Symantec Security Expressions Server manual Notifications, Hosts Not Connected Settings

Page 77

Audit-On-Schedule

Run Once – The scheduled task executes once on this day and does not repeat. In the calendar, choose the date on which you want to run the task.

Run Weekly – The task executes once every week on the day(s) you select. Check the days of the week on which you want to run the task.

Run Monthly – The task executes only during the months you select on the date you select.

8.In the Run At options, select the time of day at which you want to launch the task from the hour and minutes drop-down lists.

Make sure you select the correct hour, whether it's a.m. or p.m.

If you selected Not Scheduled in the previous step, these options don't appear.

Notifications

9.If you want to send notifications when this scheduled task executes, select one or more notifications from the Notifications list or the Console Notifications list.

The Notifications list contains the notifications created using the Notifications page in this application. If none of the existing notifications meet your needs, you can configure a new one by clicking the Edit Notifications link, which opens the Notifications page.

The Console Notifications list contains notifications created using the console application.

10.If you have Altiris Notification Server and you want to send information about the audits generated on this schedule to Notification Server, select Send a Notification Server Event. If you prefer to send this information after each target computer is audited, select Send a Notification Server Event for each target.

Hosts Not Connected Settings

11.If you want to enable Audit-on-Connect for any systems that could not be contacted on the first try, check the Enable host audit on connect box.

Between the initial connection failure and the next time the scheduled task runs, these systems get audited if they connect to the network. In this case, the task only completes

after all systems connect.

In order for this feature to work on a target system, you need to create an Audit-on- Connect scope that includes that system.

12.If you want to continue to attempt auditing systems that could not be contacted on the first try, check the Automatically re-audit devices that could not be contacted box.

A.In the Wait this Many Minutes Before Retries box, type the number of minutes you want the task to wait before attempting a reaudit after a failed connection. After each round of audits, the task waits this length of time before reauditing systems that weren't available the first time.

This gives the system time to make itself available for connection. If you suspect system restarts might cause failed connections, for example, enter a length of time longer than a

69

Image 77
Contents SecurityExpressions Server User Guide Page Table Of Contents Page Table Of Contents Page Vii Page Contacting Us Page Contacting Technical Support Technical SupportPage SecurityExpressions Console Other ProductsPage About SecurityExpressions Audit & Compliance Server OverviewPage What is Self-Service Auditing? Self-Service AuditSelf-Service Audit Agreement How to Audit your Local ComputerDisplays on the page. No detailed audit results appear About Server Configuration Configure ServersLocal Server Settings Pages with Role SettingsDatabase Connection SetupViewing Audit Results Windows 2000 Servers Secure ConnectionCreating Credential Stores Click OK on the Default Web Site Properties windowCredential Store User SecurityExpressions Console Credential Stores Enable Web ServicesSoftware Registration Site PreferencesAccess Item Rights Global Machine List Access User RolesCheck the Synchronize with a policy file library box Policy File LibraryLibrary Synchronization How System Scores are Calculated About Policy FilesTarget Options Agent & Service ConfigurationDefault method for remote execution on Windows SSH Agent Authentication Database Cleanup Cancel Update TaskPolicies Add TaskClick Use the Following Agreement Agent DownloadsSite Preferences Allow Remediation Page Audit-On-Connect What is Audit-on-Connect?Policies Policies TablePage Adding Policies Editing Policies Deleting Policies Configuring with Run-Time Policy VariablesPage Add a New Scope ScopesScopes Page Edit a Scope Scopes Table DNS Domain Name Scopes Deleting ScopesExpression Scopes Supported OperatorsDetection Method Scopes Supported FunctionsOrg Unit Scopes Notifications Creating New Email Notifications Creating New Command NotificationsClick Add New Editing NotificationsClick Add New Creating New Command Notifications Notification Variables Deleting NotificationsExceptions ExceptionsExceptions Table Column Description Adding ExceptionsConnection Monitors Specify Password and Encrypted PasswordDeleting Exceptions Connection MonitorsEnabling Connection Monitors Configuring Connection MonitorsRemove IP Range Section Connection Monitor Configuration FileOptions DefaultActive Directory Active Directory Connection Monitor only Processing the Configuration FileConfiguration File Syntax Slow Links NetworkNetwork Admissions Control Trace Route InformationUnmanaged Systems Initial TokenQuarantined/Unknown HealthyReaudit if quarantined Redirection WebAudit on Connect Tracing Audit on Connect TracingRedirection Web Page Behavior Page Page Audit-On-Schedule What is Audit-on-Schedule?Page Adding Policies Editing Policies Deleting Policies Page Notifications Click Add New Click Add New Deleting Notifications My Machine Lists My Machine ListsEditing Machine Lists Adding Machine ListsDeleting Machine Lists Scheduled TasksEditing Global Machine Lists Scheduled TasksAdding Scheduled Tasks Basic SettingsSchedule Settings Hosts Not Connected Settings Credentials Settings Other Options SettingsEditing Scheduled Tasks Windows Group AccessSchedule Settings Notifications Other Options Settings Deleting Scheduled Tasks Page Browse Audit-On-Connect Activity View Audit-On-Connect ActivityAudit-On-Connect Activity Table Column Description Adding a New Audit-On-Connect Report ProfileDeleting Report Profiles Editing Report ProfilesAudit-On-Connect Exceptions Report Audit-On-Connect Error Log ReportPage Adding a New Audit Results Report Profile View Audit ResultsBrowse Audit Results Page Adding Custom Reports to the Server Application Scheduled Audits Log ReportEditing Audit Report Results Profiles Deleting Audit Report Results ProfilesPage Glossary Page Index ConfigureIP address 33, 44, 45 Rule weights