LevelBlue Knowledge Base » Knowledgebase » Legacy Products » Security Reporter

Enabling SSH Password Authentication (Opening the Shell)

Andrew Davies — Tue, 13 Dec 2016 15:48:33 GMT

This article applies to:

Web Filter

Question:

How do I enable SSH password authentication for connection to a WebFilter server?

Procedure:

NOTE: In order to complete the following procedure, you must contact Trustwave Support and open a case to obtain the password needed in step 5.

PART I – Shut Down and Connect a Keyboard and Monitor

Bring the system down: Navigate to System > Control and click ShutDown
Click the ShutDown button to power off the system.
Connect a monitor to the VGA port and the keyboard to a USB or PS/2 port on the back of the system:

PART II – Single User Mode

Power up the system by pressing and holding the green check mark key (located on the LCD panel on the front of the chassis) for three seconds.
On the GNU GRUB screen press p to bring up the password dialog box, and enter in the password.

NOTE: Please contact Trustwave Support and open a case to obtain the password.
Press e to edit the entry.
Use the up arrow and down arrow keys to select the line that starts with ‘kernel’ and press e to edit the line.
At the end of this line, press the spacebar to put in a space and type the word single and then press enter

You should now be back to the previous screen. Press b to boot into single-user mode.

PART III – Enable SSH Password Authentication

At the prompt, type the command nano /etc/ssh/sshd_config
Use the arrow keys to find the line that says PermitRootLogin*, and change it to yes

*Note: this entry does not exist on all systems. If it is not present, skip to the next step.
Use the arrow keys to find the line that says PasswordAuthentication, and change it to yes
To save, press Ctrl+x, then press y, and hit enter
Restart sshd by running the command /etc/init.d/sshd restart
You will see “Starting sshd” set to OK.
Press Ctrl+d to boot the system back up into multiuser mode.

It will run through all of its checks, and bring you back to your logon screen.

Part IV - Test the Connection

Open a terminal window or start a PuTTY session to verify that SSH is enabled from a device on the same network (not the filter). You can download PuTTY from http://www.putty.org/
Enter SSH [Filter IP] (for example, SSH 10.10.10.11 ). When prompted to continue connecting, type yes.
Enter any user name. If you are prompted for a password, then SSH has been successfully enabled.
Repeat steps 1-4 to remove the monitor and keyboard, if necessary.

Web Browser Issues Affecting SR 3.5

Charles — Mon, 12 Dec 2016 11:03:56 GMT

This article applies to:

Security Reporter 3.5
Mozilla Firefox

Symptoms:

After upgrading to SR 3.5, you see an old version of some pages, even after requesting a forced refresh.
The SR landing page appears as a blank page (all white).

Resolution:

To resolve the first issue, clear the local cache.

In Firefox, navigate to Options > Advanced. Under Cached Web Content, click Clear Now.

To resolve the second issue, simply click within the page and the SR login page will display.

Additional steps to upgrade Virtual SR to version 3.5

Charles — Mon, 12 Dec 2016 11:01:50 GMT

This article applies to:

Security Reporter virtual instances
Upgrade to version 3.5

Question:

What additional steps are needed to upgrade a virtual SR to version 3.5?

Procedure:

To upgrade a virtual SR, it is necessary to provide a local storage location that can be used by the upgrade process to copy an ISO image.

You must plug in a USB drive to the VMware ESXi host, which will be used as a temporary local storage location for the SR 3.5 upgrade. The SR VM will connect to the USB drive plugged into the ESXi host through a virtual USB Controller and USB Device configured on the VM.

The steps below cover the configuration of a USB Controller and a USB Device on the SR VM:

Attach a USB drive to the ESXi host. The USB drive must provide at least 2GB of storage.
Launch the vSphere Client/administration interface, choose the SR VM, and load its settings. Under the Hardware tab, check whether you have USB Controller and USB Device included in the list of devices.
- If you have both USB Controller and USB Device listed, go to Step 6.
- If you only have USB Controller listed but not USB Device (as in the screenshot below), go to Step 5.
Click Add.
Add a USB Controller (EHCI & UHCI) as shown in the following screenshots.

