Enabling Audit Log, Saving an Audit Log | Xerox 7765, 7755, 7775

Security

Audit Log

When the Audit Log feature is enabled, the printer begins recording events that happen on the printer. You can download the Audit Log as a tab-delimited text file, and review it to find security breaches and assess the printer’s security.

Enabling Audit Log

Notes:

•Secure HTTP (SSL) must be enabled before you can enable Audit Log. For details, see Enabling Secure HTTP (SSL) on page 65.

•If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1.In CentreWare IS, click Properties > Security > Audit Log.

2.Click Enabled under Enabling Audit Log on machine.

3.Click Apply.

Saving an Audit Log

Note: If your printer is locked, you must log in as a system administrator. For details, see Accessing CentreWare IS on page 17.

1.In CentreWare IS, click Properties > Security > Audit Log.

2.Click Save.

3.Right-click the Download Log link and save the compressed auditfile.txt.gz file to your computer.

4.Extract the Auditfile.txt text file, and open it in a spreadsheet application that can read a tab- delimited text file.

Interpreting the Audit Log

The Audit Log is formatted into ten columns

•Index: Column 1 lists a unique value that identifies the event.

•Date: Column 2 lists the date that the event happened in mm/dd/yy format.

•Time: Column 3 lists the time that the event happened in hh:mm:ss format.

•Event ID: Column 4 lists the type of event. The number corresponds to a unique description. For details, see Audit Log Event Identification Numbers on page 176.

•Event Description: Column 5 lists an abbreviated description of the type of event. For details, see Audit Log Event Identification Numbers on page 176.

Notes:

•One audit log entry is recorded for each network destination within a Workflow Scanning scan job.

•For Server Fax jobs: One audit log entry is recorded for each Server Fax job.

•For Email jobs: One audit log entry is recorded for each SMTP recipient within the job.

78WorkCentre 7755/7765/7775 Multifunction Printer System Administrator Guide

Image 78

Xerox 7765, 7755, 7775 manual Enabling Audit Log, Saving an Audit Log, Interpreting the Audit Log

