Limit admin access to webconsole from specific host/ip

Question

Hi All

Our Solarwinds system monitors an environment that gets audited and we need to restrict Admin access to the webconsole.

Does anybody know of a way to only allow admin access to the webconsole if user is logged into a specific host ??

Thanks

KMSigma.SWI · Answer

You can always create "ademin-level" accounts for people who need it and then put a horrendous password on the actual "admin" account and tell people to use their own assigned admin account.  But, no, there isn't an in-product way to block the admin account from a specific workstation or set of workstations.

fraser-sky · Answer

thanks for that, was hoping it would be possible but seems we wont be limiting admin connections

KMSigma.SWI · Answer

To be fair - neither way is simpler.  I was just trying to understand the ask.  If you want to whole-heartedly prevent it, you'd need some type of Web Application Firewall (or something similar) between everyone and the SolarWinds Server.  That's wholly outside the scope of the SolarWinds Product.

You could setup an alert based around the audit log to let you know when someone logs in with an admin-level account from any computer except the designated computer.

I, personally, would never use a domain admin account to log into anything except the domain controllers - and only then when there isn't an alternate account available.