Click images to expand if required.
Add a USB Device as shown in the following screenshots. The name of the device will depend on the physical device you have attached.
From a client workstation, log into the SR administration interface. Go to Administration > System Configuration.
- For version 3.3.x, select Shut Down from the Server pull-down menu. Select Restart under Hardware and then click Apply to restart the SR VM. Note that this will interrupt all data processing and report generation.
- For version 3.4.x, select System from the Restart menu and then click Yes to restart the SR VM. Note that this will interrupt all data processing and report generation. Also note that the restart will attempt a graceful database shutdown and could take several hours to complete.
Once you have restarted the SR, you can proceed to upgrade as for a hardware system by logging into the SR administration interface and navigating to the Software Update screen. You must leave the USB drive plugged into the ESXi host since it will be used by the upgrade process.
When the SR 3.5 upgrade is successfully completed, you would be able to remove the USB drive from the ESXi host.

Enabling Flash for the SR or WFR Web Interface in Newer Browsers

Charles — Tue, 15 Nov 2016 12:46:17 GMT

This article applies to:

Security Reporter (all versions)
Web Filtering and Reporting Suite (WFR) (all versions)
Safari 10 and above
Google Chrome 55 and above

Question:

Why is my browser requesting permission to run Flash for the SR or WFR user interface?

Reply:

Google (Chrome 55) and Apple (Safari 10) have changed how their browsers handle the Adobe Flash Player plugin. The browsers will now ask the user for permission to run Flash for each website that requires it. In the past, Flash ran automatically when a website required it.
Apple made this change with the release of Sierra operating system on Sept. 20, 2016. Apple also released an update to Safari on older operating systems. Google has announced plans to include this change in Chrome 55, which Google has stated is expected in early December 2016.
In these browser versions, you have to enable Flash the first time you use the browser with a particular website. If you select "Always allow plugins" or "Use Every Time" with the SR or WFR interface, you will not be asked the next time you log in from the same workstation and browser. If you select the "Use Once" option (not recommended), you will be prompted to enable Flash each time you visit the SR or WFR site.

Notes:

Flash takes a lot of resources to run and can be a security concern if not kept up to date. If you visit a malicious website, in older browser versions Flash can run silently without your knowledge. Since the new Safari 10 and Chrome 55 browsers will no longer run Flash automatically, you have the ability to control when Flash runs, and only allow it to run when visiting a trusted site. This behavior also has the benefit of limiting the amount of computer resources required to run the browser.

Security Reporter Evaluation Mode

Andrew Davies — Tue, 01 Mar 2016 15:22:08 GMT

This article applies to:

Security Reporter 3.4.10

Question:

What is Security Reporter Evaluation Mode?
What data is available for reporting in Evaluation Mode?
How do I request an extension or registration for a SR in Evaluation Mode?

Information:

By default, the SR is set to evaluation mode. Evaluation mode limits the available reports to the most recent 14 days of data. Data for earlier dates is stored but cannot be reported on. Evaluation mode is only available for a limited time.

This article explains how to request an extension of evaluation, or to register the SR.

C.1 Report Manager Banner

In evaluation mode, the Report Manager banner displays ‘EVALUATION MODE’ beneath the Security Reporter name/link.

Hover over the ‘EVALUATION MODE’ link to display a definition of ‘Evaluation Mode’. Click this link to launch the SR Server Information screen.

Note: The Server Information screen is available to all administrators through this link (the Administration menu item is visible only to Global Administrators).

In Evaluation Mode, the Storage Usage section of the Server Information screen includes a note about the data available for reporting.

Server Information Screen

For an SR unit currently in evaluation mode, the Server Information screen includes the Activation section, as shown above. You have the option to either use the SR in the evaluation mode, or to change the evaluation mode in one of two ways: by extending the evaluation period, or by registering the SR so that it can be used in the registered mode.

Change the Evaluation Mode

When the designated evaluation period has expired or is about to expire, you can request an extension to your evaluation period, or register the unit and use it in the registered mode.

In the Activation section of the sever information screen, you will find the Hostname of the Server, IP address, and MAC Address (hardware address of the LAN1 network interface).
In the message “If you do not have an Activation Code, click here.”, click the link ‘here’ to open the Product Activation page at the Trustwave Web site.
In this Web page:
1. Enter your following information: Contact Details, Company Information, and Security Reporter Information.
2. Choose the Activation Type: “Evaluation Extension” or “Full Activation.”
Click Send Information. Trustwave will review the request and issue you an activation code (subject to contractual considerations).
When you receive the code, return to the Activation Page and enter the activation code in the Activation Code field.
Click Activate to display the confirmation message in the Activation Page pop-up box:
- If you have extended the evaluation period for the unit, the following message displays: “It is now in evaluation mode (‘X’ days)!” where ‘X’ represents the number of days in the new evaluation period.
- If you have registered the unit, the following message displays: “Your box has been activated!”