Contents

Xerox WorkCentre 7755 / 7765 Page Contents Security Printing Scanning Accounting Audit Log Event Identification Numbers Introduction1 Configuration Steps Overview More Information Information SourcePage Initial Setup Physical Connection Quick Setup Home Initial Setup at the Control PanelInstallation Wizard Configuration Report Manually Setting the Printer’s Ethernet Interface Speed Assigning a Network AddressTouch Ethernet Physical Media Changing the System Administrator Password Initial Setup in CentreWare isAccessing CentreWare is Locking or Unlocking the Printer Enabling Services Accessing the Configuration ReportUsing the Configuration Overview Disabling the Configuration Report at Startup Viewing the Status of Services from the Control Panel Touch Installed OptionsPage Network Configuration Microsoft Networking on Enabling TCP/IP Configuring TCP/IP Settings at the Control PanelManually Configuring the Network Address Touch Subnet and Gateway Configuring DNS/DDNS Settings Configuring TCP/IP Settings in CentreWare isConfiguring Dynamic Address Settings Configuring Settings for IPv4 Configuring IP Settings for IPv6 Zero-Configuration Networking Default Dhcp Settings Manual Address Options SLP CentreWare IS, click Properties Connectivity Protocols SLP FTP CentreWare IS, click Properties Connectivity Protocols FTP Configuring Snmp Settings Editing Snmp v1/v2c Properties Adding IP Trap Destination Addresses Editing Snmp v3 SettingsSnmp Advanced Settings CentreWare IS, click Properties Connectivity Protocols Snmp Adding IPX Trap Destination Addresses Under Trap Destination Addresses, click Add IPX Address Ssdp CentreWare IS, click Properties Connectivity Protocols Ssdp LPR/LPD Enabling LPR/LPD Basic Settings Advanced SettingsRaw TCP/IP Printing Backchannel Data Banner Page PrintingMiscellaneous Configuring Smtp Server Settings Optional Information System Administrator Guide Configuring LDAP/LDAPS Server Settings CentreWare IS, click Properties Connectivity Protocols Ldap Configuring Contexts for Ldap Defining User Mappings Device Access Setup Configuring Authorization Access by GroupsUser Roles Access Setup On the Authorization Access page, click the User Roles tab Configuring Filters for Ldap Service Access SetupFeature Access Setup Under Email Address Book Filter, select Enable Custom Filter Under User ID Query Filter, select Enable Custom Filter POP3 Configuring Http Settings Enabling HttpCentreWare IS, click Properties Connectivity Protocols Http Proxy Server NTP CentreWare IS, click Properties Connectivity Protocols NTP AppleTalk Enabling AppleTalk on the printer Bindery Settings Configuring NetWare SettingsService Advertising Protocol SAP NetWare NetWare Directory Services NDS Configuring Microsoft Networking Configuring WinsMicrosoft Networking WSD Enabling WSD Click Apply Security4 Authorization Setting up Access RightsAuthentication Overview User Information Local AuthenticationSpecifying Password Requirements Must contain at least 1 number Network Authentication Setting Up Local AuthenticationSetting up Network Authentication Configuring Authentication Server Settings for SMB Authentication Using a Card Reader System Configuring Authentication Server Settings for NDS NovellConfiguring Authentication Server Settings for Ldap Manually Configuring Control Panel Authentication Click Configure next to Device User Interface Authentication Security Controlling Access to Tools and Features Controlling Access for All Users Installing a Digital Certificate Digital CertificatesCreating a Self-Signed Certificate Managing Trusted Certificate Authorities Creating a RequestClick Upload Certificate Downloading the Generic Xerox CA Select Save Target As Under Secure Http SSL select Enabled if required Secure Http SSLEnabling Secure Http SSL Managing Actions IPsecEnabling IPsec Creating a New Action Under IPsec Mode, select Transport Mode or Tunnel Mode Manual Keying SettingsInternet Key Exchange Settings Security Parameter Index in field Editing or Deleting an Action Creating a New Protocol Group Managing Protocol GroupsManaging Host Groups Editing or Deleting a Protocol Group Defining a Security Policy Managing Security PoliciesEditing or Deleting a Host Group Prioritizing a Security Policy At the Control Panel Enabling and Configuring802.1X CentreWare is Under Protocol, select Enable Enable Save to save new password Stored Data Encryption Scheduling Routine Deletion of Image Data Overwriting Image DataManually Deleting Image Data Manually Deleting All Image Data Security Editing or Deleting IP Filter Rules IP FilteringCreating an IP Filter Rule CentreWare IS, click Properties Security IP Filtering Arranging the Execution Order of IP Filter Rules Enabling Audit Log Click Enabled under Enabling Audit Log on machineAudit Log Saving an Audit Log Completion Status Page Printing5 Saving and Printing Jobs Enabling the Reprint Saved Jobs FeatureSaving and Reprinting Jobs Saving a Job from Your Computer Managing Folders Creating and Managing FoldersCreating a New Folder Under Folder Operations, click Create New Folder Backing up Saved Jobs Restoring Saved Jobs To restore jobs from an FTP file repository Managing Banner Sheet Print Options in CentreWare is Setting Banner Sheet Identification OptionsManaging Banner Sheet Printing Options Managing Banner Sheet Print Options at the Control Panel User ID johndoe Job Name Application Name filename.xxx Touch Service Settings Touch Job Sheets Banner SheetsUser ID Job Name Application Name filename.xxx User ID Remote Job Name Job # Locate the Installation Files Xerox Services for Unix Systems XsusInstalling Xsus UNIX, Linux, and AS/400 Printing Launch Xsus Perform the Installation ProcedureDownload the Files Type tar -xvf filename.tgz then press Return or Enter Adding the Xerox Printer Installing the Xerox PPD on the WorkstationPrinting from a Linux Workstation Printing with Cups Installing the Wsco and Setting up