Manuals / IBM Partner Pavilion / Computer Equipment / Network Router

IBM Partner Pavilion 2.3 manual Defining assessment credentials for a policy

Models: 2.3

1 187

Download 187 pages 31.13 Kb

Page 97

Defining assessment credentials for a policy

Use the Assessment Credentials policy on the SiteProtector Console to define authentication credentials for your assets.

About this task

The appliance uses authentication credentials to access accounts during assessment scans. Enterprise Scanner uses all instances of the credentials that are defined for the group when it scans assets in the group. You can define different instances of this policy for different groups, which makes it possible to supply different log on credentials to scan different parts of the network.

Important: The Assessment Credentials policy currently works only with assets that run Windows operating systems.

Procedure

1.From the SiteProtector Console, create a tab to display asset policies.

2.In the navigation pane, select a group, and then open the Assessment Credentials policy for that group.

3.In the Assessment Credentials policy, click Add, and then provide the following account information:

Option	Description

Username	The user identification for an account.

Password	The password to use with the user name to
	log into an account.

Account Type: Windows Local	Indicates that the user account is defined
	locally on a single Windows device. The
	account is used to attempt to log in to a
	single Windows device.
	When you choose this option, you must
	provide a Windows host name in the
	Domain/Host box.

Account Type: Windows	Indicates that the user account is defined in
Domain/Workgroup	a Windows Domain or Workgroup. The
	account is used to attempt to log in to all
	Windows devices within the domain or
	workgroup.
	When you choose this option, you must
	provide the Windows Domain or Workgroup
	name in the Domain/Host box.

Account Type: Windows Active Directory	Indicates that the user account is defined in
	a Windows Active Directory Domain. The
	account is used to attempt to log in to all
	Windows devices within the Active
	Directory domain.
	When you choose this option, you must
	provide the Active Directory Domain name
	in the Domain/Host box.

