pure access manual contents · pure access manual contents ... the set up and configuration for...
TRANSCRIPT
1
Pure Access Manual Contents 1.0 Application Infrastructure and Architecture ..................................................................................3
2.0 Platform Update Process ..............................................................................................................4
2.1 Pure Access Cloud .......................................................................................................................... 4
2.2 Pure Access Manager ..................................................................................................................... 4
3.0 Set Up and Configuration ..............................................................................................................5
3.1 Network Configuration .................................................................................................................. 5
3.1.1 IP Addressing .......................................................................................................................... 5
3.1.2 Firewall ................................................................................................................................... 5
3.1.3 Multiple NAT/Firewall Configurations ..................................................................................... 7
4.0 Configuring ISONAS Hardware Devices ..........................................................................................7
4.1 Reader Configuration Tool Overview .............................................................................................. 7
4.2 Using the Configuration Tool .......................................................................................................... 7
5.0 Adding Access Points to Pure Access ........................................................................................... 11
5.1 Adding an RC-04 Access Point ...................................................................................................... 11
5.2 Adding an RC-03 Access Point ...................................................................................................... 17
5.2.1 Adding an IP-Bridge ............................................................................................................... 17
5.2.2 Access Point Door Status ....................................................................................................... 19
5.2.3 Access Point Settings ............................................................................................................. 20
6.0 User Setup ................................................................................................................................. 21
6.1 How to Add a User in Pure Access ................................................................................................ 21
6.2 How to Deactivate a User............................................................................................................. 31
6.3 How to Enroll a Mobile Credential in Pure Access ........................................................................ 34
6.3.1 Using the Mobile Credential to unlock the Door .................................................................... 36
6.4 User Defined Fields ...................................................................................................................... 37
6.5 Setting up Special Credentials ...................................................................................................... 39
6.5.1 Adding a Toggle Credential .................................................................................................... 39
6.5.2 Adding a Master Credential ................................................................................................... 42
7.0 Setting up Rules, Schedules and Events ....................................................................................... 44
7.1 Introduction ................................................................................................................................. 44
7.2 Types of Rules in Pure Access ....................................................................................................... 44
7.3 Creating Rules in Pure Access ....................................................................................................... 46
2
7.4 Scheduled Events and Holidays .................................................................................................... 57
7.5 How to Create an Event ............................................................................................................... 61
8.0 How to set up the Dashboard in Pure Access ............................................................................... 63
8.1 Adding a Single Access Point Widget ............................................................................................ 65
8.2 Setting up a Multiple Access Point Widget ................................................................................... 69
8.3 Setting up an Access Point Admit Widget ..................................................................................... 70
8.4 Setting up the Lockdown Access Points Widget ............................................................................ 71
8.5 Setting up a User Profile Dashboard Widget ................................................................................. 72
8.6 Setting up a History Widget ......................................................................................................... 73
9.0 Pure Access Alerts and Notifications ........................................................................................... 76
9.1 Alert Types and Set up Procedure: ............................................................................................... 77
9.2 Alert Settings ............................................................................................................................... 81
9.3 Set up Email Notifications for Alerts ............................................................................................. 81
10.0 Pure Access Reports ................................................................................................................. 83
10.1 History Report ........................................................................................................................... 83
10.1 Users Report .............................................................................................................................. 85
10.3 Access Points Report .................................................................................................................. 87
10.4 Schedules Report ....................................................................................................................... 89
10.5 Holidays Report ......................................................................................................................... 90
10.6 Attendance Report ..................................................................................................................... 91
10.7 Permissions Report .................................................................................................................... 92
10.8 Data Card Export Report ............................................................................................................ 94
10.9 Scheduled Reports ..................................................................................................................... 95
11.0 Custom Rules ........................................................................................................................... 98
11.1 Creating a Custom Rule .............................................................................................................. 98
11.2 Changing a Custom Rule........................................................................................................... 102
3
Pure Access Manual
1.0 Application Infrastructure and Architecture Thank you for purchasing Pure Access, Cloud or Manager. As you are aware, Pure Access Cloud is a web-
based platform hosted by ISONAS through Amazon Web services. The infrastructure uses a PostgreSQL
database on a Windows server (on premise version only) and the web application is written in Java
served up by Apache Tomcat. Pure Access Manager is housed in the same set up but instead of being
hosted by AWS, you are providing the server in your internal network to host the platform.
Here are some images showing the infrastructure of the 2 platforms
Pure Access Cloud Infrastructure
Pure Access Manager Infrastructure
4
Pure Access Manager Hardware System Requirements:
• Windows® Server 2012R2 or newer
• Intel i5 or greater
• 8GB ram
• 500 GB HDD
OR
• Virtual Environment with a hypervisor download
• 80GB of disk space available from the VM
2.0 Platform Update Process
2.1 Pure Access Cloud All Pure Access Cloud tenants can take advantage of the free upgrade program, all software corrections
and feature releases are included in the annual license. Upgrades are usually released once a quarter.
Our deployment team will provide a two-week notification before the update occurs so you are aware
of the update. In this notification, you will receive the release notes giving you visibility to the changes.
All updates take place during off hours to reduce any potential interruption to your system.
2.2 Pure Access Manager Pure Access Manager follows the same release process as Pure Access Cloud, once a quarter with a
notification that a release is available. Pure Access Manger feature updates are available to customers
who have purchased a software upgrade program. Please contact our sales team for more information
on this program.
If software issues are found in Pure Access Manager, those updates will be available for Pure Access
Manager customers and will be provided a link from which they can update their application directly.
5
3.0 Set Up and Configuration
The set up and configuration for Pure Access is very straightforward. All ISONAS hardware models are
configured in ‘client mode’ and are contacting the PA server directly. There are a few tools you will
need to ensure a smooth set up and configuration:
1. ISONAS Configuration Tool
a. This can be found on our website under the QUICK LINKS Section at the top right
2. Pure Access Tenant License Information
NOTE: This would have been sent in your order confirmation, check with your installer or
distributor for this information
3.1 Network Configuration
3.1.1 IP Addressing
The recommended setting for ISONAS Hardware devices connecting to Pure Access is DHCP. When
using DHCP ensure that the DHCP has the correct default gateway and DNS address configured. These
settings are critical for the device to connect outside the network (gateway) and to resolve the Pure
Access address to an IP address (DNS).
If you prefer to reserve IP’s for your devices, we would recommend using DHCP with reservation vs.
statically addressing devices. Static addresses can be used with Pure IP and PowerNet™ devices
connecting to Pure Access. When assigning static addresses ensure all of the following items are
configured with the correct address:
1. IP Address
2. Subnet Mask
3. Gateway
4. DNS Address
3.1.2 Firewall
When connecting ISONAS hardware devices to Pure Access the device (client) initiates the connection to
Pure Access. This setting is “Client Mode” for reader-controller devices (see figure 3 on next page).
Since the device initiates the connection out to Pure Access minimal firewall configuration is needed. If
your firewall is blocking outbound ports or ephemeral ports (see description below) then rules may need
to be added to the firewall to ensure a connection can be made.
ISONAS RC-03 and RC-04 reader-controller devices will initiate a connection on port 55533 and Pure
Access™ will use an ephemeral port to complete the connection.
PowerNet™ IP-Bridge devices will initiate a connection on port 55533 and Pure Access will use ports
10001-10003 to complete the connection. IP-Bridges come in either two or three door units. For a two
6
door unit ports 10001 and 10002 will be used, for a three door unit the same ports are used in addition
to 10003.
An ephemeral port is a random port used to complete a TCP connection for the session. This is typically a
random port between 49152 and 65535. The port number is used only for that connection period and
will change if the connection is reset. In most cases this is not an issue unless severe security restrictions
are placed on a network.
Figure 1 - RC-03 Example Connection
Figure 2 – IP-Bridge Example Connection
Figure 3- Reader-controller Connections
7
3.1.3 Multiple NAT/Firewall Configurations
Multiple NATs are strongly discouraged as they can cause communication issues for the ISONAS devices.
Multiple Firewalls are also strongly discouraged for the same reason. If these must be used for security
purposes, ensure that all rules are configured properly and that the IP address and Ports are free to
communicate through the multiple layers of Firewall and/or NAT.
