NOVELL IDENTITY AUDIT 1.0 - GUIDE Manuals

Manuals and User Guides for NOVELL IDENTITY AUDIT 1.0 - GUIDE. We have 1 NOVELL IDENTITY AUDIT 1.0 - GUIDE manual available for free PDF download: Manual

NOVELL IDENTITY AUDIT 1.0 - GUIDE Manual

NOVELL IDENTITY AUDIT 1.0 - GUIDE Manual (140 pages)

Brand: NOVELL | Category: Software | Size: 2 MB

Table of Contents

Table of Contents
5
About this Guide

11
1 Introduction

13
- Product Overview
  13
  - Comparison to Novell Audit 2.0.2
    13
  - Comparison to Novell Sentinel
    14
- Interface
  14
- Architecture
  15
2 System Requirements

17
- Hardware Requirements
  17
- Supported Operating Systems
  18
- Supported Browsers
  18
- Supported Platform Agent Version
  18
- Supported Event Sources
  18
3 Installation

19
- Prerequisites
  19
- Installing Novell Identity Audit
  19
  - Quick Installation (as Root)
    19
  - Non-Root Installation
    21
- Configuring Event Sources
  23
- Logging in to Identity Audit
  25
- Uninstalling
  25
4 Reporting

27
- Running Reports
  27
  - Manually Running a Report
    27
  - Scheduling a Report
    29
- Viewing Reports
  30
- Managing Reports
  31
  - Adding Reports
    32
  - Creating New Reports
    33
  - Renaming Report Results
    33
  - Deleting Reports
    34
  - Updating Report Definitions
    34
- Default Reports
  34
5 Data Collection

37
- Data Collection Status
  37
- Managing Event Sources
  40
  - Adding Event Sources
    40
  - Deleting Event Sources
    40
- Audit Server Options
  40
  - Port Configuration and Port Forwarding
    42
  - Client Authentication
    42
- Event Sources
  45
6 Searching

47
- Running an Event Search
  47
  - Basic Search
    47
  - Advanced Search
    48
- Viewing Search Results
  49
  - Basic Event View
    50
  - Event View with Details
    50
  - Refining Search Results
    51
- Event Fields
  52
7 Data Storage

57
- Database Health
  57
- Data Storage Configuration
  58
- Database Setup
  59
  - Database Structure
    60
  - Database Users
    60
  - Database Stored Procedures
    60
8 Rules

61
- Rules Overview
  61
- Configuring Rules
  62
  - Filter Criteria
    62
  - Adding a Rule
    62
  - Ordering Rules
    63
  - Editing a Rule
    63
  - Deleting a Rule
    63
  - Activating or Deactivating a Rule
    63
- Configuring Actions
  64
  - Send to E-Mail
    64
  - Send to Syslog
    65
  - Write to File
    65
9 User Administration

67
- Adding a User
  67
- Editing User Details
  68
- Deleting a User
  70
A Troubleshooting

71
B Truststore

73
- Creating a Keystore
  73
- B.1 Creating a Keystore
  73
C Novell Identity Audit Database Views for Postgresql Server

75
- Views
  75
  - Actvy_Parm_Rpt_V
    75
  - Actvy_Ref_Parm_Val_Rpt_V
    75
    
    C.1.1 Actvy_Parm_Rpt_V
    75
    
    C.1.2 Actvy_Ref_Parm_Val_Rpt_V
    75
    
    C.1 Views
    75
  - Actvy_Ref_Rpt_V
    76
  - Actvy_Rpt_V
    76
    
    C.1.3 Actvy_Ref_Rpt_V
    76
    
    C.1.4 Actvy_Rpt_V
    76
  - Adv_Attack_Map_Rpt_V
    77
  - Adv_Attack_Plugin_Rpt_V
    77
  - Adv_Attack_Rpt_V
    77
    
