Skip to main content

Function Specification Document

Last updated: 2026.06.08

RFP Notation Standards

NotationmeaningDescription
RequiredCommon Evaluation CriteriaCommonly Required Features in Web Isolation (RBI) Project RFP
specializationDifferentiation ItemsUnique features of SHIELD Gate provide an advantage over competitors — Recommended to add evaluation criteria to the RFP.
SelectionAdditional ItemsFeatures proposed optionally based on customer requirements
Major CategoryMid-categorySubcategoryDetailed DescriptionRFP notationspec
Home ScreenStatus DashboardSecurity365 StatusAt the top of the dashboard, you can check the overall status at a glance • Users: Total number of registered users • Administrators: Number of users with management privileges • Groups: Total number of basic groups + policy groups • Condition Items: Number of registered condition items such as location, time, country, etc.Requiredlink
Home ScreenStatus DashboardSubscription Service StatusYou can check the service name, license type, subscription status, and expiration date of your subscription. • Subscription status: Trial / Subscribed / Expiring (30 days or less) / Expired • Unsubscribed services are displayed as introduction cards,자세히Check details with the buttonSelectionlink
Home ScreenStatus DashboardActual User StatusYou can check the actual user trends by product in a chart.Selectionlink
Home ScreenStatus DashboardAccount Synchronization StatusDisplay Microsoft365·SCI Server synchronization information in card format • Method·Cycle·Start Time·Status·Check the date and time of the last synchronization • If there is no synchronization history계정 동기화 설정Button Display • Move directly to synchronization settings with the button in the upper right corner of the cardSelectionlink
Home ScreenService MigrationMove to Management CenterClicking the service name at the bottom of the left menu will directly navigate to the corresponding service admin page (relay token method)Selectionlink
User ManagementUser Registration and IntegrationManual Registration and CSV UploadUser individual registration or CSV bulk registration available • CSV template provided • Activation status default: inactive • When uploading large volumes (over 200,000 records), only summary information is displayed to prevent browser freezeRequiredlink
User ManagementUser Registration and IntegrationCSV Bulk Registration Processing OptionsYou can choose to deactivate or retain existing users not present in the CSV during bulk registration. • Supports downloading the processing result CSV (including CREATED / UPDATED / UNCHANGED status values) • Original file can be downloaded from the job history • Asynchronous processing — other menus can be used while in progress.specializationlink
User ManagementUser Registration and IntegrationAccount SynchronizationMicrosoft365·SCI Server integration allows for automatic user registration • Microsoft365: Choose between full synchronization or synchronization of specified AD groups (security·mail group types) • SCI Server: Supports domain conversion settings if the ID is not in email formatRequiredlink
User ManagementUser Activation ManagementUser Activation/Deactivation ControlControl the user's service access availability in an active state • Automatically record reasons when deactivated (automatic deactivation, CSV synchronization, manual by administrator)Requiredlink
User ManagementUser Activation ManagementAutomatic Recording of Deactivation ReasonsAutomatically display the reason for account deactivation on the detail screen • Deactivation paths: Automatic deactivation / CSV synchronization / Manual by administrator • Automatically reset the reason upon activationspecializationlink
User ManagementUser Activation ManagementBulk Enable/Disable Search ResultsBased on search and filter results, users can be activated or deactivated in bulk • Supports bulk processing after searching by groupspecialization-
User ManagementUser QueryDisplay Last Access InformationDisplay last access column in user list (relative time format, sortable) • Check exact access date and time on mouse over • Include column in downloaded fileRequiredlink
User ManagementUser QueryDisconnected Period FilterFiltering for long-term inactive users for 7·30·60·90 days or more or direct input • Last access column automatically included in the downloaded file when filters are appliedspecializationlink
User ManagementManagement HistoryBatch Registration Task History InquiryView the executor, status, and processing result statistics of the user bulk registration task and download the original file. • Status: In Registration / Partially Registered / Registration Completed / Not Processed • You can check the number of new creations, updates, no changes, deletions, and maintenance.specializationlink
User ManagementPassword Reset SupportSend Email LinkSend password reset link to user email (valid for 10 minutes) • Multiple users can be selected and sent in bulkRequiredlink
User ManagementPassword Reset SupportTemporary Password IssuanceThe administrator generates a temporary password and delivers it to the user • Single user target • The user can log in with the provided temporary password and change it to a new password.Requiredlink
User ManagementPassword Reset SupportBulk Password ResetBulk reset of passwords for all users in the tenant**(On-Premise Only)**• Always exclude own account • Optional exclusion of administrator (ADMIN) role (default: excluded) • Provide option to force password change on next login • Asynchronous processing (may take a few minutes for large tenants)specialization-