4.0 Configuring ISONAS Hardware Devices
4.1 Reader Configuration Tool Overview The Reader Configuration Tool is a program that allows an installer to configure ISONAS hardware
devices. It broadcasts out on the local network to find ISONAS devices. Once they are found the devices
can then be configured to connect to Pure Access. The IP addressing method is configured with this
program as well.
4.2 Using the Configuration Tool First simply download the Configuration Tool from the ISONAS website http://www.isonas.com under
the quick links section on the homepage. Run the application (see figure 4 on next page). Clicking on
“Discover Units” will find any ISONAS hardware devices on the local area network. Clicking on
“Connection Test” will determine if the network segment that the Configuration Tool is running on can
make a connection to Pure Access and this test does not assure reader communications – only that the
PC running the config tool can get to Pure Access.
After finding the devices on the network we can now proceed to configuring these devices. Clicking on
“Adv Mode” will bring up the options needed to fully configure these devices. After clicking on this
option there are now two available options. The first setting allows for the changing of how the
PowerNet™ device connects and the second will set either DHCP (preferred and default) or static (see
figure 7 on page 7).
If no devices show up or you do not see all devices, check the following items:
1. Verify that all devices are powered up and fully booted. A fully booted RC-03 will have the top LED on
with a color of red. A fully booted IP-Bridge will have the top left LED on with a color of green. See
figures 5 and 6 on the next page.
2. Verify that the windows PC the Configuration tool is running
on is connected to the correct network and has a valid IP
address for that network.
3. Ensure that all ISONAS devices are on the same subnet and
network. The Configuration Tool uses broadcast packets on
the network to find the devices. Broadcast traffic is dropped
by routers so only ISONAS devices on the network segment
the Configuration Tool is run on will be seen.
Tech Tip!
Configure your ISONAS devices in
your shop before installing them on
site. This will allow for easy install
and easier troubleshooting if
devices do not connect.
8
4. If using VLAN’s verify with the IT Administrator that all the switch ports ISONAS devices are plugged
into are on the correct VLAN.
Figure 4 - Configuration Tool
Figure 6 – Fully Booted IP-Bridge
Figure 5 – Fully Booted RC-03
9
All ISONAS devices must be set to “Client Mode”. This configures the device to initiate the
connection out to Pure Access. The Host Address URL can be accessed via the dropdown menu.
This will most likely be isonaspureaccesscloud.com though, if this is a demo system, it may be on
isonaspureaccessdemo.com. The DNS should be left at default as this is a free Google DNS service
provided. If this value is changed ensure it is a working DNS server.
All ISONAS devices are set to DHCP by default. DHCP is the recommended IP addressing method
for Pure Access. If a static address is used ensure that all values are correct, especially the default
gateway!
Once all values have been set highlight the device in the “Discovered Units” window and click
“Configure Selected Unit”. The “Complete” column should say Yes, the Configure button should
have a green check mark next to it and the unit should reboot (see figure 8 below).
Figure 7 - Configuration Tool Advanced
10
The “Configure all Units” option can be used unless static addresses are being assigned. When
using static address units must be configured individually.
From here your ISONAS devices have been configured to point to Pure Access Cloud. The next
step is to login to your Pure Access portal, register your software and begin adding your access
points by using their MAC addresses. From here you can complete the configuration of your
system!
For more information on how to set up your access points, check out our YouTube channel for
further details.
Figure 8 - Configure Selected Unit
11
5.0 Adding Access Points Once you have configured your hardware devices with the configuration tool to communicate with the
correct domain you will need to add these access points to your Pure Access tenant.
For a full tutorial, visit the complete video on Adding Access Points to Pure Access.
5.1 Adding an RC-04 Access Point 1. To do this, from the main navigation select the Access Points tab and then select Access Points
in the secondary navigation. On this screen you will see any active access points and access
point groups
2. To add a new Access point, simply select the add access point button on the far right of the
screen.
3. From this button the access point configuration wizard will appear. The access point wizard
allows you to enroll the device into the software but also test and verify the wiring at the door
for the REX, door sense and ASM (advanced security module). This feature was designed to
allow technicians in the field to use their mobile device to enroll hardware as well as test all
physical wiring while on site.
4. To begin, add the MAC Address of the device. All ISONAS devices have a tag on the side or back
with their MAC address. To enroll the device’s MAC address, there are two options, 1) you can
simply type in the MAC ID manually or 2) you can take a picture of the MAC ID tag on the side of
device. This will use the camera on your phone to snap an image and then automatically import
the MAC ID into this field. See images below for MAC address locations.
12
Side Image with barcode for scanning
5. Once you have scanned or manually entered the MAC address the device will begin negotiating
the connection. The device model will populate in the right hand corner. While you are waiting
for the device to connect you can enter the Access Point Name as well as the Access Point
Group.
**Please Note: you must move your cursor into the next field in order for the device to begin
negotiating the connection!
Back Image with MAC Address
13
6. Once the device has connected you will see the word
connected on the left side. Now you can move on to the
door wiring tests and configuration by selecting the Next
button at the bottom. This is not required to complete the
connection of the access point, but recommended to ensure
the physical set up is correct. If you decide not to complete
the tests you can simply select the Finish Later button.
7. The next step in the wizard will ask you which peripherals
you have connected to the hardware and allows you to set
the Beeper of Tamper Sensor. Simply select or unselect the
items you are using. The request to exit will be tested in a
later test and by default is automatically turned on.
14
8. Next you’ll run through the lock test. You’ll be asked how
the lock is wired. The ISONAS RC-04 has a solid state relay
and the fail-safe/secure is set with a software configuration.
9. The second item it will ask you about is the EDK or Advanced
Security Module. Simply select yes or no if you have one
connected. See Figure 1
10. If you have manually reset the ASM/EDK back to its factory
default settings, simply select Yes otherwise select No.
**Tech Tip: To reset the ASM/EDK, simply take a paperclip to
the small hole on top and hold it down for 15 seconds to
reset it to factory settings.
11. Next the software will go through and test the lock and
you’ll hear the latch click and see the door unlock. See
Figure 2.
Figure 1
Figure 2
15
12. Next is the door sense test. This test will ask you to open the door and close it to test the
sensor. It will then tell you it was a success and you can hit next to move to the next test.
13. The next test is a badge test. This will allow you to ensure that the devices are reading the
credentials appropriately and will not provide access until enrollment and the appropriate rules
are created. To begin the test hit Ready, present your badge and the test will begin.
16
14. Next the wizard will provide the ability to update settings on your device. You can set the latch
interval, the tamper sensor and which actions should initiate a beeper sound. You can change all of
these items to configure the door as you prefer. **Please Note: REX Event is usually set as
unchecked.
15. When you are finished, hit the settings complete
button. This will take you to the last screen of the
configuration wizard notifying you that the door is
still unlocked. This is the case so you are not locked
out of the door as you’re programming it as well as
allowing you to configure the door and allow
contractors in and out before the system is live.
16. To set the door to a locked state simply hit the lock
button. If you prefer to leave it unlocked, select
unlock. If you select unlock, you will need to lock
the door from the Pure Access software once you
are ready to do so.
17
5.2 Adding an RC-03 Access Point **Please Note: These instructions above are for the RC-
04 specifically. The RC-03 is very similar except for the
following differences.
1. On the RC-03, the enrollment process is the same.
Enter the MAC address, name the door and move
through the tests.
2. One difference with the RC03 is that there is a
separate REX wire and AUX wire so you will see
those as separate selections on the peripherals
section. Screen shot to the right.
3. On the RC-03 there is a typical Form C relay, unlike
the RC-04 that has a solid state relay. Therefore, the
RC-03 fail safe or secure setting is done with the
hardware and wiring and not set in the software like
the RC-04. So you will not see a configuration
setting for the RC-03.
5.3 Adding an IP-Bridge The process for adding an IP-Bridge is very similar to
adding the RC-04 and RC-03. The IP-Bridge can control 2
or 3 doors and those doors are configured with the
same MAC address.
1. Begin by entering the MAC address for the IP-
Bridge. The configuration wizard will recognize the
device as an IP-Bridge and populate the number of
doors on the bridge to configure. Simply add the
names of the 2 or 3 access points based on your IP-
Bridge. Below is a 2 door scenario which is why the
third door is showing Not Communicating.