Notes:

This information is copied from the Security Reporter Administrator Guide. For the full Guide and other documentation, see the Security Reporter Documentation page.

Secure Connection Failed when connecting to SR or WF web UI using Firefox 39

Andrew Davies — Mon, 20 Jul 2015 18:05:27 GMT

This article applies to:

WFR 5.1.30 and older
WF 5.1.30 and older
SR 5.1.30 and older

Symptoms:

Mozilla Firefox 39 and later versions will not connect to the web GUI of WF or SR
After upgrading to the newest version of Firefox, you are unable to connect to the GUI
Error message: SSL received a weak ephemeral Diffie-Hellman key in Server Key Exchange handshake message.

Cause:

This issue is caused by a combination of SSL cipher configuration on the device and enhanced security requirements in new versions of Firefox.

This problem will be resolved in a future patch to the WF and SR appliance software.

Workaround:

To temporarily fix the issue in Firefox, you can manually disable the ciphers using the following steps:

Open Firefox. In the address bar enter about:config
Click the button I'll be careful, I promise!
In the search box, enter ssl3
Double click on these two ciphers listings to disable use (they are normally the top two listed)
- security.ssl3.dhe_rsa_aes_128_sha
- security.ssl3.dhe_rsa_aes_256_sha
The disabled items should display in boldface with a value of false, as shown below:

Note:

It is also possible to disable the ciphers on the appliance, which resolves the issue for all users. Contact Support for assistance. To disable the ciphers, Support will require remote (ssh) access to the device experiencing the issue.

What Actions can be reported on in detail drill-down reports?

Charles — Thu, 25 Jun 2015 20:48:20 GMT

This article applies to:

Security Reporter 3.3.x
WFR 5.1.10 through 5.1.30

Question:

What Actions can be reported on in detail drill-down reports?
What are the possible values in the Actions column in detail drill down reports?

Information:

The Actions that could be shown depend on whether the report is for Web Filter data, or SWG data.

For Web Filter data, this column displays the type of filter action applied by the Web Filter and additional details, if applicable. The filtering method could be one of the following:
- Search KW (Search Keyword)
- URL KW (URL Keyword)
- URL
- Wildcard (URL wildcard)
- Strict HTTPS
- Moderate HTTPS
- X-Strike
- Pattern
- File Type
The additional details would include the URL or keyword for the filtering method applied. For example: Wildcard:HTTPS://*.google.com
For SWG data, this column displays the type of action applied by SWG. Among the many possible actions are Block, Bypass Scanning, Allow content and scan containers, Unknown, and None.
Blocked items display in red text. You can also choose to show a Blocked column (displaying True or False).

You can use the Report Wizard to create reports filtered on any Action. For Web Filter data, the Action selection includes a menu of the available filtering methods.

Notes:

Earlier versions of the SR and WFR Administrator Guide contained inaccurate or incomplete information about the Actions.
To obtain the latest version of the Administrator Guide for any product version, see the SR or WFR sections in Downloads and Documentation.

Recommended formats for large detail reports

Charles — Sun, 08 Dec 2013 15:05:52 GMT

This article applies to:

Security Reporter

Question:

What format should I use when saving or exporting a detail report?
What are the fastest report formats to generate?
Are there limits on the size of detail reports?
How can I decide what format to use for a detail report?

Reply:

Security Reporter allows you to download and schedule reports in PDF, HTML, CSV, or XLS format.

Detail reports that have a very large number of lines can take a long time to generate and can consume memory, disk space, and other resources on the reporting appliance and client workstation. In extreme cases a report can fail due to memory or disk limitations.

Trustwave suggests the following size limits for the output formats:

Number of Records	Format
Up to 10,000	Any format
10,000 to 50,000	PDF, HTML or CSV
50,000 to 250,000	HTML or CSV
Over 250,000	CSV

Determining the number of records

To determine how many detail records will be returned, use a Summary Drill Down report.

