Defining Assessment Credentials (Assessment Credentials Policy) - IBM Proventia Network Enterprise Scanner User Manual

Chapter 6: Defining Background Scans
Defining Assessment Credentials (Assessment Credentials
Policy)
Introduction
Scope
Windows and Unix
accounts
Procedure
94
Use the Assessment Credentials policy to define authentication credentials that your
agent can use to log on to the accounts of the assets it scans. Enterprise Scanner uses all
instances of the credentials defined for the group when it scans assets in the group. You
may define all credentials in one policy, and use that policy for the entire site. You may
also create multiple instances of the policy to use for different groups.
The Assessment Credentials policy applies to every type of scan.
The requirements of the fields in the policy may differ for Windows and for Unix
accounts. Those differences are described in the procedure below.
To define assessment credentials:
1. In the SiteProtector Console, set up a tab to display asset policies. (See page 74.)
2. On the navigation pane, select a group, and then open the Assessment Credentials
policy.
3. Click Add.
The Add Assessment Credentials window appears.
4. Provide the following account information:
Field
Username
Password
Account Type
Description
The user identification for an account.
The password to use with the Username to log into an account.
Windows Local
Indicates the user account is defined locally on a single Windows
device. The account is used to attempt logon to a single Windows
device. When you choose this option, you must provide a
Windows host name in the Domain/Host box.
Windows Domain/Workgroup
Indicates the user account is defined in a Windows Domain or
Workgroup. The account is used to attempt logon to all Windows
devices within the domain or workgroup. When you choose this
option, you must provide the Windows Domain or Workgroup
name in the Domain/Host box.
Windows Active Directory
Indicates the user account is defined in a Windows Active
Directory Domain. The account will be used to attempt logon to all
Windows devices within the Active Directory domain. When you
choose this option, you must provide the Active Directory Domain
name in the Domain/Host box.
IBM Internet Security Systems