Skip to main content

Securing Your Server

Your SAS Radius server holds your customers' data and controls your network. Follow these recommendations.

Accounts

  • Change the default admin password right after installation, and the server console passwords.
  • Give each staff member and reseller their own manager account with the smallest permission group they need.
  • Enable two-factor authentication for administrators (account menu → Profile → 2FA Setup).
  • Use Enforce Manager Password Strength, login captcha and Block manager login after login fails (Settings → general settings / web).
  • Give permissions marked (Dangerous!) only to trusted staff.

Network

  • Allow incoming traffic only where needed: RADIUS (UDP 1812/1813) from your routers, the web panel (80/443) from your offices or VPN.
  • Don't expose SSH to the internet. If remote SSH access is needed, allow it only from known addresses and use keys instead of passwords.
  • Allow outgoing traffic, at least to license.snono.systems and the update servers.
  • Use HTTPS with a valid certificate for the panel and user portal.

Data

  • Enable daily backups to a separate disk and Google Drive, and download a copy regularly.
  • Install SAS Radius updates (Tools → System Update).
  • Review the System Log for unexpected logins or security/violation events.

If the server shows unusual high CPU or unknown processes, it may be compromised. Contact Snono support immediately and don't reboot or delete anything before evidence is collected.