If the result set is larger than 100,000 records you should consider narrowing the set by applying additional filters.
Select a format based on the suggestions above.

Notes:

Formats in order from fastest to slowest generation are: CSV, HTML, PDF, XLS.
Time to generate a report depends directly on the complexity of formatting.
SR can generate reports with many more than 250,000 records in HTML format, but many browsers will not be able to render the resulting HTML pages.

Will deleting a SWG device from the Device Registry page delete the data held in the database?

Giovanni Romualdi — Tue, 02 Jul 2013 17:20:20 GMT

This article applies to:

SR 3.x

Question:

From SR documentation it is not clear if reports data is deleted from the database when a SWG device is deleted from Device Registry page.

Reply:

The deletion of data only happens when removing the *last* swg device. As long as there is one SWG device or more, no data will be deleted.

How many bandwidth gauges can be used at a time.

Giovanni Romualdi — Thu, 27 Jun 2013 15:12:30 GMT

This article applies to:

SR, TAR

Question:

Up to how many bandwidth gauges can be used at a time?

Reply:

Up to five bandwidth gauges can be used at a time. If a different bandwidth gauge is needed, one of the default bandwidth gauges must be deleted before a new bandwidth gauge can
be added.

No Uncategorized Sites In Reports

Alfred Alva — Mon, 01 Apr 2013 13:36:30 GMT

This article applies to:

Enterprise Reporter/Security Reporter

Question:

No Uncategorized Sites In Reports

Reply

Enterprise reporter:
If every report generated shows no uncategorized sites at all, check the Webclient settings. As a default, the Webclient will not display uncategorized sites.
To check that setting in the Enterprise reporter, log in the Webclient and go to Settings > Default Options. You will see the box labeled "Hide Uncategorized Category" checkmarked. Remove the checkmark and click on "Save". Change will take 24 hours to take effect.

Security reporter:
Go to Administration>Default report Settings and see if the box is checked "Hide Uncategorized Sites"

This article was previously published as:: 8e6 KB 276616

Best Practices for virtual machine backup (programs and data)

Imran Chaudhry — Mon, 01 Apr 2013 05:34:48 GMT

This article applies to:

· Virtual Machine

Question:

· How you can back-up a virtual machine (program and data)?

Information:

This document describes the best practices for backing up a virtual machine. It details the issues that must be taken onto consideration, the steps in an ideal process.

To back up the entire virtual machine (the operating system installation, application files and settings, and all user data), copy the .vmwarevm bundle (the object within the Virtual Machines folder), and while the virtual machine is shutdown.

Note: Ensure that the virtual machine is shut down and not suspended.

Because of the length of time involved, and a high potential for redundant data, this method is best used on an occasional basis, after installing new programs/updates or making significant configuration changes.

For constantly-changing data files, it is best to use any or all of these methods:

· Any network-based backup method (depending on your network settings, the virtual machine could be like just another machine on your network).

· Store, copy, or move the data files to be backed up into a Mirrored or Shared folder and use Time Machine to back up that folder from the Mac OS.

Note: For more information about mirrored folders, see Setting up mirrored folders for your Mac and virtual machine (1014127). For more information about shared folders, see sharing a folder from your Mac to a virtual machine (1004055).

· Back up to removable media (such as CD, DVD, or flash drive) for one-off, non-scheduled backups.

These methods are easy and non-intrusive enough to be used regularly (such as daily). It is possible to set up Windows Scheduled Tasks so that any of these options can happen automatically (assuming the removable media is present and has the space available).

For example, an ideal backup procedure would include these steps:

1. Initial setup

a. Program and data backup

§ Mirroring:
Set up Mirrored folders, and store all of the files you create in Windows in a Mirrored folder (thus keeping it on the Mac). For more information, see Setting up mirrored folders for your Mac and virtual machine (1014127).

OR

§ Sharing:
Set up Shared folders, and store all of the files you create in Windows in the Shared folder. For more information, see Sharing a folder from your Mac to a virtual machine (1004055).

OR

§ Manual / scheduled copy:
Copy the files you want to back up from where they're saved into Windows into a shared folder. This copy can be scheduled, to run automatically. For more information, see:

§ XP: Microsoft's Knowledge Base article, How To Schedule Tasks in Windows XP

§ Vista: Microsoft's Vista support article, Schedule a task

§ Windows 7: Microsoft's Windows 7 support article, Schedule a task

b. Operating system and application backup
When the VM is shut down, copy the VM bundle to an external drive (for example, your Time Machine drive).

