filtering Parameter
- The Secondary User Authentication Parameter
- The One-Time Password Parameter
- The Two-Factor Authentication Parameter
- The Additional Message on User Login Parameter
- The Require User’s Comment Parameter
- The Require Ticket Number Parameter
- The Bandwidth Usage Reduction Parameters
- The Audio Recording Parameter
- Editing the Windows Client Configuration
- Viewing the Windows Client Configuration
- Secondary User Authentication on Windows Clients
- Managing One-Time Passwords
- Informing Users that They are Being Monitored
- Integration with Ticketing Systems
- macOS Clients
- Monitoring macOS Clients
- Installing macOS Clients
- Updating macOS Clients
- Uninstalling macOS Clients
- Viewing macOS Clients
- macOS Client Configuration
- The macOS Client Description
- The Update Client Automatically Parameter
- The Detection of Disconnected Clients Parameter
- The Auto-Cleanup Parameters
- The Client Log Level Parameter
- The User Activity Recording Parameters
- The Clipboard Monitoring Parameter
- The Detect System Idle Event Parameter
- The Register Idle Event Parameter
- The File Monitoring Parameter
- The URL Monitoring Parameter
- Linux Clients
- Monitoring Linux Clients
- Installing Linux Clients
- Updating Linux Clients
- Uninstalling Linux Clients
- Viewing Linux Clients
- Linux Client Configuration
- The Linux Client Description
- The Update Client Automatically Parameter
- The Detection of Disconnected Clients Parameter
- The Auto-Cleanup Parameters
- The Client Log Level Parameter
- The User Activity Recording Parameters
- The Offline Cache Size Parameter
- The Command Output Limiting Parameter
- The Command Output Skipping Parameter
- The Function Call Skipping Parameter
- The User Input Monitoring Parameter
- The User Filtering Parameter
- The Two-Factor Authentication Parameter
- Secondary User Authentication on Linux Clients
- The Tray Notifications Application
- Password Management
- User Behavior Analysis
- Access Management
- Blocking Users
- Client Group Management
- Alerts
- Advanced Reports
- USB Monitoring & Blocking
- Health Monitoring
- Viewing Monitoring Results
- Dashboards
- Interactive Monitoring
- Forensic Export