2. The configuration will then walk you through the set
up for each door associated with the IP-Bridge. This
is the same set up process as the RC-03. Once you
hit Settings complete on the first door, the wizard
will prompt you to start the second door’s tests.
18
3. From here on the main page you can see all access points by name, the groups they are
associated with, their MAC address, status which represents whether they had been tested, the
last update(which is determined by when the settings were last changed from the AP screen)
and whether they are connected or not.
19
4. If you need to make any changes or retest an access point setting after you have finished the original
configuration, select the access point name from the above list.
5.4 Access Point Door Status The status bar on the right hand side of the screen will show the current status of the door. If it is
connected as well as the whether the door is locked or unlocked. **Please Note: This setting is not an
override setting. You are not able to override the state of the door from locked to unlocked.
To enable the Door Sense
select the Enable button and
then to retest the door sense
select the test button and
this will guide you through
the test
The header of the access point shows the name,
MAC address, the model, which area the access
point is assigned to as well as the credential
bitmask.
The area will default to common
unless you utilize areas and
change this. See more details
about areas here.
Latch Interval: this determines the length
of time the latch will remain open. The
maximum interval is 255 seconds
Lock Type will determine fail safe or fail
secure. All RC04’s lock type will be
configured from the software due to the
solid state relay. RC03’s will be determined
by the way the device is wired to the lock.
Tamper can be set to enabled or disabled
and will allow you to trigger alarms if the
device is physically interfered with.
20
5.5 Access Point Settings
On the RC04 there is a single wire for REX or AUX. To
determine the use of this wire you simply select from this
drop down. If you need REX without unlatch or AUX without
unlatch set that here as well.
Beeper Sounds: You can set which actions
will trigger a beep from the reader
Keypad: This will be automatically enabled and you can disable this if you choose.
All keypads are also backlit and you can enable/disable that off if you choose.
AUX/REX LED: This allows you to enable or disable the LED upon a REX or AUX event. So if
you prefer for the LED to not flash green you would disable this function
21
6.0 User Setup
6.1 How to Add a User in Pure Access If you’re looking to add people or users in Pure Access to manage your access control, these steps will
guide you on doing just that.
1. Log into your Pure Access website (https://www.isonaspureaccesscloud.com)
2. Click the “Users” tab on the left side navigation:
3. This brings you to a full summary page of all active users in your system. From here you can take
actions on existing users by selecting their name, take actions on multiple users, deactivate users and
remove users from groups.
4. You also have the ability to add users to specific access groups in order to make rule management
simpler. You can see the users by selecting the All Users group or one of the other user group.
22
5. By choosing the carrot icon, after you have selected a user, you can take actions on the selected user
or users.
23
6. In order to add a new user, click the Green + icon at the top right corner of the window:
The next page that loads for you will display the information for the new user and allows you to manage
their access. On the top right is a progress bar, as the red X’s turn to green check marks you have
completed that step correctly.
7. Fill out the First and Last name and other information in the empty fields provided.
8. If you have an employee ID you can add that as well, this is not required.
9. If you want this user to receive emails for alerts that have been created add their email address in the
[Alert Notification Email Address] **for more information on alerts see our video.
10. In addition, you can upload an image or photo to associate with this person. Simply click on the
profile circle and it will ask you to select an image from your files.
24
Once the file name is loaded, select upload photo and you’ll see your image appear. Then click save.
You’ll see the image load and you’ll want to select save on the user page.
(Optional) setting up web access for this user. There is a checkbox under the name information for the
person. Web access will allow this user to login to the system and will have a user role that you define as
administrator, operator, human resources, or a card holder.
Select the Edit User Role Button and then you can specify the user role from the drop down options.
What do these roles provide access to?
Administrator: Provides access to view and modify all aspects of the system.
Human Resources: Provides access to view system settings and to modify users, schedules,
holidays/events and access points.
Operator: Provides access to view only alerts, users, schedules, holidays/events and dashboard.
25
Cardholder: Provides this person a login but no actions or view permissions.
After specifying both fields, you can click “create Password” and the Create Password window will pop
up for you to type in your password twice and then click “Save”
11. To add a pin code or badge for this person, click the green + icon next to “Credentials”
A window will pop up, prompting you to add the badge or pin assigned to this person. If this person will
have a badge, you can manually enter the badge ID from the card into the badge ID field. If you choose
to enroll by presenting the card to a reader, simply select the access point you want to read the data
from. (**please note: if you are using an ISONAS credential you will not need to set the bitmask for your
cards, if you are not using an ISONAS credential you will need to set the bitmask.
26
12. Swipe the card at that reader and hit the read button. You should receive the raw data from the
card.
The Raw Data field will populate automatically. Then click the button at the bottom
right corner of that popup window. And you’ll see the credential listed in the “Credentials” portion of
the User page.
If you have a keypad device and choose to use a pin code, you will need to change the selection at the
top from Badge to Keypad Entry.
27
From here you can add a pin of your choice of any length or have the system assign a random pin for
you by selecting the [Generate Random Pin] button.
In addition, you are also able to set a start and end date and time to these credentials and a count limit.
So if you have a visitor or temporary employee you can limit their badge upon the initial creation.
Simply set the start and end date and time in the appropriate boxes and/or the number of times you
want this badge/pin to be used.
28
13. Next you’ll want to move on to specify a people group for this person to be a member. Upon the
initial set up of your system you’ll want to establish some rules around who can go where and when.
This will allow you to build groups of people and doors as well as schedules to allow people in and out.
You want to use groups as a way to manage rules for all users. Groups keep the database simple and
nimble. Individual rules or setting rules for just one user will increase the time to update readers. Only
use individual rules as a last resort. For an overview on how to set rules and schedules here is an
overview video or see the schedules section below.
14. To add this user to a group, Click the Green + icon next to Groups to assign this person to a people
group.
15. Then select the group this person should be in. People groups are usually a group of people with the
same access rights. Creating groups allows you to manage many people with a single group vs. managing
each individual person separately.
29
You’ll get a window pop up with a pull down menu where you can choose from a list of groups you built
previously to assign this person to. You can select multiple groups for this person. Once you’ve chosen
the groups, you can select add and the groups will appear.
16. From here hit the save button and this will automatically link the group rules in the 3rd column. In
the top right you’ll also see that all 4 steps to create a user have a green check mark and this person’s
profile is now complete.
30
17. The final step to adding a user is to update the access points with this new person’s information.
In the top right of the screen is the Update Access point Button. Select this button and the system will
show updating as it sends this new information to the ISONAS hardware (reader- controller or IP-
Bridge).
18. (Optional) you can click the green + next to “Custom Rules” on the lower right portion of the new
user page to specify a specific, when and where, rule for this person’s access.
When clicking that green Plus sign, you’ll get a popup window showing the list of available shifts,
Doors/door groups, and people to choose from to specify your Custom rule for this individual.
You need to specify all 3 pieces (who, when, and where) in the window. Naming the rule and specifying
the rule type is also required before you can click “Add” at the bottom right corner of the window. If you
don’t specify any required information, there will be a message that fades in letting you know what you
missed.
31
6.2 How to Deactivate a User
If you have a person and you need to remove their access you can simply deactivate the person’s user
profile. In the database you only have the ability to deactivate a person and not completely delete them.
This allows us to maintain the data integrity within the database.
1. Login to your Pure Access website (https://www.isonaspureaccesscloud.com)
2. Click the “Users” tab at the top:
3. This brings you to a full summary page of all active users in your system. From here you can take
actions on existing users by selecting their name and then selecting the carrot button to take actions on
multiple users, deactivate users and remove users from groups.
32
Full Summary Page View
4. At the top of the page, you can also select [Show Deactivated Users] and this will take you to a
summary list of who has previously been deactivated.
33
5. To Deactivate a user, you can simply click the check box next to a user, select the carrot arrow and
deactivate the user.
6. If you would like to review the person’s information first, you can select their name and enter into
their profile. Then select the deactivate button on the right hand side of the screen. Then confirm you
want to take this action with the pop up window.
7. The screen will then remove the deactivate button and show the activate button as well as show the
credential as deactivated. This person will then move to the deactivated user list.
34
8. If you need to reactivate this person at any time you can select the user from the deactivated user list
and simple hit the activate button on the right hand side.
a. **please note, if you have reassigned this person’s credential to someone else you will need to assign
another credential to this user. You cannot reactivate the old credential if it is in use by another user.