    C.1.5 Adv_Attack_Map_Rpt_V
    77
    
    C.1.6 Adv_Attack_Plugin_Rpt_V
    77
    
    C.1.7 Adv_Attack_Rpt_V
    77
  - Adv_Attack_Signatures
    78
  - C.1.8 Adv_Attack_Signatures
    78
  - Adv_Feed_Rpt_V
    79
  - Adv_Master_Rpt_V
    79
    
    C.1.9 Adv_Feed_Rpt_V
    79
    
    C.1.10 Adv_Master_Rpt_V
    79
  - Adv_Product_Rpt_V
    80
  - Adv_Product_Service_Pack_Rpt_V
    80
    
    C.1.11 Adv_Product_Rpt_V
    80
    
    C.1.12 Adv_Product_Service_Pack_Rpt_V
    80
  - Adv_Product_Version_Rpt_V
    81
  - Adv_Vendor_Rpt_V
    81
    
    C.1.13 Adv_Product_Version_Rpt_V
    81
    
    C.1.14 Adv_Vendor_Rpt_V
    81
  - Adv_Vuln_Kb_Rpt_V
    82
  - C.1.15 Adv_Vuln_Kb_Rpt_V
    82
  - Adv_Vuln_Product_Rpt_V
    83
  - Adv_Vuln_Signatures
    83
  - Annotations_Rpt_V
    83
    
    C.1.16 Adv_Vuln_Product_Rpt_V
    83
    
    C.1.17 Adv_Vuln_Signatures
    83
    
    C.1.18 Annotations_Rpt_V
    83
  - Asset_Category_Rpt_V
    84
  - Asset_Hostname_Rpt_V
    84
  - Asset_Ip_Rpt_V
    84
    
    C.1.19 Asset_Category_Rpt_V
    84
    
    C.1.20 Asset_Hostname_Rpt_V
    84
    
    C.1.21 Asset_Ip_Rpt_V
    84
  - Asset_Location_Rpt_V
    85
  - Asset_Rpt_V
    85
    
    C.1.22 Asset_Location_Rpt_V
    85
    
    C.1.23 Asset_Rpt_V
    85
  - Asset_Value_Rpt_V
    86
  - Asset_X_Entity_X_Role_Rpt_V
    86
    
    C.1.24 Asset_Value_Rpt_V
    86
    
    C.1.25 Asset_X_Entity_X_Role_Rpt_V
    86
  - Associations_Rpt_V
    87
  - Attachments_Rpt_V
    87
    
    C.1.26 Associations_Rpt_V
    87
    
    C.1.27 Attachments_Rpt_V
    87
  - Audit_Record_Rpt_V
    88
  - Configs_Rpt_V
    88
    
    C.1.28 Audit_Record_Rpt_V
    88
    
    C.1.29 Configs_Rpt_V
    88
  - Contacts_Rpt_V
    89
  - CORRELATED_EVENTS_RPT_V (Legacy View)
    89
  - Correlated_Events_Rpt_V1
    89
    
    C.1.30 Contacts_Rpt_V
    89
    
    C.1.31 CORRELATED_EVENTS_RPT_V (Legacy View)
    89
    
    C.1.32 Correlated_Events_Rpt_V1
    89
  - Criticality_Rpt_V
    90
  - Cust_Hierarchy_V
    90
    
    C.1.33 Criticality_Rpt_V
    90
    
    C.1.34 Cust_Hierarchy_V
    90
  - Cust_Rpt_V
    91
  - Entity_Type_Rpt_V
    91
  - Env_Identity_Rpt_V
    91
    
    C.1.35 Cust_Rpt_V
    91
    
    C.1.36 Entity_Type_Rpt_V
    91
    
    C.1.37 Env_Identity_Rpt_V
    91
  - Esec_Content_Grp_Content_Rpt_V
    92
  - Esec_Content_Grp_Rpt_V
    92
    
    C.1.38 Esec_Content_Grp_Content_Rpt_V
    92
    
    C.1.39 Esec_Content_Grp_Rpt_V
    92
  - Esec_Content_Pack_Rpt_V
    93
  - Esec_Content_Rpt_V
    93
  - Esec_Ctrl_Ctgry_Rpt_V
    93
    
