Manuais de utilizador para Symantec Security Expressions Server

índice analítico

• Contacting Us

  1
• contacting us

  1
• Technical Support

  3
• Contacting Technical Support

  3
• Other Products

  5
• SecurityExpressions Console

  5
• other products

  5
• Overview

  7
• About SecurityExpressions Audit & Compliance Server

  7
• ASP.NET

  7
• Microsoft IIS

  7
• Self-Service Audit

  9
• What is Self-Service Auditing?

  9
• Self-Service Audit Agreement

  9
• How to Audit your Local Computer

  9
• Configure Servers

  11
• About Server Configuration

  11
• Local Server Settings

  11
• About User Roles

  11
• Pages with Role Settings

  11
• server settings, configuring

  11
• Viewing Audit Results

  12
• Setup Page

  12
• Database Connection

  12
• Microsoft SQL Server

  12
• Secure Connection

  13
• https

  13
• IIS

  13
• SSL

  13
• Secure Sockets Layer

  13
• Credential Store User

  14
• Creating Credential Stores

  14
• SecurityExpressions Console Credential Stores

  15
• Software Registration

  15
• Site Preferences

  15
• license key

  15
• registration

  15
• SecurityExpressions Console

  15
• Other Servers Local Settings

  16
• Page Access

  16
• servers

  16
• settings

  16
• Item Rights

  17
• Global Machine List Access: User Roles

  17
• Machine Lists, global

  17
• ML Access

  17
• Policy File Library

  18
• Library Synchronization

  18
• synchronization

  18
• updates

  18
• About Policy Files

  19
• How System Scores are Calculated

  19
• calculating system scores

  19
• rule weights

  19
• calculating system

  19
• weights, rule

  19
• SIF files

  19
• Example

  20
• Target Options

  20
• Agent & Service Configuration

  20
• private key

  20
• SSH Agent Authentication

  20
• WMI

  20
• SSH Agent Authentication

  21
• Database Cleanup

  22
• Event Log Settings

  22
• Audit Data Cleanup Tasks

  22
• database cleanup

  22
• event log

  22
• cleanup, database

  22
• log, event

  22
• Self-Service Audit Agreement

  24
• Agent Downloads

  24
• Site Preferences

  24
• agents, downloading

  24
• version number

  24
• Audit-On-Connect

  27
• What is Audit-on-Connect?

  27
• Policies

  27
• Policies Page

  27
• Policies Table

  27
• Adding Policies

  29
• Editing Policies

  30
• Deleting Policies

  31
• Configuring with Run-Time Policy Variables

  31
• Scopes

  33
• Scopes

  33
• Scopes Table

  36
• Active

  36
• netmask

  36
• Deleting Scopes

  37
• DNS Domain Name Scopes

  37
• Expression Scopes

  37
• DNS domain names

  37
• expressions

  37
• wild cards

  37
• Org Unit Scopes

  38
• Detection Method Scopes

  38
• detection methods

  38
• organizational unit

  38
• OU

  38
• Device Type Scopes

  39
• IP Range Scopes

  39
• Machine List Scopes

  39
• Windows Domain Scopes

  39
• Notifications

  39
• Notifications

  39
• device type

  39
• notifications

  39
• Creating New Email Notifications

  41
• Creating New Command Notifications

  41
• Deleting Notifications

  42
• Notification Variables

  42
• notifications

  42
• notifications

  42
• Exceptions

  43
• Exceptions

  43
• MAC Address

  43
• Deleting Exceptions

  44
• Connection Monitors

  44
• Connection Monitors

  44
• Active Directory Connection Monitor

  44
• DHCP Connection Monitor

  44
• Generic DHCP Connection Monitor

  44
• Configuring Connection Monitors

  45
• Enabling Connection Monitors

  45
• Connection Monitor

  45
• password

  45
• Connection Monitor Configuration File

  46
• First Available

  46
• Round Robin

  46
• Processing the Configuration File

  48
• Configuration File Syntax

  48
• configuration file

  48
• configuration file syntax

  48
• Network

  49
• Slow Links

  49
• slow link

  49
• Trace Route Information

  50
• Network Admissions Control

  50
• Cisco NAC

  50
• NAC

  50
• Network Admissions Control

  50
• Audit on Connect Tracing

  52
• Audit on Connect Tracing

  52
• Audit on Connect tracing

  52
• tracing, Audit on Connect

  52
• Audit-On-Schedule

  55
• What is Audit-on-Schedule?

  55
• Policies

  55
• Policies Page

  55
• Policies Table

  55
• Adding Policies

  57
• Editing Policies

  58
• Deleting Policies

  59
• Configuring with Run-Time Policy Variables

  59
• Notifications

  61
• Notifications

  61
• notifications

  61
• Creating New Command Notifications

  62
• Creating New Email Notifications

  63
• Deleting Notifications

  63
• Notification Variables

  63
• notifications

  63
• My Machine Lists

  64
• My Machine Lists

  64
• personal machine lists

  64
• Machine Lists, my personal

  64
• Adding Machine Lists

  65
• Editing Machine Lists

  65
• Deleting Machine Lists

  66
• Editing Global Machine Lists

  66
• Scheduled Tasks

  66
• Scheduled Tasks

  66
• database machine lists

  66
• Adding Scheduled Tasks

  67
• notifications

  67
• Editing Scheduled Tasks

  71
• editing scheduled tasks

  71
• notifications

  71
• viewing

  71
• Scheduled tasks

  71
• viewing scheduled tasks

  71
• Deleting Scheduled Tasks

  75
• Scheduled tasks

  75
• View Audit-On-Connect Activity

  77
• Browse Audit-On-Connect Activity

  77
• Audit-On-Connect Activity Table

  77
• Adding a New Audit-On-Connect Report Profile

  77
• Audit-on-Connect activity, viewing

  77
• Editing Report Profiles

  78
• Deleting Report Profiles

  78
• Audit-On-Connect Error Log Report

  79
• Audit-On-Connect Exceptions Report

  79
• View Audit Results

  81
• Browse Audit Results

  81
• Adding a New Audit Results Report Profile

  81
• scores

  81
• Editing Audit Report Results Profiles

  83
• Deleting Audit Report Results Profiles

  83
• Scheduled Audits Log Report

  83
• Adding Custom Reports to the Server Application

  83
• Profile

  83
• scheduled audits log

  83
• Glossary

  85
• Index

  87