Print Queues AS/400Page Managing Copy Functions Specifying Default Copy Settings Touch Copy Service Settings Touch Feature DefaultsTouch Save Defaults Changing the Reading Order Image Shift Presets Creating Copy Feature PresetsEdge Erase Presets Touch Edge Erase Presets Reduce/Enlarge Presets Touch Reduce/Enlarge PresetsPage Scanning7 Setting Scan Policies Scanning to a Folder on the PrinterEnabling or Disabling Scan to Mailbox Deleting Scanned Files Managing Folders and Scanned FilesCreating and Editing a Folder Under Scan to Mailbox, click Create Folder Delete Scan Folders Managing Folder PasswordsCentreWare IS, click Properties Services Scan to Mailbox Under Remove folder from device, click Delete Folder Monitoring Capacity CentreWare IS, click Properties Services Email Defaults Editing Default Scan SettingsTroubleshooting Scan to Email Scanning to an Email Address See also See the Online Support Assistant at Enable Scan Template Management Configuring Workflow ScanningConfiguring File Repository Settings Workflow Scanning FTP NetWare NCP SMB HTTP/HTTPS CGI Scripts Under Script path and filename, click Get Example Scripts Adding a Fax Destination Configuring the Default TemplateAdding a File Destination Adding Document Management Fields Configuring Workflow Scanning General Settings Configuring Other Default Template Scanning OptionsUnder Document Management Fields, click Add Setting Scanned Image File Naming Conventions Configuring Template Pool Repository SettingsDate Time Job ID User ID Template Display Settings on the Control Panel Configuring a Validation ServerUpdating the List of Templates at the Control Panel Troubleshooting Workflow Scanning Select Ldap Query Configuring Scan to HomeScanning to a User’s Home Folder Select No Ldap Query 117 Configuring the Printer for the Xerox Scan Utility Fax8 Fax Install Wizard Embedded FaxSend and Receive Setting Incoming Fax Defaults Configuring Embedded Fax SettingsSetting Fax Defaults Send Only Receive Only Enabling or Disabling Junk Fax Prevention Enabling Ring VolumeEnabling or Disabling the Secure Fax Feature Touch Secure Receive Setting Transmission Defaults Setting Default Output OptionsPrinting or Clearing Secure Faxes Touch Mailbox Setup Fax MailboxesEditing a Fax Mailbox Deleting a Fax Mailbox Storing a Fax in a Mailbox Printing or Deleting Stored Faxes Setting Up Fax ReportsFax Reports Mailbox Number Mailbox Passcode Touch Print All Documents Deleting Sent Fax Jobs from Memory Fax PollingPrinting a Fax Report Storing a Fax for Remote Polling Polling a Remote Fax Remote PollingPrinting and Deleting Stored Faxes Polling a Remote Mailbox Defining Mailbox and Polling Policies Troubleshooting Embedded FaxTesting the Fax Connection Touch Mailbox & Polling Policies Fax Configure a Server Fax Filing Repository Configuring a Fax Repository using FTPServer Fax Configure a Fax Repository using SMB Configure a Fax Repository using HTTP/HTTPS Configure Server Fax Default Settings Configure a Fax Repository using SmtpConfigure a Fax Repository using Netware Troubleshooting Server Fax Advanced Settings and Layout Adjustment Configuring Default Internet Fax SettingsGeneral Settings Internet Fax Under Internet Fax Image Settings, click Edit Configuring Internet Fax Receive SettingsInternet Fax Image Settings Filing Options Troubleshooting Internet Fax Internet Fax Addresses Sending a LAN Fax Click Xerox Features from the Copies and Pages menuLAN Fax Adding a Fax Recipient Setting up a Cover Sheet Setting LAN Fax OptionsSelect Options from the Cover Sheet Image menu Setting up Phonebook Preferences Editing the Phonebook Click OK on the Paper/Output tab to send your fax Page Accounting9 Xerox Standard Accounting Enabling Xerox Standard AccountingCreating a Group Account Creating a New User Account and Setting Usage Limits Creating a General Account Printing a Report Resetting Usage LimitsMaximum Usage Limits Click Add Account 147 Enabling and Configuring Network Accounting Network Accounting Troubleshooting Network Accounting Enabling Accounting in Print Drivers Enabling Accounting in a Windows Print DriverEnabling Accounting in an Apple Macintosh Print Driver Administrator Tools Alerts Setting up Alert NotificationMonitoring Alerts and Status Email Alerts Local UI Alerts Low Supply Warning Sleep Mode Options Energy Saving SettingsSleep Mode Advanced Sleep Mode Options Setting the Date and Time at the Control Panel Setting the Date and TimeSetting the Date and Time in CentreWare is Touch Device Settings General Date and Time Taking the Printer Offline Restarting the Printer in CentreWare isRestarting the Printer from the Control Panel Administrator Tools Touch Reset. Notes SMart eSolutions and Billing Information SMart eSolutionsEnabling SMart eSolutions Meter Assistant Maintenance AssistantView Usage and Billing Information Supplies Assistant Billing Information CentreWare IS, click Properties General Setup Cloning CloningCreating a Clone File Installing a Clone File Click I Have a Cloning File Address Book Security Address BooksInternet Fax and Email Address Book Editing the Public Address Book in CentreWare is Editing the Public Address Book as a .csv File Fax Address Book LAN Fax Address Book Mapping the Address Book Font Management Utility Network Logs Click Start Download Customizing Printer Contact Information Click Install Software Updating the Printer SoftwareManual Auto Upgrade Under Refresh Start Time, select Hourly or Daily Customization Expansion Enabling Extensible Service Registration Enabling Extensible ServicesInstalling Custom Services Software Select Enable next to Extensible Service Registration Auxiliary Interface Kit Page Audit Log Event Identification Numbers Audit Log Event Identification Numbers Description SSL Page Index Numerics FTP IPsec, 66 enabling Linux printing Local authentication, 55 setting up Enabling Service Registration page, 18 services SSL Xsus Zero-configuration networking