2. Regular maintenance
On a regular basis, back up your Mac's folders (including the Shared / Mirrored folders) using your regular back up method. If you use Time Machine, this happens automatically (assuming your external drive is plugged in) every hour. In most other backup programs, this can be scheduled. Backing up the Mac folders, containing your Windows data, ensures that your Windows files and data are backed up.

3. Occasional maintenance
There is no need to back up your VM bundle unless you make configuration changes to an application or the operating system, or install new programs or OS updates. After doing this, you can drag your VM bundle to the external disk (you can replace the old/original copy, to save space) to back it up.

Notes:

This article contains some external links. Accuracy and availability of those links is not granted.

What are the known issues resolved in SR 3.2.0?

Giovanni Romualdi — Fri, 29 Mar 2013 13:19:25 GMT

This article applies to:

Security Reporter 3.2.0

Question:

What are the known issues resolved in SR 3.2.0?

Information:

Detail productivity report column visibility settings do not match exported report
Apache configuration upgrade needed to remove insecure encryption
Code review for report search result functionality
SR should handle negative value transaction sizes
Wildcard searches run slowly due to inefficient queries
Wildcard searches hardcoded to three minute timeout

What are the new features in SR 3.2.0?

Giovanni Romualdi — Fri, 29 Mar 2013 11:40:31 GMT

This article applies to:

Security Reporter 3.2.0

Question:

What are the new features in SR 3.2.0?

Information:

For a PDF of what's new in 3.2.0 please click here

Productivity Reports
- Blocked Count column added
- Detail export now matches column visibility in UI; previously Date and URL columns could not be hidden
New Security Reports (SWG and Mixed Modes only)
- Vulnerability Anti.Dote (VAD)
- Spyware
Revised Saved Reports Screen
Revised Report Schedule screen
Separate Report Scheduler for New Security Reports

What Categories are Searched in 'Top 20 Users by Malware' Report? [SR]

Giovanni Romualdi — Fri, 29 Mar 2013 11:19:26 GMT

This article applies to:

Security Reporter

Question:

What Categories are Searched in 'Top 20 Users by Malware' Report?

Information:

The 'Top 20 Users by Malware' report does not only look up websites categorized by Malicious Code/Virus. The total list of categories represented in this report are: BotNet, Malicious Code/Virus, Bad Reputation Domains, Spyware, Adware, and IRC.

Image sizes available for SR Virtual

Giovanni Romualdi — Thu, 28 Mar 2013 14:16:32 GMT

This article applies to:

SR 3.x

Question:

Which image sizes are available for SR Virtual?

Reply:

The SR Virtual is available in 500GB and 1TB image sizes.

Can I use an SWG and a Web Filter with SR Virtual

Giovanni Romualdi — Thu, 28 Mar 2013 14:15:46 GMT

This article applies to:

SR 3.x

Question:

Can I use an SWG and a Web Filter with SR Virtual?

Reply:

As with the SR Appliance version of the SR product, an SWG (Appliance or Virtual) and/or Web Filter (Appliance or Virtual) can be used with SR Virtual.

Understanding between different reporting modes (SWG/WF/SWG+WF)

Giovanni Romualdi — Tue, 26 Mar 2013 11:55:05 GMT

This article applies to:

Security Reporter (SR)

Question:

Understanding between different reporting modes

Information:

WF Reporting Mode
Allows user to manage Productivity Reports. All reports are associated with Web Filter device(s).

SWG Reporting Mode
Allows user to manage Security Reports. All reports are associated with SWG device(s).

WF/SWG Reporting Mode
Allows user to manage both Productivity and Security Reports. Reports are associated with WF and/or SWG device(s).

Switching between Reporting Modes
• SWG >>> None (All wallclock/canned/detail/summarized data will be purged)
• SWG >>> SWG+WF (All wallclock/canned/detail/summarized data will be purged)
• SWG+WF >>> WF (WF productivity data will be kept; SWG and security report data will be purged.)
• WF >>> WF+SWG (Nothing is purged)
• WF+SWG >>> SWG (All wallclock/canned/detail/summarized data will be purged)

Log import Settings on the Administrative GUI of an SR (Security Reporter)

Giovanni Romualdi — Tue, 26 Mar 2013 11:18:48 GMT

This article applies to:

SR 2.x, 3.x
ER 6.x

Question:

Under the Optional features of a Security Reporter administrative GUI, the Log import settings states "This option has no effect in an SWG-only environment", what does that mean?