6.3 How to Enroll a Mobile Credential in Pure Access
1. To add a pin code, badge or a mobile credential for a user, navigate to the Users page, Add or edit a
User and then click the add icon next to “Credentials” on the left side of the screen.
2. A window will pop up prompting you to add a credential. There are multiple options: Badge, Keypad
Entry (PIN) or Electronic (Mobile Credential). Select Electronic to enroll a mobile credential. This will
allow them to use their mobile device to open the door. The process for this is the same as adding a
badge to a user.
3. Mobile Credentials require an enrollment of the device at a reader, simply select which access point
you want to read the credential information from.
35
4. On the mobile device your user should navigate to the App Store on their mobile device, search for
ISONAS Pure Mobile and then download the app to their phone.
5. Next they should present their phone to the reader you selected in Step 3. This will read the
appropriate information from the phone to assign that device to this user.
6. The Raw Data field will populate automatically (see above). Click the button at the bottom
right corner of that popup window. You’ll see the credential listed in the “Credentials” portion of the
User page.
7. In addition, you are also able to set a start and end date and time to these credentials and a count
limit. If you have a visitor or temporary employee you can limit their badge upon the initial creation.
Simply set the start and end date and time in the appropriate boxes and/or the number of times you
want this credential to be used.
36
8. The final step to adding a user is to update the access points with this new information. In the top
right of the screen is the Update Access point Button. Select this button and the system will show
updating as it sends this new information to the ISONAS hardware.
6.3.1 Using the Mobile Credential to unlock the Door Once you have enrolled your user into the Pure Access platform and given them the appropriate access,
see adding a user for more details, they are able to use their mobile phone just like they would have
used their badge.
1. When a user approaches an ISONAS hardware device, they must have Bluetooth® Low Energy (BLE)
turned on, on their device as well as their location services in order for the phone to communicate with
the ISONAS hardware.
37
2. Open the app on the mobile device, the user can simply present their phone to the reader. The
mobile app will show that the reader is in range if they are in close proximity, then it will show
connecting as the reader and phone try to connect, and the LED should go amber (yellow) at this point.
3. The mobile app will show that the credential has been sent and if the user has been granted access in
Pure Access to enter that door the LED will turn green and unlock the door, if they do not have access
the LED will go to red.
6.4 User Defined Fields Pure Access has the ability to add additional fields to a user in order to maintain other important
information in the access control platform. For example: Department, Pin Code or other fields that are
required. If you print badges, all of these fields can be exported with the Data Card Export report and
then imported into a badge printing software.
To add these fields to a user:
1. Go to the Settings Tab on the left hand side, then select User Defined Fields from the secondary
navigation. There are 10 available fields to add to a user profile.
38
2. Simply enter the field name you would like to use, Pin Code, License Plate or Department are
the examples above.
3. These fields will now all appear on the user profile and you can input the appropriate
information.
4. To Enter this information on a user, navigate to the user tab and then select a user.
5. On the user profile page, you will now see these additional fields. Enter the information into
these fields and select save and you are all set.
39
6.5 Setting up Special Credentials
6.5.1 Adding a Toggle Credential
A toggle badge will allow a specific credential to “toggle” a door from an unlock state and then
back to a locked state. For example: if a door is locked, it will set the door to unlocked and can
then reset a toggle unlock to a locked state. If you have an existing schedule, auto-unlock or
badge unlock, the toggle function does not override these unlock states. A toggle lock can only
reset a toggle unlock.
**Please note this is a function that requires the ISONAS hardware to be online and will not toggle the
state of the device if it is offline.
These steps will guide you on setting up Toggle badge for credentials assigned to user IDs in Pure Access.
1. Log into your Pure Access account at isonaspureaccesscloud.com.
2. Click on the “Users” tab on the left hand side.
3. Select the user from the list of people that you want to be able to toggle the door(s) to
locked/unlocked status.
4. If you are adding a new credential to a user as the toggle unlock badge, you can click the Green
+ next to Credentials to add the credential. If you plan to edit an existing credential, click the
gear icon for an existing credential that is assigned for that User.
40
5. To enroll a new credential simply enter the badge ID, present the badge to a reader to enroll by
presentation or add a pin code.
6. The Credential information will populate. The next step is the key for setting unlock toggle
badges.
7. At the top right corner of the badge enrollment is a checkbox labeled ‘Special Properties’, Check
that box
8. You’ll then see more check boxes appear: Check the ‘Toggle Unlock’ Checkbox
41
9. You’ll then see a drop down populate on the window to select an Access Point.
10. Click the drop down and specify either the door or door group you want to toggle state when
this specific credential is presented.
Note: If you select a door group, all the doors in the door group will be able to be toggled individually
when the toggle credential is presented to that door. Only the individual door that reads the
credential will toggle unlock, not the entire door group.
11. Click the Add button at the lower right corner of the window.
12. Credentials that are set with the toggle feature will show a padlock icon next to them.
13. Run a compile by clicking the ‘Update Access Points’ button to inform the readers involved with
the unlock toggle setting you have just set up.
14. In order to ensure your doors are not left in a toggle unlock state, you have the ability to set a
“Re-lock” time for your toggle.
15. Navigate to the Settings page and then under Global Settings you will see a Re-lock time for the
toggle unlock. Simply set the time to your preferred relock time and if the door is in an unlock
state at this time, the door will relock automatically.
42
6.5.2 Adding a Master Credential A master credential simply overrides all rules and schedules and permits access in all doors at all times.
This credential can be a pin code, badge or mobile credential.
1. Log into your Pure Access account at isonaspureaccesscloud.com.
2. Click on the “Users” tab on the left hand side.
3. Select the user from the list of people that you want to be assigned a master credential.
4. If you are adding a new credential to a user as the master credential, you can click the Green +
next to Credentials to add the credential. If you plan to edit an existing credential, click the gear
icon for an existing credential that is assigned for that User.
43
5. To enroll a new credential simply enter the badge ID, present the badge to a reader to enroll by
presentation or add a pin code.
6. The Credential information will populate. The next step is the key for setting unlock toggle
badges.
7. At the top right corner of the badge enrollment is a checkbox labeled ‘Special Properties’, Check
that box
44
8. You’ll then see more check boxes appear: Check the ‘Master Credential Checkbox
9. Click the Add button at the lower right corner of the window.
10. Run a compile by clicking the ‘Update Access Points’ button to inform the devices this credential
now has unlimited access.
7.0 Setting up Rules, Schedules an Events
7.1 Introduction
This guide will review creating Weekly Rules and the items needed for the Weekly Rules. Weekly Rules
provide access to a User with a credential, unlock door(s) on a schedule or provide an Unlock with Badge
schedule. These items are critical to providing access in and out of the building.
There are three items that are critical to creating these Rules. WHO will have access, WHERE will they
have access and WHEN will they have access. These three items are combined when creating Weekly
Rules.
1. WHO - Users and User Groups
2. WHERE - Access Points and Access Point Groups
3. WHEN - Weekly Schedules
A User is a person in the system that we assign credentials and rules to. For example, John Doe is a User,
his credential is Badge 3535 and he is a member the Managers User Group. An Access Point is a reader
controller or port on an IP-Bridge. Access Points can be added to Access point Groups for easy
administration. Finally, the weekly schedule is time and days when Users will have access or the Access
Point will be unlocked.
When creating Rules, it is best practice to use Groups whenever possible. It is far easier to manage a
group of one hundred Users then it is to individually manage one hundred Users. The same is true for
Access Points. When the Rules are created for Groups it is extremely simple to add or remove items as
necessary than to search through dozens or hundreds of items.
7.2 Types of Rules in Pure Access The most common Rule is the Grant Access rule. This is providing access to a group of Users (WHO) to a
group of Access Points (WHERE) during a Schedule (WHEN). There are a couple different ways to do this.
The most common, and simplest, is to simply link a group of Users to a group of Access Points with a
45
Schedule. In the example below, any Users in the IT group have 24/7 access to any Access Points in the
IT Access Point Group.
Figure 1 - Simple Grant Access Rule
A second way to create these Rules is to create User Groups based on Roles in the company and Access
Point Groups by who will need access to those areas. In the example on the next page we have a similar
situation as the previous example. Users in the IT User Group have 24/7 access to any Access Points in
the IT Closet, Common Doors and Electrical Closets Groups. Common Doors may be Access Points that
anyone has access to, the other two groups are specific to different roles in the company.