    C.1.40 Esec_Content_Pack_Rpt_V
    93
    
    C.1.41 Esec_Content_Rpt_V
    93
    
    C.1.42 Esec_Ctrl_Ctgry_Rpt_V
    93
  - Esec_Ctrl_Rpt_V
    94
  - Esec_Display_Rpt_V
    94
    
    C.1.43 Esec_Ctrl_Rpt_V
    94
    
    C.1.44 Esec_Display_Rpt_V
    94
  - Esec_Port_Reference_Rpt_V
    95
  - C.1.45 Esec_Port_Reference_Rpt_V
    95
  - Esec_Protocol_Reference_Rpt_V
    96
  - Esec_Sequence_Rpt_V
    96
    
    C.1.46 Esec_Protocol_Reference_Rpt_V
    96
    
    C.1.47 Esec_Sequence_Rpt_V
    96
  - Esec_Uuid_Uuid_Assoc_Rpt_V
    97
  - EVENTS_ALL_RPT_V (Legacy View)
    97
- EVENTS_ALL_RPT_V1 (Legacy View)
  97
- EVENTS_ALL_V (Legacy View)
  97
- EVENTS_RPT_V (Legacy View)
  97
- EVENTS_RPT_V1 (Legacy View)
  97
- Events_Rpt_V2
  97
- Events_Rpt_V3
  102
- C.1.55 Events_Rpt_V3
  102
- Evt_Agent_Rpt_V
  105
- C.1.56 Evt_Agent_Rpt_V
  105
- Evt_Agent_Rpt_V3
  106
- Evt_Asset_Rpt_V
  106
  - C.1.57 Evt_Agent_Rpt_V3
    106
  - C.1.58 Evt_Asset_Rpt_V
    106
- Evt_Asset_Rpt_V3
  107
- C.1.59 Evt_Asset_Rpt_V3
  107
- Evt_Dest_Evt_Name_Smry_1_Rpt_V
  108
- Evt_Dest_Smry_1_Rpt_V
  108
  - C.1.60 Evt_Dest_Evt_Name_Smry_1_Rpt_V
    108
  - C.1.61 Evt_Dest_Smry_1_Rpt_V
    108
- Evt_Dest_Txnmy_Smry_1_Rpt_V
  109
- C.1.62 Evt_Dest_Txnmy_Smry_1_Rpt_V
  109
- Evt_Name_Rpt_V
  110
- Evt_Port_Smry_1
  110
- Evt_Port_Smry_1_Rpt_V
  110
  - C.1.63 Evt_Name_Rpt_V
    110
  - C.1.64 Evt_Port_Smry_1
    110
  - C.1.65 Evt_Port_Smry_1_Rpt_V
    110
- Evt_Prtcl_Rpt_V
  111
- Evt_Rsrc_Rpt_V
  111
- Evt_Sev_Smry_1_Rpt_V
  111
  - C.1.66 Evt_Prtcl_Rpt_V
    111
  - C.1.67 Evt_Rsrc_Rpt_V
    111
  - C.1.68 Evt_Sev_Smry_1_Rpt_V
    111
- Evt_Src_Collector_Rpt_V
  112
- Evt_Src_Grp_Rpt_V
  112
  - C.1.69 Evt_Src_Collector_Rpt_V
    112
  - C.1.70 Evt_Src_Grp_Rpt_V
    112
- Evt_Src_Mgr_Rpt_V
  113
- Evt_Src_Offset_Rpt_V
  113
  - C.1.71 Evt_Src_Mgr_Rpt_V
    113
  - C.1.72 Evt_Src_Offset_Rpt_V
    113
- Evt_Src_Rpt_V
  114
- Evt_Src_Smry_1_Rpt_V
  114
  - C.1.73 Evt_Src_Rpt_V
    114
  - C.1.74 Evt_Src_Smry_1_Rpt_V
    114
- Evt_Src_Srvr_Rpt_V
  115
- Evt_Txnmy_Rpt_V
  115
  - C.1.75 Evt_Src_Srvr_Rpt_V
    115
  - C.1.76 Evt_Txnmy_Rpt_V
    115
- Evt_Usr_Rpt_V
  116
- Evt_Xdas_Txnmy_Rpt_V
