Configuring SL1 to Use Only HTTPS and Disabling Auto-Complete

This section describes how to configure SL1 to use only HTTPS and to disable the auto-complete feature.

Use the following menu options to navigate the SL1 user interface:

• To view a pop-out list of menu options, click the menu icon ().
• To view a page containing all of the menu options, click the Advanced menu icon ().

Configuring SL1 to Use Only HTTPS

To comply with PCI DSS, SL1 must use only HTTPS (secure HTTP), both for browser sessions to the Administration Portal and when sending HTTP data to other devices.

As of SL1 version 12.2.0, HTTPS is enforced by default.

If you are using a version prior to 12.2.0, you can configure SL1 to use only HTTPS. To do so: 

1. Go to the Behavior Settings page (System > Settings > Behavior).

2. Select the checkbox for Force Secure HTTPS.

   This checkbox is not available in SL1 12.2.0 or later.

3. Click Save.

Configuring SL1 to Disable Auto-Complete

To comply with PCI DSS, you must disable the auto-complete feature in the login page for SL1. To do this, you must disable the feature that allows the browser to save ScienceLogic credentials in the browser cache.

To disable the auto-complete feature in SL1:

1. Go to the Behavior Settings page (System > Settings > Behavior).
2. Select the checkbox for Prevent Browser Saved Credentials.
3. Click Save.