Chapter 5. Background scanning in SiteProtector 89

Image 97

IBM Partner Pavilion 2.3 manual Defining assessment credentials for a policy

Contents

User Guide Version Copyright statement Trademarks and Disclaimer Iv Enterprise Scanner User Guide Contents Part 4. Appendixes 163 Part 3. MaintenanceAudience About this bookTopics Technical support contacts Related publicationsChapters Part 1. Scanning from the Proventia ManagerEnterprise Scanner User Guide Section B Policy configuration Section a Network configurationAd hoc scanning in the Proventia Manager Configuring the management network interface Section a Network configurationProcedure About this taskOption Description Interface Configuring the scanning network interfaceMaximum IPs per discovery subtask Maximum assets per assessment subtaskConfiguring scanning interface DNS settings Assigning perspective to a scanning interface Configuring routes for perspectiveOption Description Perspective Destination NetworkDefining assets for a discovery scan Section B Policy configurationBefore you begin Option Metric DescriptionIf you want to Then Clear groupings Displaying assessment checks by groupsClick Clear Groupings Create groupings interactivelyDisplaying information about assessment checks Selecting assessment checks with filters Option Description Discover and report TCP services Click the Common Settings tabDiscover and report UDP services Option Description Ports to scan with generic TCP checksOption Description Ports to scan with generic UDP checks DefaultOption Description Dynamically determine OS if previously Obtained information is older thanLocal group membership to verify access Option Description Verify account access level before usingAccess domain controllers to verify access Access levelOption Description Allowed account lockout Lockout Allowed is enabled. WhenTemporary lockout allowed Enterprise Maximum Allowable Lockout DurationDefining assessment credentials for a policy Account Type SSH Domain Option Description Account Type SSH LocalDomain/Host Account LevelDefining the service names associated with TCP and UDP ports If you want to Then Exclude ports Defining ports or assets to exclude from a scanExclude assets Excluded Hosts boxScan policy Required Interpreting scan results in the Proventia Manager Running an ad hoc scan Action Icon Description Monitoring the status of a scanExporting scan results from Proventia Manager Viewing the results of an ad hoc scanClick View/Manage Log Files Field Description Purging scan data from the databaseEnterprise Scanner User Guide Part 2. Scanning from the SiteProtector Console Enterprise Scanner User Guide Enterprise Scanner policies Initially blank or unconfigured? Inheritance indicatorsPolicy inheritance with Enterprise Scanner policies General inheritance behaviorEnterprise Scanner policies About this task Select Network Enterprise Scanner from the Agent Type list Viewing asset or agent policies for Enterprise ScannerImportant Do not click Open Agent policies for Enterprise Scanner Contents of an agent policyAgent policy descriptions for Enterprise Scanner Policy inheritance with agent policiesNetwork Locations policy Assigning perspective to a scanning interface Configuring routes for perspectiveNotification policy Event notification settings for Enterprise ScannerClick the Event Notification tab Configuring advanced parameters for event notification Access policyClick the Advanced Parameters tab Account PurposeNetworking policy Configuring the management network interfaceConfiguring the scanning network interface Configuring scanning interface DNS settings Services policy Time policy Enable the network time protocol NTPIf you want to Then Change the date and time for the agent Network Time Protocol sectionAsset policies for Enterprise Scanner Update Settings policyAsset policy descriptions for Enterprise Scanner Discovery policy Policy contentsScope Before you begin Defining assets to discoverDisplaying information about assessment checks Assessment policyDisplaying assessment checks by groups Selecting assessment checks with filters Configuring common assessment settings Information is older than Option Description Dynamically determine OS if SiteProtectorTry to confirm the access level Option Description Allowed account lockout Defining assessment credentials for a policy Assessment Credentials policyOption Description Account Type Windows Scan Control policy Cycle start date Option Description Job nameCycle duration Current cycle start dateImportant consideration for multiple agents Scan Window policyDefining when scanning is allowed Defining ports or assets to exclude from a scan Scan Exclusion policyDefault settings Network Services policyService definition Policy inheritanceConfiguring a Network Services policy Ad Hoc Scan Control policy Configuration optionsRunning an ad hoc discovery scan with Enterprise Scanner Running an ad hoc assessment scan with Enterprise Scanner Click Generate Support Data File Click the Debug Settings tabUnderstanding scanning processes in SiteProtector What is perspective? Defining perspectives Policy How to use Applies toPlacing agents in the correct perspective Perspectives in policiesNetwork locations and perspectives Definitions Scan jobs and related termsAssets with unassigned criticality Term DescriptionScheduled and running scans Types of tasksImportance of tasks and subtasks Common management tasksTasks per type of scan Priorities for running tasksCriticality and assessment tasks Scan type Number of tasksTask prioritization Stages of a scanning processDynamic prioritization Type of scan Reason for prioritizationStage Description Process for a scanning cycleCalibration considerations Size of scan windowsDiscovery cycle duration Assessment cycle durationAchieving the right balance Enterprise Scanner User Guide Background