Table Of Contents | Symantec Security Expressions Server specs

Table Of Contents
Contacting Us	1
Technical Support	3
Contacting Technical Support	3
Other Products	5
SecurityExpressions Console	5
Overview	7
About SecurityExpressions Audit & Compliance Server	7
Self-Service Audit	9
What is Self-Service Auditing?	9
Self-Service Audit Agreement	9
How to Audit your Local Computer	9
Configure Servers	11
About Server Configuration	11
Local Server Settings	11
About User Roles	11
Pages with Role Settings	11
Viewing Audit Results	12
Setup Page	12
Database Connection	12
Secure Connection	13
Credential Store User	14
Creating Credential Stores	14
SecurityExpressions Console Credential Stores	15
Software Registration	15
Site Preferences	15
Other Servers Local Settings	16
Page Access	16
Item Rights	17
Global Machine List Access: User Roles	17
	iii

Image 3

Symantec Security Expressions Server manual Table Of Contents

Contents

SecurityExpressions Server User Guide Page Table Of Contents Page Table Of Contents Page Vii Page Contacting Us Page Contacting Technical Support Technical SupportPage SecurityExpressions Console Other ProductsPage About SecurityExpressions Audit & Compliance Server OverviewPage How to Audit your Local Computer Self-Service AuditWhat is Self-Service Auditing? Self-Service Audit Agreement Displays on the page. No detailed audit results appear Pages with Role Settings Configure ServersAbout Server Configuration Local Server Settings Setup Viewing Audit ResultsDatabase Connection Windows 2000 Servers Secure Connection Click OK on the Default Web Site Properties window Credential Store UserCreating Credential Stores Site Preferences Enable Web ServicesSecurityExpressions Console Credential Stores Software Registration Access Item Rights Global Machine List Access User Roles Policy File Library Library SynchronizationCheck the Synchronize with a policy file library box How System Scores are Calculated About Policy Files Agent & Service Configuration Default method for remote execution on WindowsTarget Options SSH Agent Authentication Database Cleanup Add Task Update TaskCancel Policies Agent Downloads Site PreferencesClick Use the Following Agreement Allow Remediation Page Policies Table What is Audit-on-Connect?Audit-On-Connect PoliciesPage Adding Policies Editing Policies Deleting Policies Configuring with Run-Time Policy VariablesPage Scopes ScopesAdd a New Scope Page Edit a Scope Scopes Table Supported Operators Deleting ScopesDNS Domain Name Scopes Expression Scopes Supported Functions Org Unit ScopesDetection Method Scopes Notifications Editing Notifications Creating New Command NotificationsCreating New Email Notifications Click Add New Click Add New Creating New Command Notifications Notification Variables Deleting Notifications Adding Exceptions ExceptionsExceptions Exceptions Table Column Description Connection Monitors Specify Password and Encrypted PasswordConnection Monitors Deleting Exceptions Configuring Connection Monitors RemoveEnabling Connection Monitors IP Range Section Connection Monitor Configuration File Options Default Processing the Configuration File Configuration File SyntaxActive Directory Active Directory Connection Monitor only Slow Links Network Initial Token Trace Route InformationNetwork Admissions Control Unmanaged Systems Redirection Web HealthyQuarantined/Unknown Reaudit if quarantined Audit on Connect Tracing Redirection Web Page BehaviorAudit on Connect Tracing Page Page Audit-On-Schedule What is Audit-on-Schedule?Page Adding Policies Editing Policies Deleting Policies Page Notifications Click Add New Click Add New Deleting Notifications My Machine Lists My Machine Lists Editing Machine Lists Adding Machine Lists Scheduled Tasks Scheduled TasksDeleting Machine Lists Editing Global Machine Lists Adding Scheduled Tasks Basic Settings Schedule Settings Hosts Not Connected Settings Credentials Settings Other Options Settings Editing Scheduled Tasks Windows Group Access Schedule Settings Notifications Other Options Settings Deleting Scheduled Tasks Page Adding a New Audit-On-Connect Report Profile View Audit-On-Connect ActivityBrowse Audit-On-Connect Activity Audit-On-Connect Activity Table Column Description Deleting Report Profiles Editing Report Profiles Audit-On-Connect Exceptions Report Audit-On-Connect Error Log ReportPage View Audit Results Browse Audit ResultsAdding a New Audit Results Report Profile Page Deleting Audit Report Results Profiles Scheduled Audits Log ReportAdding Custom Reports to the Server Application Editing Audit Report Results ProfilesPage Glossary Page Index Configure IP address 33, 44, 45 Rule weights