  116
  - C.1.77 Evt_Usr_Rpt_V
    116
  - C.1.78 Evt_Xdas_Txnmy_Rpt_V
    116
- External_Data_Rpt_V
  117
- Hist_Correlated_Events
  117
  - C.1.79 External_Data_Rpt_V
    117
  - C.1.80 Hist_Correlated_Events
    117
- HIST_CORRELATED_EVENTS_RPT_V (Legacy View)
  118
- Hist_Events
  118
- C.1.82 Hist_Events
  118
- HIST_EVENTS_RPT_V (Legacy View)
  120
- Images_Rpt_V
  120
- C.1.84 Images_Rpt_V
  120
- Incidents_Assets_Rpt_V
  121
- Incidents_Events_Rpt_V
  121
  - C.1.85 Incidents_Assets_Rpt_V
    121
  - C.1.86 Incidents_Events_Rpt_V
    121
- Incidents_Rpt_V
  122
- Incidents_Vuln_Rpt_V
  122
  - C.1.87 Incidents_Rpt_V
    122
  - C.1.88 Incidents_Vuln_Rpt_V
    122
- L_Stat_Rpt_V
  123
- Logs_Rpt_V
  123
- Mssp_Associations_V
  123
  - C.1.89 L_Stat_Rpt_V
    123
  - C.1.90 Logs_Rpt_V
    123
  - C.1.91 Mssp_Associations_V
    123
- Network_Identity_Rpt_V
  124
- Organization_Rpt_V
  124
- Person_Rpt_V
  124
  - C.1.92 Network_Identity_Rpt_V
    124
  - C.1.93 Organization_Rpt_V
    124
  - C.1.94 Person_Rpt_V
    124
- Physical_Asset_Rpt_V
  125
- Product_Rpt_V
  125
  - C.1.95 Physical_Asset_Rpt_V
    125
  - C.1.96 Product_Rpt_V
    125
- Role_Rpt_V
  126
- Rpt_Labels_Rpt_V
  126
- Sensitivity_Rpt_V
  126
  - C.1.97 Role_Rpt_V
    126
  - C.1.98 Rpt_Labels_Rpt_V
    126
  - C.1.99 Sensitivity_Rpt_V
    126
- Sentinel_Host_Rpt_V
  127
- Sentinel_Plugin_Rpt_V
  127
- Sentinel_Rpt_V
  127
- States_Rpt_V
  128
- Unassigned_Incidents_Rpt_V
  128
- Users_Rpt_V
  129
- Usr_Account_Rpt_V
  130
- Usr_Identity_Ext_Attr_Rpt_V
  130
- Usr_Identity_Rpt_V
  130
  - Vendor_Rpt_V
    131
  - Vuln_Calc_Severity_Rpt_V
    131
  - Vuln_Code_Rpt_V
    132
  - Vuln_Info_Rpt_V
    132
  - Vuln_Rpt_V
    133
  - Vuln_Rsrc_Rpt_V
    134
  - Vuln_Rsrc_Scan_Rpt_V
    134
  - Vuln_Scan_Rpt_V
    134
  - Vuln_Scan_Vuln_Rpt_V
    135
  - Vuln_Scanner_Rpt_V
    135
  - Workflow_Def_Rpt_V
    136
  - Workflow_Info_Rpt_V
    136
  - Deprecated Views
    136
  - C.2 Deprecated Views
    136
D Documentation Updates

139
- October 2009
  139
- D.1 October 2009
  139

Advertisement

Advertisement

Related Products

NOVELL Categories

Software Server Recording Equipment Print Server Gateway

More NOVELL Manuals