Stormshield SN series Configuration Manual page 233

Administrator
Sponsor
Possible actions
Several search criteria can be combined. All of these criteria have to be met in order to be
displayed, as the search criteria are cumulative.
This combination of search criteria can then be saved as a "filter". Filters will then be saved in
memory and can be reinitialized in the Preferences module of the administration interface.
(Filter drop-down
menu)
Save
Delete
Modify
Reset
Export results
Refresh
Reset columns
"FILTER" panel
You can add a criterion by dragging and dropping the value from the results field into the panel.
The Export results button allows downloading a file in CSV format containing all of this
information.
The Reinit. columns button makes it possible to display only columns suggested by default
when the host monitoring window is opened.
"Connections" view
This view shows all connections detected by the firewall for a selected user. Every row represents
a connection. The "Connections" view displays the following data:
Date
Connection
Parent connection
Protocol
Page 233/448
Specifies whether the user has administration privileges on the firewall.
Whenever the user logs on via the Sponsorship method, this column will indicate the
name of the person who had validated he connection request.
Select a filter to launch the corresponding search. The list will suggest filters that have
been saved previously and for certain Views, predefined filters. Selecting the entry
(New filter) allows reinitializing the filter by selecting the criteria selection.
Save as a customized filter the criteria defined in the Filter panel described in the next
section. You can save a new filter using the button "Save as" based on an existing
filter or a predefined filter offered in certain Views. Once a filter has been saved, it will
be automatically offered in the list of filters.
Delete a customized filter saved earlier.
Click on this button to modify the filter being used and to edit criteria. For the "users"
view, the criteria are the following:
By address range or IP address (grayed out if a host has been selected in the
l
"hosts" view).
By source interface
l
By directory (allows refining the filter when several LDAP directories have been
l
defined on the firewall)
By authentication method
l
This button cancels the action of the filter currently in use. If it is a saved customized
filter, this action will not delete the filter.
This button makes it possible to download a file in CSV containing information from the
table. Once a filter is applied, all results matching this filter will be exported.
This button refreshes data shown on the screen.
This button makes it possible to display only columns suggested by default when the
host monitoring window is opened.
Indicates the date and time of the object's connection.
Connection ID
Certain protocols may generate "child" connections (e.g. FTP) and in this case, this
column will list the parent connection ID.
Communication protocol used for the connection.
SNS - USER CONFIGURATION MANUAL V.3
sns-en-user_configuration_manual-v3 - Copyright © Stormshield 2016
MONITORING