Security Analytics Engine 1.0 - Help Desk User Guide

Tchater maintenant avec le support

Introduction Auditing page Filtering the audit events Displaying details for an individual audit event Adding and managing overrides on the Auditing page

Policy Overrides

Introduction Policy Overrides page Adding and managing overrides on the Policy Overrides page

About Dell

Adding and managing overrides on the Policy Overrides page


	NOTE: Policy Overrides can also be created and managed on the Auditing page by selecting specific audit events. See Auditing page for more information.


	NOTE: In cases where overrides have been disabled for a risk policy, the threat level will always be reported regardless of whether or not there is an override in place for the user.

Adding a policy override

When a user has failed to authenticate due to a high threat level, you can create an override to allow that user access to Security Analytics Engine protected applications for a specified period of time.


	IMPORTANT: To avoid allowing a malicious user access to an application, only create an override when you are positive the user is legitimate.

To add a policy override:

From the Home page, click Policy Override.

Click the Add Override button in the upper right corner to open the Add Override dialog.

In the User Name field, enter the name of the user to which the override applies.

For Browser ID, enter the browser ID for the user.

In the User Address field, enter the user’s IP address.

Click the

button to select the date the override will expire. By default, the next day is selected.

Click the Save button to save the override and close the dialog. The new override will appear listed on the Policy Overrides page.

Managing a policy override

To edit a policy override:

From the Home page, click Policy Override.

Select the override to edit and click Edit to open the Modify Override dialog.

The following information is displayed for the override:

•

Last Updated By: <nn> - The username of the administrator or help desk operator that last created or modified the override.


	NOTE: This field cannot be edited.

•

User Name - The name of the user to whom the override applies.


	NOTE: This field cannot be edited.

•

Browser ID - The browser ID to which the override applies.

•

User Address - The IP address to which the override applies.

•

Expiration - Click the

button to select an expiration date for the override.

Click the Save button to save the changes to the override and close the dialog. The changes to the override will now be in effect for the user until the specified expiration.

To delete a policy override:

From the Home page, click Policy Override.

On the Policy Override page, use one of the following methods to delete a policy override:

•

Locate the policy override to delete and click the corresponding Delete button.

•

Click the Edit button associated with the override to open the Modify Override dialog. Click the Delete button.

•

Select the check box to the left of the policy override(s) to delete and click the Delete Selected Overrides button located in the lower left corner.

A dialog will be displayed confirming that you want to delete the selected override(s). Click the Delete button.