Specific Mass Target System Requirements

EPAS retrieves account profile information from remote servers to assess the password security of the respective system. The collection of systems EPAS connects to in order to retrieve the account profile information is available using the Targets menu.

For several target system types, mass target extraction is supported, allowing data retrieval for multiple targets in one single retrieval process, up to maximum of 3000 supported targets. The mass target definitions can be used as a single target in creating audit jobs, enabling aggregate information on multiple systems of the same type. The supported targets for the mass target definition are:

  • IBM System p - pSeries - RS/6000 AIX
  • Microsoft Windows Local Accounts
  • BSD Operating System
  • Linux Operating System
  • MacOS System Accounts
  • Sun Solaris - SunOS
  • Cisco Systems
  • MSSQL System Accounts
  • MySQL System Accounts
  • Oracle System Accounts
  • PostgreSQL System Accounts
  • Sybase ASE System Accounts
  • MongoDB System Accounts

In order to activate mass target data retrieval for the above mentioned target types, enable the Mass target definition option during the second step of the target definition process, followed by uploading a tab delimited file containing the mass target definitions, as detailed below:

System Type Format 3
Microsoft Windows Local Accounts IP_ADDRESS(TAB)SYSTEM_NAME(TAB)DOMAIN(TAB)
USER_NAME(TAB)PASSWORD
IBM System p - pSeries - RS/6000 AIX
BSD Operating System
Linux Operating System
MacOS System Accounts
Sun Solaris - SunOS
Cisco Systems1
IP_ADDRESS(TAB)PORT(TAB)SYSTEM_NAME
(TAB)USER_NAME(TAB)PASSWORD
MSSQL System Accounts2
MySQL System Accounts
Oracle System Accounts
PostgreSQL System Accounts
Sybase ASE System Accounts
MongoDB System Accounts
IP_ADDRESS(TAB)PORT(TAB)DB_NAME(TAB)SYSTEM_NAME(TAB)
USER_NAME(TAB)PASSWORD

  1. Cisco targets accept an optional column, tab-separated, after the PASSWORD field, which is the enable password. 

  2. MSSQL targets accept named instances as an input for the PORT value, in the following syntax: NAME:instance_name. Additionally, MSSQL targets accept domain logins as an input for the USER_NAME value, in the following syntax: USERNAME/DOMAIN

  3. The IP_ADDRESS field can contain one or more IP addresses, separated by comma (,), or a single hostname. In case multiple IP addresses are in a single line, the EPAS will attempt data retrieval on the first one (left to right), and in case of failure, will attempt to use the secondary, third, etc. IP addresses to retrieve.