Symantec Security Expressions Server guide

Image 84

Symantec Security Expressions Server manual

Contents

SecurityExpressions Server User Guide Page Table Of Contents Page Table Of Contents Page Vii Page Contacting Us Page Technical Support Contacting Technical SupportPage Other Products SecurityExpressions ConsolePage Overview About SecurityExpressions Audit & Compliance ServerPage Self-Service Audit What is Self-Service Auditing?Self-Service Audit Agreement How to Audit your Local Computer Displays on the page. No detailed audit results appear Configure Servers About Server ConfigurationLocal Server Settings Pages with Role Settings Setup Viewing Audit ResultsDatabase Connection Secure Connection Windows 2000 Servers Click OK on the Default Web Site Properties window Credential Store UserCreating Credential Stores Enable Web Services SecurityExpressions Console Credential StoresSoftware Registration Site Preferences Access Global Machine List Access User Roles Item Rights Policy File Library Library SynchronizationCheck the Synchronize with a policy file library box About Policy Files How System Scores are Calculated Agent & Service Configuration Default method for remote execution on WindowsTarget Options SSH Agent Authentication Database Cleanup Update Task CancelPolicies Add Task Agent Downloads Site PreferencesClick Use the Following Agreement Allow Remediation Page What is Audit-on-Connect? Audit-On-ConnectPolicies Policies TablePage Adding Policies Editing Policies Configuring with Run-Time Policy Variables Deleting PoliciesPage Scopes ScopesAdd a New Scope Page Edit a Scope Scopes Table Deleting Scopes DNS Domain Name ScopesExpression Scopes Supported Operators Supported Functions Org Unit ScopesDetection Method Scopes Notifications Creating New Command Notifications Creating New Email NotificationsClick Add New Editing Notifications Click Add New Creating New Command Notifications Deleting Notifications Notification Variables Exceptions ExceptionsExceptions Table Column Description Adding Exceptions Specify Password and Encrypted Password Connection MonitorsDeleting Exceptions Connection Monitors Configuring Connection Monitors RemoveEnabling Connection Monitors Connection Monitor Configuration File IP Range Section Default Options Processing the Configuration File Configuration File SyntaxActive Directory Active Directory Connection Monitor only Network Slow Links Trace Route Information Network Admissions ControlUnmanaged Systems Initial Token Healthy Quarantined/UnknownReaudit if quarantined Redirection Web Audit on Connect Tracing Redirection Web Page BehaviorAudit on Connect Tracing Page Page What is Audit-on-Schedule? Audit-On-SchedulePage Adding Policies Editing Policies Deleting Policies Page Notifications Click Add New Click Add New Deleting Notifications My Machine Lists My Machine Lists Adding Machine Lists Editing Machine Lists Scheduled Tasks Deleting Machine ListsEditing Global Machine Lists Scheduled Tasks Basic Settings Adding Scheduled Tasks Schedule Settings Hosts Not Connected Settings Other Options Settings Credentials Settings Windows Group Access Editing Scheduled Tasks Schedule Settings Notifications Other Options Settings Deleting Scheduled Tasks Page View Audit-On-Connect Activity Browse Audit-On-Connect ActivityAudit-On-Connect Activity Table Column Description Adding a New Audit-On-Connect Report Profile Editing Report Profiles Deleting Report Profiles Audit-On-Connect Error Log Report Audit-On-Connect Exceptions ReportPage View Audit Results Browse Audit ResultsAdding a New Audit Results Report Profile Page Scheduled Audits Log Report Adding Custom Reports to the Server ApplicationEditing Audit Report Results Profiles Deleting Audit Report Results ProfilesPage Glossary Page Configure Index IP address 33, 44, 45 Rule weights