Figure 2 - Using Multiple AP Groups
The final method of creating Rules is the most complex and is typically used when utilizing our Microsoft
Active Directory integration. In this method Rules are created by directly correlating roles in the
company to Access Points they need access to. In the example below IT Users need access to the
Common Doors into the Building, IT restricted areas and Electrical restricted areas. This is achieved by
putting the User into multiple User Groups.
46
Figure 3 - Multiple User and AP Groups
7.3 Creating Rules in Pure Access The first step is to creating Rules is to determine WHO will need access WHERE and WHEN? Take a piece
of paper, open a spreadsheet, etc. and make three columns. One column will be who, the second where
and the final column is when. This could be as simple as providing 24/7 access to everyone to all doors.
It can also be very complex restricting Users to certain doors during certain times. Review the different
scenarios and look for any overlap or room to simplify your rules. In general, keep Rules as simple as
possible. Remember you will now have a digital audit log of who went where and when! Once
everything is written out and documented it is time to start creating our Groups!
In the following steps, we will review a tenant in Pure Access creating a rule for their cleaning crew that
cleans in the evenings and Saturday. For this example, it has been identified anyone who is part of the
cleaning crew will need access at certain doors Monday to Friday 5:30pm to 11:30pm and Saturday
8am-5pm.
Step 1 – Creating User Groups (WHO)
Creating User Groups is extremely easy. Login to your Pure Access tenant and click on Users User
Groups and click the Add User Group button. The only thing mandatory here is
to give the group a name and click Save.
47
Figure 4 - Adding a User Group
If there are already Users in Pure Access, they can also be added here be clicking the add button in the
lower half of the screen (see above figure). Select the User(s) to be added to that group and click the
Add button in the popup window (see figure on next page). In this case Jan Kowalski and Anders
Anderson are part of the cleaning crew so we will add those people to the Group.
Figure 5 - Adding Users to a Group
48
Figure 6 - Users in the User Group
Step 2 – Create Access Point Groups (WHERE)
Creating Access Point Groups is extremely easy. Login to your Pure Access tenant and click on Access
Control Access Point Groups and click the Add button. The only thing mandatory here is to give the
group a name and click Save.
49
Figure 7 - Adding an Access Point Group
If there are already Access Points in Pure Access, they can also be added here by clicking the Add button
in the lower half of the screen. Select the Access point(s) to be added to that group and click the Add
button in the popup window. For this example, the cleaning crew will have access to Teachers Entry
where they will enter the building, Maintenance Room and Front Office.
Figure 8 - Adding Access Points to a Group
50
Figure 9 - Access Points in the Group
Step 3 – Create Weekly Schedules (WHEN)
Creating Weekly Schedules is very easy. Click on Access Control and then the Schedules tab below the
main menu. Add a new schedule by clicking the Add button.
Figure 10 - Weekly Schedules Page
51
Provide a name and choose a Schedule type:
Non-Holiday – This schedule will apply unless a Holiday is set to override it
Holidays – This schedule will apply precedence if it is a Holiday that day
Always – This schedule will work regardless a Holiday is scheduled or not.
Set your days using one of the predefined sets or choosing specific days. Finally choose the hours the
schedule is active and click the Add button. The cleaning crew needs access Monday to Friday 5:30pm to
11:30pm and Saturday 8am to 5pm. They will also need access during Holidays as they still come in on
those days.
Tech Tip!
When creating schedules clearly label the schedule and do not
use a schedule for more than one purpose! For example, do not
use a schedule used for Grant Access for an Unlock schedule. If
a schedule is assigned to more than one Rule changing the
schedule will change all the Rules using it!
52
Figure 11 - Creating a Weekly Schedule
Step 4 – Create Weekly Rules
Now that the Groups and Schedules have been created, you can put all of them together and create the
Rules.
Click on Access Control and add a new Rule by clicking the Add button.
Figure 12 - Weekly Access Point Rules Page
53
In the new pop up window the Rule can be configured. There are three types of Rules:
Grant Access – Anyone added to the User Group will have access to the group of Access Points
during the schedule assigned.
Auto Unlock – Any Access Points or group of Access points will unlock and relock using the schedule
provided. Users are not associated with this rule type because no badge is required to change the door
state.
Auto Unlock w/Badge - Any Access Points or group of Access points will unlock and relock using
the schedule provided if someone in the User Group assigned is presents their badge during the
schedule assigned.
Once the rule type has been chosen simply drag and drop the WHO / WHERE / WHEN items from the
left side to the right side of the screen. The left side being the available items configured and the right
side being the items in the rule itself. Alternatively, the radio button can be clicked and the green
greater than symbol can be used to move items over. Only one portion of the available items (WHO,
WHERE, WHEN) will be shown at any one time. Click on the line to show the other items.
The three items created in the previous steps will be combined into the Weekly Rule that will provide
access to our cleaning crew. This will be a Grant Access rule and we simply move our groups and
schedule from left to right and click Add.
Tech Tip!
While it is possible to create rules from individual Users and
Access points it is strongly discouraged. Groups are far
easier to configure and administrate as the system grows.
54
Figure 13 - Creating the Weekly Access Point Rule
To edit this rule in the future, you simply select the three dots on the right hand side of the rule.
Step 5 – Create Holidays (If Necessary)
Creating Holidays is very easy. Click on Access Control and then the Calendar tab below the main menu.
Add a new Holiday by clicking the Add button next to Holiday. Simply fill in the name and date(s) and
click the Save button. After saving the dates will show up on the calendar providing a visual
representation (see figures on following pages).
55
Figure 14 - Calendar Page
Figure 15 - Configuring the Holiday
56
Figure 16 - Holidays Displayed in Calendar
Frequently Asked Questions
My schedule needs to span across midnight, what do I do?
You will need to create two schedules. One ending at 23:59 and the second one starting at 00:00
I created a Rule but it doesn’t seem to work!
Remember to Run an Update in Pure Access, this button is in the top middle of the screen.
57
7.4 Scheduled Events and Holidays In addition to your normal weekly schedules you will most likely also need to set up special events or
holidays that do not follow your usual schedules. To handle these onetime events or holidays,
scheduled events and holidays will apply these schedule changes.
**Please Note: When utilizing a holiday, if your regular schedule is set to an Always type, a holiday will
not override that schedule. If you set your schedule to a holiday
7.5 Setting up a Holiday: 1. When setting up a holiday, navigate to the Access Control tab and then to the calendar tab.
2. This will take you to the calendar view for all holidays
and events. From here select the add holiday button on
the right hand side. Figure 2
3. You can also click on the date you’d like to establish the
holiday and the add holiday and add event buttons will
appear. Figure 3
Figure 3
Figure 2
58
Partial Holidays:
You can also establish a partial holiday
by selecting the partial holiday check
box. When selecting this option, you
will be prompted to select the start
and end time of the partial holiday.
Use Case: If your building is open from
8am until noon and you have a regular
auto-unlock schedule, this partial
holiday will allow you to set up a
holiday from noon until 5pm and the
holiday will override your auto-unlock
schedule, setting your doors to locked.
4. From here name your holiday, enter the start
date, a description if you prefer. Holidays can
span multiple days, so if you have two or more
days in a row of a holiday schedule you can
establish them all at once vs. individually.
59
4. Once you have entered your holiday hit the save button. To see your holiday, navigate to the
month you set the holiday. On the right hand navigation, you can select the month and year
from the drop down or select the month by using the scrolling buttons to move from one month
to the next.
5. When you select the month, all holidays that are currently scheduled will also appear in a list
format. You can select these holidays and make edits if need be.
6. In addition to the list view, you can also see all of the holidays in the calendar view.
7. Once you have a holiday set, this holiday will override any schedule that is set to a non-holiday
schedule. If you established a schedule as an always schedule, a holiday will not override that
schedule.
60
8. If on a holiday you want to provide access to the building you can set a schedule specific for that
day to grant access, auto-unlock or auto-unlock with badge. To establish a holiday schedule, go
to the access control tab and then schedule to establish this schedule. First create the holiday
schedule and then build a rule linking the user groups, access point groups and the holiday
schedule.
