Symantec Security Expressions Server manual Schedule Settings

Page 80

SecurityExpressions Server User Guide

Only the machine lists to which you have Use access rights appear for selection. Access rights are set in the Windows Group Access options on the My Machine Lists page and

the ML Access page (global machine lists). If you can't find a machine you need to use, ask the machine list's creator or administrator to add you to one of the Windows User Groups with Use access rights to the machine list.

The Global Machine Lists section displays all machine lists in the SecurityExpressions Console, if your organization uses the console.

If the SecurityExpressions Console's database does not contain any machine lists, this section won't contain any machine lists.

If you created any machine lists on the My Machine Lists page using the same user account as the one you're using to create this task, the My Machine Lists section displays those machine lists.

If the My Machine Lists page does not contain any machine lists created using the same user account as the one you're using to create this task, this section won't

contain any machine lists.

If anyone created any machine lists on the My Machine Lists page using a different user account than the one you're using to create this task, and entered a Windows User Group in the Use Machine List field that you're a member of, the Other User's Shared Machine Lists section displays those machine lists.

If the My Machine Lists page does not contain any machine lists that 1) were created using a different user account than the one you're using to create this task

and 2) contain a Windows User Group in the Use Machine List field that you're a member of, this section won't contain any machine lists.

6.In the Server to Run On drop-down list, select which server you want run the task.

You can install the server software on more than one server system, as long as they all connect to one central database. Each server can have its own settings. Based on the way each server is configured, you'll want to use one particular server to perform the audits executed by this task, depending on your goals.

Schedule Settings

7.Select to run this task once, weekly, monthly, or not at all.

Not Scheduled - Lets you create a scheduled task without enabling it, or disable an existing scheduled task without deleting it.

Run Once – The scheduled task executes once on this day and does not repeat. In the calendar, choose the date on which you want to run the task.

Run Weekly – The task executes once every week on the day(s) you select. Check the days of the week on which you want to run the task.

Run Monthly – The task executes only during the months you select on the date you select.

8.In the Run At options, select the time of day at which you want to launch the task from the hour and minutes drop-down lists.

Make sure you select the correct hour, whether it's a.m. or p.m.

72

Image 80
Contents SecurityExpressions Server User Guide Page Table Of Contents Page Table Of Contents Page Vii Page Contacting Us Page Technical Support Contacting Technical SupportPage Other Products SecurityExpressions ConsolePage Overview About SecurityExpressions Audit & Compliance ServerPage Self-Service Audit What is Self-Service Auditing?Self-Service Audit Agreement How to Audit your Local ComputerDisplays on the page. No detailed audit results appear Configure Servers About Server ConfigurationLocal Server Settings Pages with Role SettingsDatabase Connection SetupViewing Audit Results Secure Connection Windows 2000 ServersCreating Credential Stores Click OK on the Default Web Site Properties windowCredential Store User Enable Web Services SecurityExpressions Console Credential StoresSoftware Registration Site PreferencesAccess Global Machine List Access User Roles Item RightsCheck the Synchronize with a policy file library box Policy File LibraryLibrary Synchronization About Policy Files How System Scores are CalculatedTarget Options Agent & Service ConfigurationDefault method for remote execution on Windows SSH Agent Authentication Database Cleanup Update Task CancelPolicies Add TaskClick Use the Following Agreement Agent DownloadsSite Preferences Allow Remediation Page What is Audit-on-Connect? Audit-On-ConnectPolicies Policies TablePage Adding Policies Editing Policies Configuring with Run-Time Policy Variables Deleting PoliciesPage Add a New Scope ScopesScopes Page Edit a Scope Scopes Table Deleting Scopes DNS Domain Name ScopesExpression Scopes Supported OperatorsDetection Method Scopes Supported FunctionsOrg Unit Scopes Notifications Creating New Command Notifications Creating New Email NotificationsClick Add New Editing NotificationsClick Add New Creating New Command Notifications Deleting Notifications Notification VariablesExceptions ExceptionsExceptions Table Column Description Adding ExceptionsSpecify Password and Encrypted Password Connection MonitorsDeleting Exceptions Connection MonitorsEnabling Connection Monitors Configuring Connection MonitorsRemove Connection Monitor Configuration File IP Range SectionDefault OptionsActive Directory Active Directory Connection Monitor only Processing the Configuration FileConfiguration File Syntax Network Slow LinksTrace Route Information Network Admissions ControlUnmanaged Systems Initial TokenHealthy Quarantined/UnknownReaudit if quarantined Redirection WebAudit on Connect Tracing Audit on Connect TracingRedirection Web Page Behavior Page Page What is Audit-on-Schedule? Audit-On-SchedulePage Adding Policies Editing Policies Deleting Policies Page Notifications Click Add New Click Add New Deleting Notifications My Machine Lists My Machine ListsAdding Machine Lists Editing Machine ListsScheduled Tasks Deleting Machine ListsEditing Global Machine Lists Scheduled TasksBasic Settings Adding Scheduled TasksSchedule Settings Hosts Not Connected Settings Other Options Settings Credentials SettingsWindows Group Access Editing Scheduled TasksSchedule Settings Notifications Other Options Settings Deleting Scheduled Tasks Page View Audit-On-Connect Activity Browse Audit-On-Connect ActivityAudit-On-Connect Activity Table Column Description Adding a New Audit-On-Connect Report ProfileEditing Report Profiles Deleting Report ProfilesAudit-On-Connect Error Log Report Audit-On-Connect Exceptions ReportPage Adding a New Audit Results Report Profile View Audit ResultsBrowse Audit Results Page Scheduled Audits Log Report Adding Custom Reports to the Server ApplicationEditing Audit Report Results Profiles Deleting Audit Report Results ProfilesPage Glossary Page Configure IndexIP address 33, 44, 45 Rule weights