Information:

It means that, in an SWG environment, the SR will report on what data it receives instead of ignoring objects based on configuration. Hence, the vsimporter will ignore the page-only configuration option and the SR will require that the customer configure the SWG to ignore the objects if they so choose.

Is there a complete list of MSC ports to open for WF in DMZ

Imran Chaudhry — Tue, 26 Mar 2013 05:55:07 GMT

This article applies to:

Web Filter

Question:

Is there a complete list of MSC ports to open for WF in DMZ?
Is there a complete list of WF and SR ports with usage.

Reply:

Notes:

If any of the client machine(s) or server(s) is/are behind the firewall, port(s) may need to be opened on the firewall. MSC HTTP and HTTPS ports are configurable; check your MSC/WF configuration to verify the related ports need to be opened.

Change regional settings for enterprise/security reporter.

Eric Hanson — Mon, 18 Feb 2013 14:19:40 GMT

This article applies to:

Enterprise Reporter version 3.0 and above.
Security Reporter version 3.0 and above.

Question:

How do I change the Regional Settings for a fully activated enterprise/security reporter?

Procedure:

To access Regional Settings, follow the steps below:

Login to the Security Reporter GUI.
Select Administration from the top menu.
Select System Configuration (see notes below).
Once System Administration loads go to the Network drop-down menu and select Regional Settings.

Notes:

Depending on your browser type, version, and configuration, selecting System Configuration may spawn an additional login window. If this occurs, type in your credentials, and then go back to the original SR GUI page and reselect System Configuration to launch.

Changing networks setttings for Enterprise/Security Reporter.

Eric Hanson — Mon, 18 Feb 2013 14:18:52 GMT

This article applies to:

Enterprise Reporter version 3.0 and above.
Security Reporter version 3.0 and above.

Question:

How do I change the network settings for a fully activated enterprise/security reporter?

Procedure:

To access Network Settings, simply follow the steps below:

Login to Security Reporter GUI.
Select Administration from the top menu.
Select System Configuration (see notes below).
Once System Administration loads go to the Network drop-down menu and select Network Settings.

Notes:

Enable Self-Monitoring for the enterprise/security reporter.

Eric Hanson — Mon, 18 Feb 2013 14:17:57 GMT

This article applies to:

Enterprise Reporter version 3.0 and above.
Security Reporter version 3.0 and above.

Question:

How do I enable the Self-Monitoring feature for a fully activated enterprise/security reporter?

Procedure:

To access the Self-Monitoring feature, simply follow the steps below:

Login to Security Reporter GUI.
Select Administration from the top menu.
Select System Configuration (see notes below).
Once System Administration loads go to the Server drop-down menu and select Self-Monitoring.
Follow the instructions to enable this feature.

Notes:

How do I access and enable Password Security Options for the Security Reporter

Mark Gamble — Fri, 28 Dec 2012 15:03:47 GMT

This article applies to:

ER/SR/Version 3.0 and above.

Question:

How do I set password restrictions for the Security/Enterprise Reporter?

Procedure:

Notes:

Depending on your browser type, version, and configuration, selecting System Configuration may spawn an additional login window.
If this occurs, type in your credentials, and then go back to the original SR GUI page and reselect System Configuration to launch.

How to enable optional features from the Security Reporter GUI.

Mark Gamble — Fri, 28 Dec 2012 14:52:23 GMT

This article applies to:

ER/SR/Version 3.0 and above.

Question:

What Optional Features can be enabled from the ER/SR GUI?

Procedure:

To access Optional Features login to Security Reporter GUI and select Administration from the top menu.
Select System Configuration (see notes below).
Once System Administration loads go to the Database drop-down menu and select Optional Features.

The following Optional Features can be enabled/disabled:
Search String Reporting
Block Request Count
Blocked Searched Keywords Report
Time Usage
Log Import Settings
Password Security Options

Notes:

Depending on your browser type, version, and configuration, selecting System Configuration may spawn an additional login window.
If this occurs, type in your credentials, and then go back to the original SR GUI page and reselect System Configuration to launch.