NovaGuard

Applicable Scenario

In scenarios where the customer has deployed an AD domain server in the internal network to which endpoints are connected for unified management, administrators can enable LDAP synchronization to automatically synchronize specific OUs and users to NovaGuard for unified user management.

Configuration Guide

Go to System - System - LDAP Sync and configure parameters based on the configurations in the following figure.

1. Basics

Basics : Specify the IP address of the AD domain server, the authentication port, the administrator account username, the administrator account password, and the Base DN. The administrator account username must be in the following format: administrator@domain.com.

2. Organizational Sync

Organizational Sync : Specify OU paths and a group creation mode and keep other parameters at their defaults.

3. User Sync

User Sync : Map domain user properties to the NovaGuard manager and keep other parameters at their defaults, as shown in the following figure.

4. Group Sync

Group Sync : Endpoints are automatically grouped on the NovaGuard manager according to the structure in the AD domain. Automatic grouping is triggered after you log in to an endpoint with a domain account and trigger LDAP synchronization.

Trigger LDAP Sync

You can trigger LDAP synchronization manually or at a scheduled time.

1. Manual synchronization

To synchronize the LDAP information manually, go to Endpoints - Endpoint Groups and click More - LDAP Sync, as shown in the following figure.

2. Automatic synchronization

To synchronize LDAP information automatically, enable Auto Sync Setting, select Every day, Every week, or Every month, and set a specific time, as shown in the following figure. Then, the NovaGuard manager will automatically synchronize OU and user information from the LDAP server.

Effects

On the Endpoint Groups page of the NovaGuard manager, you can find the OUs synchronized from the LDAP server, as shown in the following figure.

The NovaGuard manager automatically groups endpoints with the NovaGuard agent installed to the corresponding OUs when you log in to the endpoints with domain accounts.

You can view LDAP synchronization details by going to System - Logs Operations Logs, as shown in the following figure.