Symantec Security Expressions Server manual Adding Machine Lists, Editing Machine Lists

Page 73

 

Audit-On-Schedule

 

 

Windows Group Use Access

Windows User Groups who can use this machine list.

 

Windows Group Results

Windows User Groups who can view results from audits using

 

Access

this machine list.

 

Adding Machine Lists

 

 

To create a machine list:

 

 

1.Click the Audit-On-Schedule tab and then the My Machine Lists link.

2.Click the Add button to create a machine list.

The Add/Update settings appear below the table.

3.In the List Name box, type a name for the machine list.

4.In the List Members box, type the names or IP addresses of all systems you want to add to the machine list. Type one name or address per line.

Make sure you type the system names or IP addresses correctly. If you did not type a system's name or address correctly or somehow entered an invalid system, the audit skips the system and moves on to the next system in the list.

5.Set Windows Group Access. Enter Windows groups, separated by a comma, that can use this machine list and view audit results for it. This establishes which users can access this machine list and its audit results because of their role. If a Windows User Group isn't on the local computer, you'll need to enter the group in domain\groupname format.

In the Use Machine List field, enter the Windows groups that should be able to use the machine list in scheduled audits. In the View Audit Results field, enter the Windows groups that should be able to view results from audits using the machine list. To grant all users access, type Everyone. To restrict all users, type None.

6.When you're done entering systems to add to the machine list, click the Add/Update button.

The new machine list appears in the table at the top of the page.

Now you can add this machine list to a scheduled task.

Editing Machine Lists

To edit a machine list:

1.Click the Audit-On-Schedule tab and then the My Machine Lists link.

2.In the table at the top of the My Machine Lists page, click the Edit hyperlink in the same row as the machine list you want to edit.

The Add/Update settings appear below the table. Make the necessary changes.

3.If you want to rename the machine list, type a new name in the List Name box.

4.If you want to add a system to the machine list, type its name or IP address on its own line in the List Members box. If you want to remove a system from the list, delete it.

65

Image 73
Contents SecurityExpressions Server User Guide Page Table Of Contents Page Table Of Contents Page Vii Page Contacting Us Page Contacting Technical Support Technical SupportPage SecurityExpressions Console Other ProductsPage About SecurityExpressions Audit & Compliance Server OverviewPage What is Self-Service Auditing? Self-Service AuditSelf-Service Audit Agreement How to Audit your Local ComputerDisplays on the page. No detailed audit results appear About Server Configuration Configure ServersLocal Server Settings Pages with Role SettingsViewing Audit Results SetupDatabase Connection Windows 2000 Servers Secure ConnectionCredential Store User Click OK on the Default Web Site Properties windowCreating Credential Stores SecurityExpressions Console Credential Stores Enable Web ServicesSoftware Registration Site PreferencesAccess Item Rights Global Machine List Access User RolesLibrary Synchronization Policy File LibraryCheck the Synchronize with a policy file library box How System Scores are Calculated About Policy FilesDefault method for remote execution on Windows Agent & Service ConfigurationTarget Options SSH Agent Authentication Database Cleanup Cancel Update TaskPolicies Add TaskSite Preferences Agent DownloadsClick Use the Following Agreement Allow Remediation Page Audit-On-Connect What is Audit-on-Connect?Policies Policies TablePage Adding Policies Editing Policies Deleting Policies Configuring with Run-Time Policy VariablesPage Scopes ScopesAdd a New Scope Page Edit a Scope Scopes Table DNS Domain Name Scopes Deleting ScopesExpression Scopes Supported OperatorsOrg Unit Scopes Supported FunctionsDetection Method Scopes Notifications Creating New Email Notifications Creating New Command NotificationsClick Add New Editing NotificationsClick Add New Creating New Command Notifications Notification Variables Deleting NotificationsExceptions ExceptionsExceptions Table Column Description Adding ExceptionsConnection Monitors Specify Password and Encrypted PasswordDeleting Exceptions Connection MonitorsRemove Configuring Connection MonitorsEnabling Connection Monitors IP Range Section Connection Monitor Configuration FileOptions DefaultConfiguration File Syntax Processing the Configuration FileActive Directory Active Directory Connection Monitor only Slow Links NetworkNetwork Admissions Control Trace Route InformationUnmanaged Systems Initial TokenQuarantined/Unknown HealthyReaudit if quarantined Redirection WebRedirection Web Page Behavior Audit on Connect TracingAudit on Connect Tracing Page Page Audit-On-Schedule What is Audit-on-Schedule?Page Adding Policies Editing Policies Deleting Policies Page Notifications Click Add New Click Add New Deleting Notifications My Machine Lists My Machine ListsEditing Machine Lists Adding Machine ListsDeleting Machine Lists Scheduled TasksEditing Global Machine Lists Scheduled TasksAdding Scheduled Tasks Basic SettingsSchedule Settings Hosts Not Connected Settings Credentials Settings Other Options SettingsEditing Scheduled Tasks Windows Group AccessSchedule Settings Notifications Other Options Settings Deleting Scheduled Tasks Page Browse Audit-On-Connect Activity View Audit-On-Connect ActivityAudit-On-Connect Activity Table Column Description Adding a New Audit-On-Connect Report ProfileDeleting Report Profiles Editing Report ProfilesAudit-On-Connect Exceptions Report Audit-On-Connect Error Log ReportPage Browse Audit Results View Audit ResultsAdding a New Audit Results Report Profile Page Adding Custom Reports to the Server Application Scheduled Audits Log ReportEditing Audit Report Results Profiles Deleting Audit Report Results ProfilesPage Glossary Page Index ConfigureIP address 33, 44, 45 Rule weights