A3 Online Help

Menu path: Configuration > System Configuration > Main Configuration > Advanced.

Advanced configuration is an option under Main Configuration in System Configuration. It is used for a number of options:


Topic	Usage	Example
Language of communications	The language used for communications with the A3 administrator.	en_US
API inactivity timeout	The inactivity timeout of the API token. A change of this value requires a restart of the api-frontend service in Status > Services.
API token max expiration	The maximum amount of time an API token can be valid. A change of this value requires a restart of the api-frontend service in Status > Services.
CSP Headers for Administrative Interface	(Experimental setting). If enabled, A3 will enforce Content-Security-Policy (CSP) HTTP response headers in the administrative interface.
CSP Headers for Captive portal	(Experimental setting). If enabled, A3 will enforce CSP (Content-Security-Policy) HTTP response headers in the captive portal.
SSO on Access Reevaluation	If enabled, single-sign-on (SSO) is triggered on access reevaluation. Refer to Integration Overview > Firewall SSO for details.
Scan on Accounting	If enabled, perform a scan on accounting. See Compliance Overview > Scans for details.
SSO on Accounting	If enabled, single-sign-on (SSO) is triggered on accounting. Refer to Integration Overview > Firewall SSO for details.
SSO on DHCP	If enabled, single-sign-on (SSO) is triggered on DHCP. Refer to Integration Overview > Firewall SSO for details.
Passwords Hashing Method	The algorithm used to hash passwords in the database. Only newly created or reset passwords will use the hashing method. One of bcrypt, none, or ntlm.	bcrypt
Hashing Cost	The cost factor to apply to the password hashing if applicable. Only bcrypt uses this setting.	8
Disable Pf Domain Auth	If set, A3 will not perform any Active Domain configuration.
NTLM Redis cache	if set, a Redis-driven cache for NTLM authentication will be used. NT hash synchronization between the A3 server and the Active Directory. See the note below on restarting services.
LDAP Attributes	This setting provides the list of LDAP attributes offered in the Active Directory authentication source. Any LDAP attributes not in the Built-in LDAP Attributes list can be added into the text field. Commas separate multiple items.
RADIUS Attributes	This setting provides the list of RADIUS attributes offered in the RADIUS authentication source. Any RADIUS attributes not in the Built-in RADIUS Attributes list can be added into the text field. Commas separate multiple items.
PFFilter Processes	The number of processes in the pffilter service to start.	4
PfPerl API Processes	The number of pfperl-api processes to start.	8
PfPerl API Timeout	The API request timeout, in seconds.	600
Update the iplog Using Accounting	If enabled, accounting information is used to update the iplog to include user information and IP address.
Close Location Log on Accounting-Stop	If set, the location log for a client is closed when an accounting-stop message is received for the client.
Stats Timing Level	(Advanced setting) The amount of statistics to maintain, with 0 as the lowest amount and 10 as the highest amount. Be careful when changing this setting; higher settings can result in vast amounts of data and system slow-down.	5
SMS Source for Sending "User Create" Messages	The email sender to use when sending an SMS message during user creation.
Multihost	If enabled, all active devices from the same switch port will be managed.
RADIUS machine auth with username	If set, the RADIUS username will be used instead of the TLS certificate common name when performing machine authentication.
VLAN Pool Technique	The algorithm used to calculate the VLAN in a VLAN pool. One of username_hash or round_robin.	username_hash
Disable OS AD join check	If enabled, the operating system domain join operation verification will be skipped.