The Icecap Tab - Internet Security Systems RealSecure User Manual

Appendix B: Configuration Tabs

The ICEcap Tab

Introduction
ICEcap tab features
78
The ICEcap tab allows you to manually control how RealSecure Desktop Protector reports
intrusion information to an ICEcap server. When ICEcap reporting is enabled, all events
are reported to an ICEcap server for enterprise-wide reporting and analysis. For more
information, see "Connecting to ICEcap Manager" on page 32.
This table describes the settings you can configure on the ICEcap tab.
This setting...
Reporting Enabled
URL
Account Name
Event Password
Group Name
Proxy URL
Configuration Priority
Enable Local
Configuration Editing
Configuration Priority
Table 25: ICEcap tab settings
Has this effect...
Select this box to enable ICEcap reporting. Clear this box to turn off
ICEcap reporting.
Caution: Clearing Reporting Enabled on the ICEcap tab disconnects
Desktop Protector from the ICEcap server. This stops all event reporting
to ICEcap. It also prevents ICEcap from downloading any configuration,
security or software updates to the local Desktop Protector installation.
The fully qualified URL for the ICEcap server, in the format
<ICEcap server name>:<HTTP event port number>
example, if ICEcap is on a server named ICECAP using event port 8082,
then the entry would be
http://ICECAP:8082
use the ICEcap server's IP address or DNS name.
The ICEcap account name to use when Desktop Protector uploads data.
Refer to your ICEcap documentation for more information about account
names. The default account name is iceman.
Enter the current ICEcap event password. This is the password that
Desktop Protector uses to report events to the ICEcap server.
The ICEcap group of which the local system is a member, for event
reporting purposes. This group must exist in ICEcap and possess the
correct configuration settings to report properly. See the RealSecure
ICEcap Manager User Guide for more information about Groups and
group name precedence settings.
If there is a proxy server between the local system and the ICEcap
server, enter the fully qualified URL for the proxy server. If you are not
using a proxy server, leave this field blank.
Displays the current status of configuration sharing with ICEcap. It is for
informational purposes only and is always disabled.
If this box is selected, the local system has some control or total control
over the local configuration settings. If ICEcap reporting is enabled,
ICEcap Manager controls this setting and it cannot be changed from the
local computer. For more information on shared configuration, see "How
ICEcap Manager Works With RealSecure Desktop Protector" on
page 14.
If Enable Local Configuration Editing is selected, one of these option
buttons is selected:
• Local: The agent has complete control over all the local configuration
settings.
• Remote: The agent can only add configuration settings that ICEcap
has not already explicitly set.
http://
. For
(the default). You can