User ManagementDownloadDownload User ListYou can download all or selected user information as a CSV file.Requiredlink
User ManagementList SettingsSetting Items to Display in the ListCustomizable settings for table column visibility and order • Select columns displayed with checkboxes • Change order with drag and dropSelectionlink
User ManagementBackup and RestoreManual Backup CreationManually backing up user and group data to a specific point in timespecializationlink
User ManagementBackup and RestoreData Restoration (Rollback)Restore data to the selected backup point • Preview of changes before restoration • Automatic backup of the current state just before restorationspecializationlink
User ManagementBackup and RestoreCSV Synchronization Automatic BackupAutomatic backup of current user and group data when executing CSV bulk registration or remote synchronization • Display guidance slide for choosing whether to proceed in case of backup failurespecialization-
Administrator ManagementSetting Up Administrator RolesAdministrator Permission Classification4 Roles for Function Access Permission Segmentation • Super Administrator: Access to all functions • Edit Administrator: View and edit available • View Administrator: View only available • Log View Administrator: Log only (System Monitoring menu not displayed)Requiredlink
Administrator ManagementSetting Up Administrator RolesAdmin Notification SettingsIt is possible to set up real-time notification sending to a specified email when the log viewer administrator logs in or logs out.Selectionlink
Administrator ManagementAdministrator Access PolicyAdministrator Access Policy SettingsAccess to the administrator's admin page can be restricted based on conditions such as IP and time • Priority-based multi-policy managementRequiredlink
Administrator ManagementAdministrator Access PolicyAdditional Authentication SettingsAdministrator access may require OTP or additional email authentication.Requiredlink
Group ManagementBasic GroupManual Registration and CSV UploadGroup individual registration or CSV bulk registration available • CSV template provided • Hierarchical structure (ParentGroupId) supported • GroupName·GroupId required inputRequiredlink
Group ManagementBasic GroupCSV Bulk Registration Processing OptionsYou can choose how to handle existing groups not in the CSV during bulk registration • Delete: Only empty groups (groups without members) will be automatically deleted • Maintain: Keep the existing group status as is (recommended during the first synchronization or partial updates)specializationlink
Group ManagementBasic GroupAccount SynchronizationMicrosoft 365 · SCI Server integration allows for automatic group registration • Supported group types: Security group · Mail groupRequiredlink
Group ManagementPolicy GroupManual RegistrationGroup individual registration available • Users can be combined as members of the default group • Members can be added through general search (manual selection) or conditional search (automatic filtering)Requiredlink
Group ManagementPolicy GroupCondition-Based Group SettingsPolicy groups can be created with users filtered by condition • New users that meet the conditions are automatically added during Microsoft365 synchronization • Multiple conditions can be combined using AND methodspecializationlink
Group ManagementManagement HistoryBatch Registration Task History InquiryYou can view the executor, status, and processing result statistics of the group batch registration task and download the original file.specializationlink
Group ManagementDownloadDownload Group ListYou can download the information of the entire group or selected groups as a CSV file.Requiredlink
License ManagementStatus MonitoringCheck License StatusYou can check the status of the subscribed plan, total number of licenses, allocation, and remaining status.Requiredlink
License ManagementLicense AssignmentManual Allocation/DeallocationUser search allows for individual or bulk license assignment and revocation •모든 사용자 추가You can batch assign to all users activated by the button • Warning notification displayed when exceeding remaining licensesRequiredlink
License ManagementLicense AssignmentAutomatic Assignment SettingsAutomatic license assignment upon user activation, automatic release upon deactivation or deletion • Choose between 2 modes: Assign including existing active users / Assign only to users activated laterspecializationlink
Conditional Policy ManagementService Access PolicyBasic Authentication PolicyAccess Allowance or Blocking Settings for Users and Groups by Service • Additional OTP or Email Authentication May Be Required When Access is Allowed • If Not Used is Selected, Access is Granted Only with ID and PasswordRequiredlink
Conditional Policy ManagementService Access PolicyConditional Access PolicyAccess control settings based on IP, time, country, and device conditions • Multiple conditions can be specified, AND·OR method selection • Additional authentication via OTP·email may be required when access is allowedRequiredlink
Conditional Policy ManagementService Access PolicyAdditional Authentication SettingsAccess permission may require additional OTP and email verification • If "Do not use" is selected, access is allowed with only ID and password.Requiredlink
Conditional Policy ManagementService Access PolicyAdvanced Search and SortingPolicy name and the ability to search by multiple conditions such as members, targets, services, and usage status • AND structure between conditions / OR structure within conditions • After clicking on the policy, you can move to the desired priority position.specialization-
Conditional Policy ManagementService Access PolicyConditional Policy Excel DownloadYou can download the list of conditional policies as an Excel file.specialization-
Condition Item ManagementRegister Condition ItemsLocation (IP) ConditionSingle IP, IP range, IP range condition registration availableRequiredlink
Condition Item ManagementRegister Condition ItemsCountry ConditionsRegistration of access conditions based on country code is possible.Selectionlink
Condition Item ManagementRegister Condition ItemsTime ConditionStart and end time, day-based access condition registration availableRequiredlink
Security Classification Label ManagementGrade ManagementGrade Creation/Modification/DeletionSecurity level grade (confidential, sensitive, public, etc.) creation and color setting possible • Utilized for policy tags and data classification purposes in each serviceSelectionlink
Security Classification Label ManagementLabel ManagementCreating/Modifying/Deleting LabelsCreate and classify labels (e.g., personnel information, external sharing, etc.) as sub-items of the grade.Selectionlink
Security Classification Label ManagementLabel ManagementGrade Undecided ManagementWhen a grade is deleted, the lower label moves to 'Grade Undetermined' and can be reassigned.Selectionlink
Log ManagementLog Integration InquiryUser Log InquiryViewable user activity logs for all servicesRequiredlink
Log ManagementLog Integration InquiryAdmin Log InquiryViewable admin activity logs for all services • Includes detailed information by event such as registration, modification, deletion (target of change, field name, etc.)Requiredlink
Log ManagementLog Integration InquiryFilter SearchFiltering logs by period, user, department, and service is possible.Requiredlink
Security and Authentication SettingsAccount Security SettingsAccount Deactivation Period SettingAutomatic account deactivation after a set period of inactivity • Deactivated accounts can be reactivated from the user management menuRequiredlink
Security and Authentication SettingsAccount Security SettingsUnused Account Automatic Deactivation PolicyAutomatically deactivate user accounts that have not logged in for more than the set period (default 90 days) • Exclude Admin accounts • Automatically record reasons for deactivation • Can be set with a toggle for usagespecializationlink
Security and Authentication SettingsAccount Security SettingsAutomatic Deactivation of Conditional Policies When Changing DepartmentsIf the user's department (group) changes and they have left the existing department, automatically deactivate the registered personal conditional policy. • If only a group is added (A→A,B), it is not considered a departure, and the policy is maintained. • Individual activation settings can be configured for each service. • Operates the same way across all group change paths, including manual modifications and synchronization.specialization-
Security and Authentication SettingsAccount Security SettingsPassword Policy SettingsMinimum password length, character combination, and required included character settings are possible • Excluded for users linked with external accounts such as Microsoft and SAMLRequiredlink
Security and Authentication SettingsAccount Security SettingsSetting Password Change FrequencyPassword Change Mandatory Cycle Settings • Extension Count and Duration Settings AvailableRequiredlink
Security and Authentication SettingsAccount Security SettingsPassword Reuse RestrictionRecent password reuse restriction can be set for N passwords (e.g., if set to 2, the last 2 cannot be reused)Requiredlink
Security and Authentication SettingsAccount Security SettingsAutomatic Logout SettingsAutomatic Logout Settings for Inactive Time Exceeded • Individual time settings available for each service (10 minutes, 30 minutes, 1 to 12 hours) • Applicable services: Management Center, SHIELD Drive, SHIELD GateRequiredlink
Security and Authentication SettingsAccount Security SettingsAutomatic Logout for Duplicate LoginAutomatic termination of existing sessions when a new connection occurs from a different IP with the same account • Individual settings via service-specific toggle • Applicable services: Management Center·SHIELD Drive·SHIELD Gatespecializationlink
Security and Authentication SettingsAccount Security SettingsRecent Access InformationYou can set whether to display the last access date and time · IP when logging in.Requiredlink
Security and Authentication SettingsAccount Security SettingsAccount Authentication Policy SettingsAccount temporary lock settings when the number of authentication failures exceeds • Number of failures: Select 5·10·15 times • Lock time: Select 5·10·30·60 minutes • Applies only to manual login users not using SSORequiredlink
Security and Authentication SettingsAccount Security SettingsSetting User Initial PasswordManual Registration (Individual · CSV Batch) Initial Password Rule Settings • Users need to change to a new password after the first login with the initial password.Requiredlink
Security and Authentication SettingsInbound ProvisioningMicrosoft365 SynchronizationFull synchronization or designated AD group synchronization is available • Supported group types: Security groups · Mail groups • When synchronizing designated groups, unselected groups and members will be deleted • Manual enrollment administrators can also link MS accountsRequiredlink
Security and Authentication SettingsInbound ProvisioningSCI Server SynchronizationSCI server IP·Port integration settings available • Integration test button provided • Domain conversion settings supported if the ID is not in email formatSelectionlink
