Security Policy
TrackVia allows you to set password policies for your users. Since your enterprise data is critical to the success and viability of your business, we want to make it easier to protect by providing you with configurable password policy features and capabilities. These settings can be found in your "Account Settings" under the "Security Policy" tab.
Password Policy
The password policy section allows you to configure the character requirements of a password as well as the length of time until a password must be changed.
The minimum password length you set in the password policy is shown on every screen where a user creates or changes a password. Users see a warning before they submit a password that is too short. If a password that is too short is still submitted, the user sees a message that explains the rule. Outside FIPS environments, the lowest minimum password length you can set is 8 characters.
In FIPS (Federal Information Processing Standards) environments, the minimum password length can't be lower than 15 characters. New accounts start at 15. If an existing account's minimum password length was set lower than 15, passwords are still held to 15 characters.
In a FIPS environment, you can still edit the minimum password length in the password policy and choose a higher number, but you can't save a number lower than 15. The Security Policy screen tells you that 15 is the lowest allowed number. When you set a number higher than 15, every password screen shows and enforces that number.
IP Filtering Policy
This section allows you to specify a whitelist of IP addresses from which you can access your TrackVia account. Any user that attempts to access your account from a device not specified in the whitelist will not be allowed to log in. This includes mobile devices and API integrations. Be careful with this setting - if you enter an incorrect IP address, you will be logged out of your session and no one will be allowed back in!
IP Filtering and Sandboxes
If your account uses IP Filtering (My Account → Security Policy → Configure IP Filtering Policy), be aware that a Sandbox does not automatically stay in sync with your parent account's IP whitelist.
What this looks like: a user can reach the login screen and enter valid credentials, but is then redirected back to the login page instead of getting in. If IP Filtering is enabled, this happens whenever the IP address you're connecting from isn't in the whitelist for the account you're trying to reach.
Why this can happen specifically with a Sandbox: if your parent account's whitelist is updated after a sandbox is created, that new IP list doesn't carry over to the sandbox — there's no automatic syncing between a parent account and its sandboxes when the whitelist changes. So a user connecting from a newly-whitelisted IP can log into the parent account without issue, but get redirected back to the login page when they try to access the sandbox, because the sandbox is still working from its older, unsynced IP list. A sandbox's own IP whitelist also can't be edited directly once it's created.
How to fix it: at this time, there's no self-service way to re-sync a sandbox's IP whitelist with its parent account. Your options are:
- Delete and recreate the sandbox (it will pick up the parent account's current whitelist), or
- Contact TrackVia Support and ask for the parent and sandbox IP whitelists to be synced, if deleting the sandbox isn't an option.
Session Activity Settings
Controlling TrackVia Support Access to Your Account
Our Support teams love helping you understand and resolve issues in TrackVia, but some customers have strict policies related to account access. If you need to ensure that no internal TrackVia team members ever have access to your account without needing to deactivate individual support users, Super Admins can uncheck the "TrackVia Support Access" checkbox in the 'Security Policy' section of your account's settings:
Comments
0 comments
Please sign in to leave a comment.