• Restrict remote control of SNARE agent to certain hosts. This feature indicates whether to restrict web access to the Snare Agent to certain machines specified in IP Address allowed to remote control SNARE. This option is also configurable at the time of installation. Enabling this option will make the Snare Agent's web GUI and web APIs accessible from certain IPs only. When disabled, the Agent's web interface is accessible from any machine.  
  Note: if web access was not enabled during Agent installation, it can be turned on by enabling the correct registry key on the machine on which the Snare Agent is installed.
• IP Address allowed to remote control SNARE. Remote control actions may be limited to a given host. This host, entered as an IP address in this field, will only allow remote connections to be effected from the stated IP address. Note that access control based on source IP address is prone to spoofing, and should be considered as a security measure used in conjunction with other countermeasures. Multiple comma-separated IP addresses or FQDNs can be entered.

• Password to allow remote control of SNARE. Displays the state of the password e.g. Password is set. If the agent is not remotely configured, the password can be reset using the 'Reset password' button. This is the password required at login.

  The password must meet the following criteria: Between 10 and 128 characters in length. Not more than 2 identical characters in a row (e.g. 111 not allowed). And 3 out of the following 4 complexity rules:  At least 1 uppercase character (A - Z),  At least 1 lowercase character (a - z),  At least 1 digit (0 - 9),  At least 1 special character (e.g. punctuation).

  
  

• Max number of failed attempts allowed Indicates the number of failed login attempts to be allowed before the agent will be locked. Accepted number of failed login attempts is 3 to 6. Default value is 3.
• Lock timeout (minutes) after max failed attempts Indicates the lock duration in minutes if the agent is locked due to the maximum failed login attempts. Accepted duration (minutes) is 15 to 60. Default value is 15.

• Web Server Port. This field is used to specify the new port which the SnareMSSQL web interface will operate on (default 6163). Normally, a web server operates on port 80. If this is the case, then a user need only type the address into the browser to access the site. If however, a web server is operating on port (say) 6163, then the user needs to include the specific web port-number ie https://mysite.com:6163 to reach the web server.

  For clustered environments each Snare SQL Agent instance will install using a default sequential port number starting from 6163 and continue based on the number of instances installed. ie 6163, 6164, 6165 etc. As mentioned above these are configurable and can be changed to another unique port-number if required.

  
  

• Require at least TLS 1.3 for browser connections to Agent Website. When unchecked (default), Snare Agent supports TLS 1.2 and TLS 1.3 for web connections. When checked, TLS 1.2 is explicitly disabled; browsers connecting to the agent website must support at least TLS 1.3 for ssl connections.
• Snare Agent Manager IP. The IP address of SAM (or localhost may be used if on same machine).  The agent will communicate with SAM via this IP and try to connect.
• Snare Agent Manager Port. The port number of SAM machine the agent will try to connect using IP:Port combination.  Default is 6262.

• Snare Agent Manager Authentication Key. It is the secret key that the agent uses for authentication while making the connection with the SAM. The agent will not be able to continue connection with the SAM if this key is invalid. This key is generated by administrators on SAM.  On installation of the agent the default key is DEFAULT_AUTH_KEY__USER_TO_UPDATE, and this is also the default on SAM in Settings|General.
  
  

To save and set the changes to the above settings, and to ensure the registry has received the new configuration perform the following:

1. Click on Change Configuration to save any changes.
2. Click on the Apply Configuration & Restart Service menu item.