scanning in SiteProtector Determining when background scans run Asset policies and ad hoc scans How policies apply to ad hoc and background scansChanging assessment and discovery policies Type of scan DescriptionScan window and refresh cycle examples Scan Control policyChecklist for background discovery scanning Background scanning checklists for Enterprise ScannerChecklist for background assessment scanning Enabling background scanning Option Description Next cycle start date Defining when scanning is allowedProcedure Type a series of individual IP addresses, a Defining network services Defining assessment credentials for a policy Option Description Account Type SSH Local Monitoring scans in SiteProtector Viewing discovery job results Viewing your scan jobsAssessment subtask explanation Viewing assessment job resultsThis part of the description Describes Finished Assessment On ScanGroupName for hosts withEnterprise Scanner User Guide Managing scans in SiteProtector Stopping and restarting scan jobs Command ImpactImpact of stopping scan jobs Impact of restarting scan jobsSuspending and enabling all background scans Minimum scanning requirements Registration and authenticationSteps to initiate a scan Type of scan Steps to initiateScanning behaviors for ad hoc scans Troubleshooting scanning behaviors for ad hoc scansInheritance PriorityExpected scanning behaviors for background scans Managing scans in SiteProtector Enterprise Scanner User Guide Interpreting scan results in SiteProtector What determines certainty? OS identification Osid certaintySources of Osid Certainty of Osid sourcesConditions for reassessing Osid How Osid is updated in Enterprise ScannerException Rules for updating OsidSummary page for vulnerability management Setting up a Summary view for vulnerability managementVulnerability management options Portal DescriptionPortal Description About vulnerability assessment Viewing vulnerabilities by asset in Enterprise ScannerCreating custom views BenefitsField descriptions Field Description Viewing vulnerabilities by detail in Enterprise Scanner Field Description Viewing vulnerabilities by object in Enterprise Scanner Field Vulnerability view by vulnerability name Field Description Types of assessment reports Running reports in the SiteProtector ConsoleReport descriptions Report DescriptionReport Description Procedure Enterprise Scanner User Guide Logs and alerts Two types of log files Log files and alert notificationTwo types of information Log sizeSystem log descriptions System logsEnterprise Scanner ES logs Getting log status informationLog descriptions Statistic DescriptionChanging logging detail Download Downloading Enterprise Scanner ES log filesDelete a log file Click View/Manage Log Files DeleteRisk level icons Alerts logEvent information icons Icon DescriptionClick Generate new log file from Alerts Downloading and saving an Alerts logFile Description Finding specific events in the Alerts log Clearing the Alerts logClick Clear current Alerts from event log Enterprise Scanner User Guide Number If you want to Then Search the Alert log file by Alert IDSearch by Alert Id# box Enterprise Scanner User Guide Ticketing and remediation Tickets Ticketing and Enterprise ScannerVulnerability auto ticketing Custom categoriesScanning recommendations Remediation process overview for Enterprise ScannerTask overview Remediation tasks for Enterprise ScannerOption Tab Description Task 6 Close the ticket Part 3. Maintenance Enterprise Scanner User Guide Performing routine maintenance Shutting down your Enterprise Scanner Removing an agent from SiteProtector If you restore a system before you make backups Types of backupsDate of last system backup Options for backing up Enterprise ScannerBacking up configuration settings Click the Full Backup tab Choose an option Making full system backupsUpdating Enterprise Scanner Update locations Types of updatesType of update Content Update location DescriptionInstallation options with scheduled updates Update optionsRollbacks and backups Updating optionsAuthentication method Advantages and Disadvantages Configuring explicit-trust authentication with an XPU serverSelect the Use Alternate Update Server check box Configuring an Alternate Update locationOption Description Host or IP NameCA Certificate Option Description Trust LevelConfiguring notification options for XPUs Configuring an Http ProxySelect Enable Proxy Configuring automatic updates Scheduling a one-time firmware updateClick the Update Settings tab Option Description Check for updates daily or weeklyOption Description Do Not Install Option Description Check for updates at given intervalsAutomatically Install Updates DelayedManually installing updates Viewing the status of the Enterprise Scanner agent System status Proventia Manager HomeNetwork interface status ModelProtection status Updates statusHeader Viewing agent status Viewing agent status in the SiteProtector ConsoleModule or process Description Troubleshooting option Troubleshooting the Enterprise Scanner sensorViewing the status of the CAM modules Module or process Description Troubleshooting option Part 4. Appendixes Enterprise Scanner User Guide 165 Enterprise Scanner User Guide Product handling information World trade safety information Product safety labelsLaser compliance Laser safety informationProduct recycling and disposal Battery return program For the European Union For TaiwanFor California Electronic emissions noticesFederal Communications Commission FCC Statement European Union EU Electromagnetic Compatibility Directive Canadian Department of Communications Compliance StatementEC Declaration of Conformity In German Japan Class a Compliance Statement People’s Republic of China Class a Compliance StatementKorean Class a Compliance Statement Enterprise Scanner User Guide 177 IndexReassessing 105 Rules Sources Scan job