How to Configure the Security Policy

Security Policy

TrackVia allows you to set password policies for your users. Since your enterprise data is critical to the success and viability of your business, we want to make it easier to protect by providing you with configurable password policy features and capabilities.  These settings can be found in your "Account Settings" under the "Security Policy" tab. 
 

Password Policy

The password policy section allows you to configure the character requirements of a password as well as the length of time until a password must be changed. 

IP Filtering Policy

This section allows you to specify a whitelist of IP addresses from which you can access your TrackVia account.  Any user that attempts to access your account from a device not specified in the whitelist will not be allowed to log in. This includes mobile devices and API integrations.  Be careful with this setting - if you enter an incorrect IP address, you will be logged out of your session and no one will be allowed back in!

IP Filtering and Sandboxes

If your account uses IP Filtering (My Account → Security Policy → Configure IP Filtering Policy), be aware that a Sandbox does not automatically stay in sync with your parent account's IP whitelist.

What this looks like: a user can reach the login screen and enter valid credentials, but is then redirected back to the login page instead of getting in. If IP Filtering is enabled, this happens whenever the IP address you're connecting from isn't in the whitelist for the account you're trying to reach.

Why this can happen specifically with a Sandbox: if your parent account's whitelist is updated after a sandbox is created, that new IP list doesn't carry over to the sandbox — there's no automatic syncing between a parent account and its sandboxes when the whitelist changes. So a user connecting from a newly-whitelisted IP can log into the parent account without issue, but get redirected back to the login page when they try to access the sandbox, because the sandbox is still working from its older, unsynced IP list. A sandbox's own IP whitelist also can't be edited directly once it's created.

How to fix it: at this time, there's no self-service way to re-sync a sandbox's IP whitelist with its parent account. Your options are:

• Delete and recreate the sandbox (it will pick up the parent account's current whitelist), or
• Contact TrackVia Support and ask for the parent and sandbox IP whitelists to be synced, if deleting the sandbox isn't an option.
  Session Activity Settings

Controlling TrackVia Support Access to Your Account

Our Support teams love helping you understand and resolve issues in TrackVia, but some customers have strict policies related to account access. If you need to ensure that no internal TrackVia team members ever have access to your account without needing to deactivate individual support users, Super Admins can uncheck the "TrackVia Support Access" checkbox in the 'Security Policy' section of your account's settings: