System Settings
Navigate the Moftgate System Settings area: retention, security, roles, SMTP, SIEM forwarding, snapshots, agent releases, and support tunnel.
What Are System Settings#
The System Settings area is the operational control plane for the Moftgate appliance. It groups every platform-wide configuration category under a single entry in the System submenu of the left sidebar. Rather than scattering controls across unrelated pages, all administrative knobs - from data retention to outbound mail - live in one place.
Each configuration category has its own dedicated page rendered inline - there are no modal overlays. This keeps every section a direct, bookmarkable entry that you can reach from the navigation or from global search.
Settings Sections#
The eight configuration sections cover the full operational surface of the appliance. The table below summarizes what each one controls; the subsections that follow add detail.
| Section | What it controls |
|---|---|
| Retention & Agents | Data retention cycles, endpoint offline threshold, auto-approval rules |
| Security Settings | TLS enforcement, log integrity sealing, session cookie policies |
| Roles & Authentication | Default role, MFA requirement, password expiry, session limits |
| SMTP Server | Outbound mail delivery for alerts and verification codes |
| SIEM Forwarding | Remote log forwarder targets and formats |
| Snapshots & Recovery | Configuration backups, scheduled destinations, restore |
| Agent Releases | Agent binary uploads, activation, release notes |
| Support Tunnel | Reverse SSH tunnel authorization for support |
Retention & Agents
Controls how long the appliance keeps historical data, the threshold at which an endpoint is considered offline, and the rules that automatically approve newly registered agents. Tune these to balance storage footprint against investigation depth.
Security Settings
Governs transport and integrity hardening: enforcement of modern TLS versions, sealing of audit logs against tampering, and the policies applied to session cookies. These settings protect both the console and the evidence trail.
Roles & Authentication
Defines the identity posture for console users: the default role assigned to new accounts, whether multi-factor authentication is required, password expiry policy, and limits on concurrent sessions per user.
SMTP Server
Configures outbound email delivery. The appliance uses this to send alert notifications and verification codes, so correct SMTP credentials and a reachable relay are essential for these features to work.
SIEM Forwarding
Lets you stream appliance logs to an external SIEM or log platform. You define one or more forwarder targets, each with a transport and a message format. Choose the transport that matches your destination’s capabilities and the format your SIEM expects.
Transports
| Transport | Use case |
|---|---|
| UDP | Classic syslog - low overhead, fire-and-forget delivery |
| TCP | Reliable syslog - delivery confirmation, ordered messages |
| HTTPS | Encrypted HTTP POST - ideal for cloud SIEM endpoints |
Message formats
| Format | Typical consumers |
|---|---|
| CEF | ArcSight, Splunk, McAfee |
| LEEF | IBM QRadar |
| RFC 5424 | Standard syslog (rsyslog, syslog-ng) |
| JSON | Structured key-value - custom parsers |
Snapshots & Recovery
Manages configuration backups. You can create snapshots of the current configuration, schedule them to run automatically, send them to remote destinations, and restore or import a snapshot when you need to roll back or migrate.
Agent Releases
Holds the agent binaries you upload for distribution to endpoints. You can publish a new release with its release notes and activate it so that enrolled agents pick up the update on their next check-in.
Support Tunnel
Authorizes an outbound reverse SSH tunnel that Moftgate engineering support can use to reach the appliance for assisted troubleshooting. The tunnel is initiated from your side, so no inbound firewall rules are required.