9. In the screen shot below the example this represents would be, I have a regular schedule set as
a non-holiday that occurs M-F with an auto-unlock of 8am-5pm. During Thanksgiving I want
only certain admin people to have access and the doors to be locked for all other users. So I set
my holiday in the calendar as described above and then in the access control tab under
schedules I establish a holiday schedule, specific to the days of Thanksgiving Holiday(Thursday
and Friday). When the day is recognized as a holiday, then the hardware devices will follow the
holiday schedule established below.
10. Once the schedule is set you’ll need to connect the users and the access points into a rule, just
as you would for a regular schedule. See weekly schedule creation above in section 7.0 page 45.
61
7.6 How to Create an Event
Creating an event is much like creating a holiday. Except that during an event you can take more actions
than just overriding a schedule. You can set an auto-unlock, auto-unlock with badge presentation,
lockdown doors or just lock doors for specific periods of time and day(s). Most users will utilize an event
for something after hours like a parent-teacher conference, an open house or after regular hours
sporting event.
**Please Note: for the most consistent performance of events, please ensure your hardware is on the
following firmware versions or newer. RC04 – V74.06, RC03(CF62.01/32; CL 30.01/14), IPB- 11.03/57.
1. To set up an event, simply navigate to the Access Control button and then select Calendar from
the secondary navigation
2. Then select the add event button on the right hand side of the screen. This will present a pop
up where you set up the details of your event. See figure and details below.
62
3. Once you have added your event, select the save button. To view your events, they will display
on the calendar as well as on the side navigation
Add a name and Description(optional)
Select the date and start and end time of your event
Select the access point or access point groups that this
action/event should effect
Select the type of access.
- Auto-unlock will unlock the access points selected above for
the time of the event
- Auto-unlock with badge will unlock the access points
selected, ONLY when a badge has been presented
- Lock will down the door during this time period
- Lock Down will lock down the access points selected during
this event
63
4. If you need to edit or delete your event, simply select the event from the list view and it will
bring the event details up and you can edit or delete the event from this screen.
8.0 How to set up the Dashboard in Pure Access The dashboard in Pure Access allows you to monitor your system in real time, take actions on specific
doors or groups of doors and provides the ability to search and find events quickly. You can create an
unlimited number of dashboards for various applications.
Configuring the Dashboard in Pure Access can be done in a few easy steps.
1. Select the + dashboard button on the right hand side of the screen to bring up the “Create New
Dashboard” option.
2. There are two types of dashboards that can be created, the standard dashboard that shows
individual doors, multi door or history display or a floor plan view. Select which view you want to
see and then you can assign this dashboard to a specific area or user group to limit the view.
3. You can then give different users visibility to specific types of dashboards and activities. For
example, a web access user defined as an operator can only view the dashboard specific to the
operator role – usually the admit button.
4. In addition, you can assign dashboards by area. So in the event you have multiple buildings and
you need to restrict views to the user for a specific building you can utilize areas.
64
5. If you select the general view you can then customize the 3 main widgets. The bottom view
defaults to a history view that shows all events and activity in a list form.
From the Dashboard screen, select what you would like to monitor from the dashboard by pressing the
6. This will bring us to the Dashboard Configure options.
7. There are 6 options for the Layout of the Dashboard. Single Access Point, Multiple Access Points,
History, Access Point Admit, Lockdown Access Points and User Profiles.
65
Single Access Points allow you to track and monitor real time activity, status as well as take actions on a
single door.
Multiple Access Points allows you to track and monitor real time status and take actions on multiple
doors (up to 12).
History view provides the ability to see real time monitoring of access points but provides further
abilities to filter to specific people, events or actions.
Admit and Lockdown Access Points allow you to configure buttons to take immediate actions, whether
it’s a lockdown or an admit. The lockdown function also allows you to reset a lock down to its normal
state.
User Profiles allow you to view a user’s image along with the event or activity that happened at a
specific door or group of doors.
8. Select the option you want to view and then press the Next button to select the appropriate
door/group of doors or events.
8.1 Adding a Single Access Point Widget If there is one main door that needs to be monitored more than others, this is the place to put
it. It will show the history of a door of your choice and you can customize which events on the
door are displayed.
1. To set up your single access point view, select the access point from the top drop down,
then below you can select or unselect the events that you would like to see on the
dashboard.
2. Once you have made all of your selections hit the done button.
66
3. Once the dashboard is set up you can see the status, activity and the schedule the door is
following.
4. The top drop down also allows you to select actions to take on the door. Schedule will return
the door to the current schedule it should be following. This can also be referred to as a
‘normal’ state. For example: if you have a grant access schedule in place and you select the
unlock function, when the unlock is set back to schedule the door will return to locked.
67
68
Below is a further description of the single access point dashboard and the notifications.
Schedule, locked or
Unlocked shows the
state of the door lock
The Admit button
allows you to take
actions on the door
If a door sensor is
present, the state of
the door will be
displayed.
The icon on the right
side also shows you
the type of event
Shows the latest
activity, person and
time stamp of activity
Door Status Shows the
schedule the door is
following
69
8.2 Setting up a Multiple Access Point Widget This window will allow you to monitor and control the status of many Access Points in your system.
From this view you can take actions to lock, unlock, admit or lockdown Access Points from this window.
The image below will show you the widget before it is set up.
1. To add doors, simply click the green plus button and the list of doors will appear. Select the
door you want to display and hit done.
2. Once you have the doors selected you wish to add select done. You do not have to add access
points to all positions.
70
3. In order to take actions on these doors, simply select the door from the view and then select the
option from the drop down menu or select the admit button.
4. The icon in the top right hand corner will allow you to edit your selections on the dashboard.
8.3 Setting up an Access Point Admit Widget This window is useful when you have one Access Point that needs to be opened manually from the
system (a receptionist that monitors and provides access). You can grant access with the single push of
a button.
1. To set up this dashboard widget, simply select the access point admit button. Then select the
door from the drop down list. This button will only apply to a single door.
71
2. To perform an admit, simply select the green admit button and the icon will change to an arrow
showing the door is open. The door will remain open for the duration of the latch interval set
on the access point configuration.
8.4 Setting up the Lockdown Access Points Widget This widget is to set a lockdown to your Access Points. You can set it up to lockdown all Access Points, a
single Access Point, or a group of Access Points.
1. To trigger a lockdown, simply select the lockdown button
72
2. Upon a lockdown you will be reminded that only a master badge can override a lockdown.
3. Once a lockdown is in place, only a master badge or the reset button from the lockdown widget
can reset the lockdown status.
8.5 Setting up a User Profile Dashboard Widget This dashboard widget allows you to see a user’s image along with real time events so you can monitor
and match a user with their events.
1. To set up this widget, select the green plus to add a widget, then select the user profile option.
2. Next select the door, door group or multiple doors you would like to monitor the user images
with.
73
8.6 Setting up a History Widget A history widget is set as the default for the bottom widget on a dashboard. You also have the ability to
add an additional history widget at the top if you prefer to monitor a specific door or group of doors.
The configurations and set up are the same for both widgets.
1. To set up the main history widget, simply select the tool icon on the right hand side of the
history dashboard.
2. From here select the users, access points, event types and badge ID’s you would like to see in
this view. Click on the category (ie: users or access points) on the left hand side, then the full list
of items from that category will appear to the right. For example, if you select users, the list of
all users and user groups will appear to the right.
3. You can use the search box at the top to search specific doors, users, events or badge ID’s.
Access Point
where event
occurred
and time
stamp
Event Type
Description Badge ID if
applicable
User image
assigned on
user profile
74
4. If you have a specific start date or time you would like the history widget to reflect, you can add
that to the right hand side as well.
5. Once you have all selections made, select the Done button.
6. On the widget you will see the access point, the time and date stamp of the event along with the
specific event, the badge ID(if applicable) and the Name of the person the event is associated
with.
75
7. You can expand the view of the dashboard by selecting the arrows on the right hand side. This
will expand the view to be the complete screen allowing you to see more of the history. To
minimize the view, simply select the arrows again.
