Security Analytics Engine 1.0

Chatta subito con l'assistenza

Ottieni assistenza in tempo reale
Completa la registrazione

Accedi

Richiedi prezzo

Contatta il supporto vendite

Table of Contents

Security Analytics Engine Overview

Introduction Launch the Security Analytics Engine Administration web site Web site components

Heading bar Main web pages Navigating the Security Analytics Engine Administration web site

Plugins

Introduction Plugins page Plugins

BlacklistProviderPlugin BuiltinPlugin GeoLocationPlugin MalwareDetectionPlugin

Editing plugins

Conditions

Introduction Conditions page Condition types

Abnormal Browser Abnormal Location Abnormal Time Associated w/ Malware Dynamic Blacklist Restricted Country Approved Country Whitelist

Adding and managing conditions

Applications

Introduction Applications page

Sample Application

Adding and managing applications Adding and managing risk policies

Adding a new risk policy Managing risk policies

Application wizard

Auditing

Introduction Auditing page Filtering the audit events Configuring the retention settings Displaying details for an individual audit event Adding and managing overrides on the Auditing page

Policy Overrides

Introduction Policy Overrides page Adding and managing overrides on the Policy Overrides page

Fallback Password

Introduction Fallback Administrator Password page

Security Settings

Introduction Security wizard

Adding new authentication providers

Security wizard pages

Glossary About Dell

Conditions

•

Introduction

•

Conditions page

•

Condition types

•

Adding and managing conditions

Introduction

While a plugin retrieves and stores the data for the Security Analytics Engine, conditions are what allow you to tailor how that data is used to fit the needs of each application. Each condition contains parameters that dictate what to look for specifically during an access attempt: a certain IP address, a browser that has never been used by the user, a regularly occurring time of access, etc.

From the Home page of the Security Analytics Engine Administration web site, click on the Conditions link to create and manage condition parameters for the plugins.

Conditions page

The Conditions page is displayed when Conditions is clicked on the Home page of the Security Analytics Engine Administration web page.

The following buttons appear on the top left of this page:

This button is used for creating a duplicate of an existing condition.

This button is used for previewing a default condition.


	NOTE: This button is replaced by the button when a duplicate condition is selected from the table.

This button is used for editing and/or viewing a duplicate condition.


	NOTE: This button replaces the button when a duplicate condition is selected from the table.

This button is used for deleting a non-default condition.

The following information is displayed for each condition:

Name

This column displays the name of the condition.

Type

This column displays the type of condition.

Description

This column displays a description of the condition.

Condition types

Conditions are used to define how the information stored and retrieved by a plugin is used by an application. The Security Analytics Engine provides a default condition of each type which is usable by risk policies without requiring additional configuration. You may also create customizable conditions of any condition type (see Creating a new condition).

The following types of conditions are available:

•

Abnormal Browser

•

Abnormal Location

•

Abnormal Time

•

Associated w/ Malware

•

•

•

•

Seleziona il prodotto:

Per una maggiore efficacia, compilare l'Obiettivo della chat:

Soluzioni consigliate per il problema

Security Analytics Engine 1.0 - User Guide

Conditions

Introduction

Conditions page

Condition types