Security and Authentication SettingsInbound ProvisioningAutomatic Synchronization Cycle SettingAutomatically synchronize at the set time every day • Can be activated or deactivated with a toggle switchRequiredlink
Security and Authentication SettingsInbound ProvisioningManual Synchronization수동 동기화- Execute synchronization immediately with the button - Display success/failure status and completion time after synchronization is complete - Prevent duplicate execution during synchronizationRequiredlink
Security and Authentication SettingsInbound ProvisioningPath Display Reference Group SettingsYou can check the user affiliation group path on the log page with the group setting • Microsoft Full Synchronization: The administrator directly sets one top-level root group • SCI Server: The top-level group is automatically set (no separate selection required)Selectionlink
Security and Authentication SettingsUser Authentication Method ManagementSecurity365 CertificationSecurity365 own ID·password authentication methodRequiredlink
Security and Authentication SettingsUser Authentication Method ManagementCSP Certification (Microsoft)Microsoft 365 Account Integration Login Support • When activated, on the login pageMicrosoft 로그인Button Display • Users linked with Microsoft Sync can log in with their MS accountRequiredlink
Security and Authentication SettingsUser Authentication Method ManagementCSP Certification (Google)Google account linking login support • When activated, on the login pageGoogle 로그인Button DisplaySelectionlink
Security and Authentication SettingsUser Authentication Method ManagementSSO Authentication (SAML)SAML-based IdP integration SSO authentication support • IdP configuration, SP configuration, Redirect URL configuration requiredRequiredlink
Security and Authentication SettingsLog SettingsBackup Cycle SettingsDaily, monthly, and yearly log backup cycle settings are possible.Requiredlink
Security and Authentication SettingsLog SettingsLog Collection Period SettingsSetting the log collection period included in the archive file • The collection period includes logs from the day before the backup date for the selected duration (e.g.: selecting 30 days, backup date 8/15 → logs from 7/16 to 8/14)Requiredlink
Security and Authentication SettingsLog SettingsArchive File ManagementSet maximum number of archive files to save • Automatically delete from the oldest files when exceeded • Direct download available from the file listRequiredlink
Security and Authentication SettingsExternal Log TransmissionBackup log external transmissionAutomatic transfer of log backup files to an external server via SSH/SFTP • Configuration items: SSH ID·PW·IP·Port·Transfer destination path • Transfer is not possible if the path does not existSelectionlink
Security and Authentication SettingsExternal Log TransmissionConnection TestExternal server connection test feature provided • Save settings button activated after passing connection testSelectionlink
Security and Authentication SettingsDelete LogAutomatic Deletion of LogsAutomatic deletion setting for original logs after backup completion possible • Use: Delete backed up original logs (irrecoverable) • Do not use: Retain original logsSelectionlink
Logo SettingsLogin Page SettingsLogo ChangeUpload/Change Logo Image on Login Page • Supported Formats: PNG/SVG/JPG • Recommended Size: Width 160~356px · Height 34px · Maximum 2MBSelectionlink
Logo SettingsLogin Page SettingsChange FaviconChangeable browser tab favicon • Supported formats: ICO/PNG • Recommended sizes: 16×16 · 32×32 · Maximum 500KBSelectionlink
Logo SettingsLogin Page SettingsChange Tab NameChangeable browser tab title text • Allowed special characters: -, _, &Selectionlink
Logo SettingsLogin Page SettingsButton Hide SettingsLogin page button hiding possible • Password reset button hiding • Sign up button hiding (On-Premise only)Selectionlink
Logo SettingsService-specific logo settingsChange GNB LogoYou can change the logo in the top header of each service console • Supported formats: PNG/SVG/JPG • Recommended size: Width 140px · Height 30px · Maximum 2MBSelectionlink
Logo SettingsService-specific logo settingsFavicon/Tab Name by ServiceFavicon and browser tab name can be set individually for each service • Independent settings for admin page and user pageSelectionlink
SettingsMenu Display ManagementDisplay Settings for Selection MenuHome Menu · Security Classification Label · Optionally set whether to display Conditional Policy menu to simplify the management screen • When 'Conditional Policy' is hidden, all users can access the service with just ID/PW.Selectionlink
SettingsApproval Service SettingsApproval Service Usage StatusActivation/Deactivation Settings for the Approval Process of Linked Services • If not used, the approval service-related menu will not be displayed on the user page.Selectionlink
System MonitoringSystem MonitoringViewing Resource Usage by NodeReal-time monitoring of CPU, memory, disk, and network usage**(On-Premise Only)**• Time series chart (up to 7 days) provided • Log view admin role does not display menuSelectionlink
Service AccessUser Page Access ManagementProviding a user-specific pageSupport for users to navigate to the user page of the subscribed service after logging in.Selectionlink
Service AccessUser Page Access ManagementAdmin/User Page Port SeparationSeparate the administrator page and user page to operate on different ports • Network access policies can be independently applied per pageSelection-