Event Type Descriptions:
Event Event Description
Approved Access User presented a badge or pin and it was accepted
Declined Access User presented a badge or pin and it was not accepted
Lockdown activated A lockdown of access points was activated
Unlocked Access point An access point was set to an unlocked state from the dashboard
Admit An admit was granted from the dashboard
Locked/Normal Access point Device returned to the normal access point schedule. (this is referred to as schedule)
Offline The hardware device is no longer connected to Pure Access
Aux Admit Aux admit occurred from an input button tied into the device.
76
REX Admit There was a REX event on the device, opening the door unless this was set to ‘report only.’
Extended Open
Unauthorized Open
Compile Send A compile was sent
Compile Failed A compile was sent but did not reach the device
Compile Complete The compile process has finished.
Status Only
Decline No Badge The badge is read, but the badge information has not been sent to the hardware device.
Decline No Timezone A badge was read, the badge has been sent to the device via a compile, but the badge is not valid for access at the time it was read (ie: A badge has access for the 9 AM-5 PM schedule, but was swiped at 8:30 AM).
Decline Lockdown A badge is decline because a lockdown is in place
Decline Tamper A credential is declined because there is a tamper alert
Device Disconnect The hardware device has been disconnected from the software
Device Connect The hardware device has connected to the software
Auto Unlock An auto-unlock schedule has started
Badge Unlock A badge unlock schedule has started. The user presentation before this event is the credential that started the badge unlock.
Decline Approved
Lockdown Ended Lockdown has been reset to a normal state
9.0 Pure Access Alerts and Notifications Pure Access has a common access control feature called Alerts. Alerts or alarms as they are sometimes
referred to, notify users that there may be an event/action in their system that is not following the
current rules and they should investigate. In Pure Access we support the following alerts:
1. Unauthorized Open 2. Extended Open 3. Tamper 4. Aux Alarm 5. REX Alarm 6. Credential Rejected/Expired/Overlimit
If you would like to use these alerts, you will need to set up the access point configuration for these
alerts to be in place. Below is further information on each alert type, what conditions will trigger the
alerts, and a brief overview of the new alerts dashboard. Email notifications are also included in this
release and require a user to have web access and an email to be setup before an email alert can be
sent.
77
To view alerts, in the top right hand navigation, there is a quick link that displays a bell. This will notify
you that there is an unacknowledged alert when a red dot is present. Selecting this icon will take you
directly to the alerts dashboard.
9.1 Alert Types and Set up Procedure: 1. Unauthorized Open – Unauthorized Open is an alert that is intended to notify the user that a
door was opened without a valid admit. a. Causes - The main cause of this alert would be a forced entry where someone opens the
door in a way that breaks the contact on the door position sensor. Other causes of this alert could be improperly installed door position sensors, or faulty wiring.
b. Physical Requirements - In order for a customer to utilize this alert they will need to install and enable door sense under the specific doors that they would like this alert to function on, if the door sense is not enabled the alert will not work.
c. Set up - After the user has installed the door position sensor on their door the user can then log into Pure Access
i. Select the “Access Control” tab, ii. Select the “Access Points” tab,
iii. Select the reader they would like to modify by clicking on the access point, and complete the Door Sense test. This test will require the reader to be talking to Pure Access.
iv. Simply click set up, it will ask the user to open the door, then to close the door, click save and you’re done. Users will then begin to see this alert trigger at the top of their page when the conditions required to trigger it are met.
2. Extended Open – Extended Open is an alert that is intended to notify the user that a door was left open after a valid admit.
a. Causes - This alert will trigger when a door is open past its latch interval plus the extended open threshold. We recommend that users set the extended open alert to only trigger after 15 or 30 seconds as if the threshold is not long enough for a person to hold a door open for another person this alert will constantly be going off.
b. **If customers need a door to be open for a longer extended period of time we recommend that they utilize a toggle badge which will disable the extended open alert until the door is re locked with the toggle badge.
c. Physical Requirements - In order to set up the Extended Open alert the user will first have to install a door position sensor on their door.
78
d. Set up - After the user has installed the door position sensor on their door the user can then log into Pure Access:
i. Select the “Access Control” tab, ii. Select the “Access Points” tab,
iii. Select the reader they would like to modify by clicking on the access point, and complete the Door Sense test. This test will require the reader to be talking to Pure Access.
iv. Simply click set up, it will ask the user to open the door, then to close the door, click save and you’re done. Users will then begin to see this alert trigger at the top of their page when the conditions required to trigger it are met.
v. After the test has been performed the user will need to set their “Extended Open Threshold” which can be found under the “Alerts” tab, and then the “Settings” tab.
3. Tamper – Tamper is an alert that is intended to notify the user when the reader needs to be visually inspected as it may have been tampered with. In order to reset the tamper alert you will need to re calibrate the readers tamper sensor.
a. Set up -In order to set up the Tamper alert the user will first have to install the reflective sticker that comes in all of our installation packs. We recommend that the user wire up the door position sensor before attempting to install the sticker which goes behind the reader.
i. Place the sticker on the wall behind where the readers “eye” is and securely mount the reader. After the reader has been securely mounted plug the reader into its power source which will then automatically begin to calibrate.
ii. After the user has installed the reader on the wall with the sticker then the user can then log into Pure Access:
1. Select the “Access Control” tab, 2. Select the “Access Points” tab, 3. Select the reader they would like to modify by clicking on the access
point, 4. Scroll down to where they see “Tamper” on the left side, 5. Select the drop down box that says “Enable” and click save. It’s
important to not remove the reader from the wall after this step as that will cause it to trigger the tamper.
Below is an image of the Access Points screen with the two configuration areas outlined in red.
79
Below is an image of the alerts screen. By default the screen should refresh and show new alerts when
it’s clicked. There are three states an alert:
1. New (will show and trigger count) 2. Acknowledged (will show but not trigger count) 3. Cleared (will not show and will not trigger count).
To take an action on an alert, select the specific access point or points and then select the carrot on the
top left. From here you can clear, acknowledge, add/edit a description.
80
If a user wants to see or filter alerts they can do that by modifying the options on the right side of this
screen. If they want to see Cleared alerts they need to click the box that says “Cleared”.
81
9.2 Alert Settings Below is an image of the Alert Settings screen. In this screen users can configure their Extended Open
Threshold for the Extended Open alert as well as Auto Clear Specific Alert Types (but still log them),
Disable Alert Types (totally disable alert), and set up Email Notifications to specific users.
Auto Clear and Disable Alerts
9.3 Set up Email Notifications for Alerts
When Alerts occur you have the ability to trigger an email to specific users, during specific times for
specific alerts. Below is the view of how to set up the notifications. You can establish the time range to
be alerted, the users (please note: to be notified users must be set up as web access users in their user
profile. So if you do not see a user listed, it’s because they do not have web access privileges).
Then you can select the alerts that will trigger an email on the right hand side of the page.
82
Full Alert Settings Page View
83
10.0 Pure Access Reports There are a variety of reports that can be utilized within Pure Access. These reports can be run by start
date and end date, filtered by users, access points, event types, badge information and areas. All
reports can be exported as a PDF or csv for further analysis. In addition, all headers on the reports can
be selected and the report can then be sorted ascending by that field. Select the header again and it will
sort the report in descending order.
10.1 History Report 1. The history report shows all history on your system by access point, time, the type of event and
the name of the person and badge/pin that activated that event.
2. To run a history report, navigate to the Reports tab and then select the History report in the top
navigation.
3. On the right hand side of the report you can set filters around what data you would like to
report on. So if you are looking for a specific event, or person, simply select the down arrow to
expand the field and select the user, door(s), event type, badge ID or area.
84
You can also set a parameter on the From and To
date and time allowing you to narrow down your
reporting and search.
Once you have the filtering the way you’d like,
select the Run Report button on the top right. The
report will generate on your screen showing the
data you requested.
All reports can be exported as a PDF or a csv file.
Simply select the Save as PDF or Save as CSV to
export your report.
Tech Tip: Select the Arrow to expand
the fields and choose specific users,
access points, event or areas
85
10.1 Users Report
Users Report View
The users report allows you to review the users on your
system, their badge ID or pin assigned along with the
GUID assigned. If they have web access to login to the
platform their email login ID will also be displayed. If
they are not assigned a login this field will show N/A.
The user report can be run and filtered by specific users
or user groups by filtering appropriately. In addition to
being able to filter by user or group, you can also filter
by area.
Please Note: If there are multiple active badges
assigned to a user, they will all show in this report.
