Glossary | Symantec Security Expressions Server specs

Glossary

#

.CONFIGURE: Some policy files, such as the NSA Guidelines for Windows XP and Windows 2000, contains special rule named .CONFIGURE. The .CONFIGURE rule allows you to configure your policy files and set global parameters for policy files at run time.

A

Active Directory Connection Monitor: Connection monitor for Active Directory domains that detects computers coming on the network

Audit Service: Back-end Windows service that performs audits.

authentication: Authentication is any process by which a system verifies the identity of a user who wishes to access it.

C

Credential Store: Group of passwords securely stored in the database for a SecurityExpressions User

credentials: A set of Credentials is information used to verify the identity of a user. Normally a User ID and a Password, together, form a set of Credentials.

D

DNS: DNS is the Domain Name Service, a hierarchical global infrastructure deployed on the Internet and private IP-based networks used to resolve domain names into IP addresses.

E

Exceptions: A list of devices whose Group Posture is predetermined. An Exceptions list is an explicit list of devices to be excluded from an audit. Exceptions complement Scopes.

G

Generic DHCP Connection Monitor: The connection monitor/listener for DHCP Servers that detects computers coming on the network

I

Impact: Possible adverse impact of applying the rule. Suggested values are high, low, and normal, but you may specify any text. Impact may be a key in a rule.

M

Microsoft DHCP Server Connection Monitor: The connection monitor/plugin for Microsoft DHCP Servers that detects computers coming on the network

85

Image 93

Symantec Security Expressions Server manual Glossary

Contents

SecurityExpressions Server User Guide Page Table Of Contents Page Table Of Contents Page Vii Page Contacting Us Page Contacting Technical Support Technical SupportPage SecurityExpressions Console Other ProductsPage About SecurityExpressions Audit & Compliance Server OverviewPage What is Self-Service Auditing? Self-Service AuditSelf-Service Audit Agreement How to Audit your Local Computer Displays on the page. No detailed audit results appear About Server Configuration Configure ServersLocal Server Settings Pages with Role Settings Setup Viewing Audit ResultsDatabase Connection Windows 2000 Servers Secure Connection Click OK on the Default Web Site Properties window Credential Store UserCreating Credential Stores SecurityExpressions Console Credential Stores Enable Web ServicesSoftware Registration Site Preferences Access Item Rights Global Machine List Access User Roles Policy File Library Library SynchronizationCheck the Synchronize with a policy file library box How System Scores are Calculated About Policy Files Agent & Service Configuration Default method for remote execution on WindowsTarget Options SSH Agent Authentication Database Cleanup Cancel Update TaskPolicies Add Task Agent Downloads Site PreferencesClick Use the Following Agreement Allow Remediation Page Audit-On-Connect What is Audit-on-Connect?Policies Policies TablePage Adding Policies Editing Policies Deleting Policies Configuring with Run-Time Policy VariablesPage Scopes ScopesAdd a New Scope Page Edit a Scope Scopes Table DNS Domain Name Scopes Deleting ScopesExpression Scopes Supported Operators Supported Functions Org Unit ScopesDetection Method Scopes Notifications Creating New Email Notifications Creating New Command NotificationsClick Add New Editing Notifications Click Add New Creating New Command Notifications Notification Variables Deleting Notifications Exceptions ExceptionsExceptions Table Column Description Adding Exceptions Connection Monitors Specify Password and Encrypted PasswordDeleting Exceptions Connection Monitors Configuring Connection Monitors RemoveEnabling Connection Monitors IP Range Section Connection Monitor Configuration File Options Default Processing the Configuration File Configuration File SyntaxActive Directory Active Directory Connection Monitor only Slow Links Network Network Admissions Control Trace Route InformationUnmanaged Systems Initial Token Quarantined/Unknown HealthyReaudit if quarantined Redirection Web Audit on Connect Tracing Redirection Web Page BehaviorAudit on Connect Tracing Page Page Audit-On-Schedule What is Audit-on-Schedule?Page Adding Policies Editing Policies Deleting Policies Page Notifications Click Add New Click Add New Deleting Notifications My Machine Lists My Machine Lists Editing Machine Lists Adding Machine Lists Deleting Machine Lists Scheduled TasksEditing Global Machine Lists Scheduled Tasks Adding Scheduled Tasks Basic Settings Schedule Settings Hosts Not Connected Settings Credentials Settings Other Options Settings Editing Scheduled Tasks Windows Group Access Schedule Settings Notifications Other Options Settings Deleting Scheduled Tasks Page Browse Audit-On-Connect Activity View Audit-On-Connect ActivityAudit-On-Connect Activity Table Column Description Adding a New Audit-On-Connect Report Profile Deleting Report Profiles Editing Report Profiles Audit-On-Connect Exceptions Report Audit-On-Connect Error Log ReportPage View Audit Results Browse Audit ResultsAdding a New Audit Results Report Profile Page Adding Custom Reports to the Server Application Scheduled Audits Log ReportEditing Audit Report Results Profiles Deleting Audit Report Results ProfilesPage Glossary Page Index Configure IP address 33, 44, 45 Rule weights