Defender 5.9.3 - Administration Guide

Getting started Managing Defender objects in Active Directory Configuring security tokens Securing VPN access Securing Web sites Securing Windows-based computers Defender Management Portal (Web interface) Securing PAM-enabled services Delegating Defender roles, tasks, and functions Automating administrative tasks Administrative templates Integration with Active Roles Integration with Cloud Access Manager Appendices
Appendix A: Enabling diagnostic logging Appendix B: Troubleshooting common authentication issues Appendix C: Troubleshooting DIGIPASS token issues Appendix D: Defender classes and attributes in Active Directory Appendix E: Defender Event Log messages Appendix F: Defender Client SDK Appendix G: Defender Web Service API

Viewing token requests from users

Viewing token requests from users

You can view a list of token requests submitted by users through the Defender Self-Service Portal. This list provides such information as the name of user who requested a token, requested token type, and whether the token has been issued to the user.

To view token requests, the account with which you sign in to the Defender Management Portal must have an appropriate portal role assigned. For more information, see Portal roles.

To view token requests

  1. Sign in to the Defender Management Portal.

    For more information, see Opening the portal.

  2. Click the Administer Defender option.
  3. In the left pane, click the Activity tab.
  4. In the right pane, click the Token Requests tab to open a list of token requests.

The list has the following columns:

  • User  Shows the name of the user who requested a token through the Defender Self-Service Portal.
  • Token  Shows the type of requested token.
  • Request Type  Shows the method that was used to deliver the token. Possible methods include immediate token delivery with no user verification, verification via an automated phone call or SMS, verification via e-mail.
  • Request Date  Shows the date and time when the request was made or completed.
  • Request Completed  Shows whether the token request was completed.

Using Defender reports

Using Defender reports

On the Defender Management Portal, you can generate and view a number of reports providing information about the security tokens, authentication requests from users, configuration of Defender Security Servers, installed Defender licenses, RADIUS payloads assigned to users, and more. After generating a report, you can print it out or save it in HTML or XML format.

To use Defender reports, the user account with which you sign in to the Defender Management Portal must have an appropriate portal role assigned. For more information, see Portal roles.

You can start using reports by clicking the Defender reports option on the home page of the portal:

The page that opens provides the following tabs you can use to configure, schedule, generate, and view Defender reports:

 

Report Scheduler  Allows you to select a report, configure its settings, and schedule the report for generation.

Scheduled Reports  Provides a list of all reports you have scheduled so far. The items in the list are also called scheduled report definitions. You can use this node to view the details of scheduled reports, immediately generate scheduled reports without waiting for next generation time, or selectively delete the scheduled report definitions you no longer need. Deleting a scheduled report definition stops the generation of the corresponding report but does not delete already generated reports located on the Generated Reports tab.

Generated Reports  Provides a list of reports generated from the corresponding report definitions on the Scheduled Reports tab. You can use this node to view the generated reports and selectively delete the generated reports you no longer need. Deleting a generated report does not affect the underlying scheduled report definition located on the Scheduled Reports tab.

See also:

Generating a report

Generating a report

To generate a Defender report, you need to configure its settings and schedule its generation. You can schedule a report to generate on a recurring basis or only once.

To use Defender reports, the user account with which you sign in to the Defender Management Portal must have an appropriate portal role assigned. For more information, see Portal roles.

To generate a report

  1. Sign in to the Defender Management Portal.

    For more information, see Opening the portal.

  2. Click the Defender reports option.
  3. In the left pane, click the Report Scheduler tab.
  4. In the right pane, from the Select a report list, select the report you want to schedule and generate.
  5. In the Report settings area, configure settings for your report.

    For more information about available settings, click the report name below.

  6. After configuring the report settings, click the Schedule button, and then type the report description and configure the generation schedule. For more information, see Report scheduling settings.
  7. When you are finished, click Save.

    After scheduling your report, you can click the Preview button to display the report you have just created.

Audit trail

Audit trail

The Audit trail report provides information about all user authentication requests processed by a specific Defender Security Server over a specified period of time.

 

Table 19:

Audit trail report settings

Setting

Description

Select a report type

Select the type of report you want to generate. Basically, this option allows you to specify the type of the Defender Security Server log files from which you want to collect data for your report.

You can select one of the following:

  • Audit report  This report is generated using the log files whose names have the DSSAudit prefix.
  • Accounting Report  This report is generated using the log files whose names have the DSSAcct prefix.

Defender Security Server

Select the Defender Security Server whose data you want to use for generating the report.

Reporting period

Specify the time period for which you want to generate the report.

Select date and time formats

Select this check box to choose the format for displaying times and dates in the report. After selecting this check box, use the following options:

  • Time format  Select the format for displaying times in the report.
  • Date format  Select the format for displaying dates in the report.
  • Time zone  Select the time zone for which you want to generate the report.
Documentos relacionados