Like all reports this can be exported as a PDF or a CSV.
86
User Report by User Group
If you filter the report by user group, you can see the user groups and then all users and badge ID’s that
are in those specific user groups. This will allow you to audit your user groups and ensure the
appropriate people are on the appropriate group.
User Group Report View
87
10.3 Access Points Report The Access points report is very similar to the users report. It provides a list of all active access points,
their MAC address, and their test status along with any description that has been entered.
This report can be filtered for a specific access point or for a specific area by using the filter menu on the
right hand side. Image Below.
88
Access Point Group Report
To review which access points are in which access point groups, you will want to utilize the access
point group filter. Simply select Access Point Groups on the filter menu, then select any specific
groups or areas and hit run. This report will then show the Access Point group, the access points
assigned to that group and their MAC address in addition to their test status.
89
10.4 Schedules Report The schedules report allows you to see active schedules in your system with the specific type, day,
start and end times and if they are valid.
Schedules report can be filtered by type, specific schedules
or area. Here is a reminder on the definition of schedule
types:
Schedule type:
Non-Holiday – This schedule will apply unless a Holiday is
set to override it
Holidays – This schedule will apply precedence if it is a
Holiday that day
Always – This schedule will work regardless if a Holiday is
scheduled or not
90
10.5 Holidays Report
The holidays report provides an overview of all currently scheduled holidays in the system. You can use
the start and end date filter to show you all past, current or future holidays to ensure you have all
appropriate holidays in place. This report can also be filtered by Area to view just the holidays if
applicable to a specific area.
91
10.6 Attendance Report The attendance report shows the in and out activity for users. The report reflects the first in and final
out time and does not capture time in between these. For example, if a user enters at 8am, exits at
noon, comes back in at 1pm and then out again at 5pm – the report will reflect an 8am time in and a
5pm time out and show the total time of 9 hrs.
The attendance report can be run for a specific
day and then filtered by users and areas.
The report can also be run by user groups to
aggregate the report by groups instead of by
specific users, keeping the report simple.
92
10.7 Permissions Report The permissions report shows a collective view of all rules;
who can go where and when they can go there. If you
have set up all rules by user group, then this report will
only populate when you select the user group option. If
you set up individual rules by user, then those rules will be
reported by selecting users in the filter.
93
Field Descriptions:
Name: this represents the name of the user group or user if you have individual rules assigned
Access Point: this is the list of doors that are included in the rule.
Rule Type: is the type of action that takes place during this rule
Grant Access – Anyone added to the User Group will have access to the group of Access Points during the schedule assigned and the door will remain locked until a badge is presented at which point it will unlock for the duration of the latch interval.
Auto Unlock – Any Access Points or group of Access points will unlock and relock using the schedule provided. Users are not associated with this rule type because no badge is required to change the door state.
Auto Unlock w/Badge - Any Access Points or group of Access points will unlock and relock using the schedule provided if someone in the User Group assigned is presents their badge during the schedule assigned.
The Rule type lists that name of the rule and provides a hyperlink to the rule within the application so
you can review the rule and make changes if necessary.
94
10.8 Data Card Export Report This report will allow you to export all user data. With the user export, you can import this information
into a 3rd party badge printing application, our current partner is Entrust Datacard. Or import user data
into other systems that will accept a csv import.
On the initial report display only 6 fields are shown, the additional dots to the right represents the
remainder of the fields. Once exported, all of the data will be displayed in the csv file, details below.
This report can be run by specific dates according to when people were created in the system as well as
filtered by user and area.
95
10.9 Scheduled Reports In addition to on demand reports, you have the ability to schedule a specific report to run on a specific
day and time and then provide an email. The following reports are available to be scheduled; History,
Users and User Groups, Access Points and Access Point Groups, User Attendance and Group Attendance
as well as User Permissions and Group Permissions.
To set up a scheduled report
1. Go to Settings and then Scheduled Reports
2. To create a new report, select the + Report button and then enter the name of the report and
select save.
3. From here you will choose the report type , apply the appropriate filters, set who should receive
the email of the report and set the day and time.
96
4. First, Select the Report Type from the drop down. This is the list of all current reports available.
5. Depending on the report you select, the appropriate filters will appear. Select the filters you
want on the report. For example, if you chose the History report you can filter by user, access
points, event types or badge ID. See specific report details above for filtering options
97
6. Next you’ll select the people you would like the report to be emailed to. From the list you will
see all users.
7. From this screen you can search for a user in the search users box. In addition, you can filter the
list to just show users that have web access. These users already have an email address
associated with their user profile and will be able to receive the scheduled report.
8. Once you have selected the users to send the report to, you need to set the time, time zone and
day(s) you’d like the report sent.
- Report Time is set on a 24-hour clock and can be set by hours and minutes
- Time Zone pertains to which time zone you’d like the report time to follow. The default is
the same time zone your tenant is set to. If you’d like the report sent on a different time
zone, simply select from the drop down.
o Why would I use this? If you have separate locations across geographies, you have
the ability to run a report based on specific areas by utilizing the filtering and then
set the time zone.
9. Next you have the option to select how often you want the report sent. You can send this on a
specific day each week, every day of the week or multiple days per week.
10. Once you have everything set, simply save the
report. The report will be saved on the left
hand side and you can edit this report at any
time.
98
11.0 Custom Rules Custom Rules provide the ability to set IF, THEN actions in the Pure Access system. You can script a
process to trigger an action in response to a specific event or action. The process allows you to select if
a specific action occurs to a specific door, person or during a shift then a follow up event should occur.
For example: If you want to trigger a lock down on your system with the press of an auxiliary button you
would use custom rules. The If action would be a an aux input is triggered at a specific door then the DO
action is lockdown a specified door/group of doors.
**Please Note: Custom Rules are a function that require a connection to the Pure Access software. If an
ISONAS device is offline or disconnected, a custom rule will not be triggered.
11.1 Creating a Custom Rule 1. Select the Access Control tab in the main navigation and then Select Custom Rules from the top
navigation.
2. To create a new custom rule, select the add custom rule button on the right
hand side.
3. Next Choose a Custom Rule Name
4. Once you have selected the name, you will see a rule created with the name at the top and this
rule has been added to the active custom rules list. Now you can begin to create your rules.
99
5. First you will need to select the IF function and the master condition by choosing the gear
icon and this will show the list of IF functions available in the drop down list.
6. Simply select the IF condition you would like to trigger your DO action. In the example of using a
custom rule to trigger a lockdown upon an aux input button: the IF function should be an AUX
input is triggered.
7. Then select the specifics of that action, if the action is performed by a specific user, user group,
or is performed during specific schedules. The custom rules engine will then prompt for a
specific user, group or schedule.
100
**Please Note: The green check mark allows you to select the action or you can cancel your selection by
choosing the grey x. If you choose to delete a condition, you must delete the sub conditions first before
deleting the master conditions.
8. When you are prompted to add a user/user group, schedule or door, you select the green plus
and the appropriate selection will appear. In the screen shot below, we selected an action at a
specific access point and in the access point box we can select a specific access point or an
entire access point group.
**In the example of a lock down, we could specify a specific access point where the aux input
occurred. In the screen below we would select the access point.
9. Once you have the IF selections identified you’ll need to set up the DO actions. This is the action
that will occur when the IF selections are fulfilled.
10. The same logic and process applies to the DO actions, once the master action is selected you will
be prompted to select the specific user, user group, access point, or access point group.
101
11. In the lock down example we have selected the master condition of Lockdown a specified
door/door group and selected the high security doors as the specific door group.
12. The complete custom rule will look like this.
13. For a lockdown rule, you may also want a rule to reset the lock down. Simply add another
custom rule that will reset a lockdown when a specific badge or user pin code is presented. If
may look like the below example.
102
11.2 Changing a Custom Rule 1. You have the ability to change a custom rule at any time. Simply select the gear icon next to the
portion of the rule you need to change and make the new selection. Then choose the green
check mark.
2. If you want to delete a custom rule completely, select the gear icon next to the name of the rule
at the top of the screen. Then select the red trash can.
Still Have Questions?
For Further information about Pure Access feel free to utilize our youtube channel where there is a
complete video library with tutorials on the platform or visit our support portal for tips directly from our
support team.
Should you run into an issue, feel free to reach out to our support team at [email protected].