Security Analytics Engine 1.0

Chat now with support

Adding and managing applications Adding and managing risk policies

Adding a new risk policy Managing risk policies

Introduction Auditing page Filtering the audit events Configuring the retention settings Displaying details for an individual audit event Adding and managing overrides on the Auditing page

Policy Overrides

Introduction Policy Overrides page Adding and managing overrides on the Policy Overrides page

Fallback Password

Introduction Fallback Administrator Password page

Security Settings

Introduction Security wizard

Adding new authentication providers

Security wizard pages

Glossary About Dell

Conditions

•

Introduction

•

Conditions page

•

Condition types

•

Adding and managing conditions

Introduction

While a plugin retrieves and stores the data for the Security Analytics Engine, conditions are what allow you to tailor how that data is used to fit the needs of each application. Each condition contains parameters that dictate what to look for specifically during an access attempt: a certain IP address, a browser that has never been used by the user, a regularly occurring time of access, etc.

From the Home page of the Security Analytics Engine Administration web site, click on the Conditions link to create and manage condition parameters for the plugins.

Conditions page

The Conditions page is displayed when Conditions is clicked on the Home page of the Security Analytics Engine Administration web page.

The following buttons appear on the top left of this page:

This button is used for creating a duplicate of an existing condition.

This button is used for previewing a default condition.


	NOTE: This button is replaced by the button when a duplicate condition is selected from the table.

This button is used for editing and/or viewing a duplicate condition.


	NOTE: This button replaces the button when a duplicate condition is selected from the table.

This button is used for deleting a non-default condition.

The following information is displayed for each condition:

Name

This column displays the name of the condition.

Type

This column displays the type of condition.

Description

This column displays a description of the condition.

Condition types

Conditions are used to define how the information stored and retrieved by a plugin is used by an application. The Security Analytics Engine provides a default condition of each type which is usable by risk policies without requiring additional configuration. You may also create customizable conditions of any condition type (see Creating a new condition).

The following types of conditions are available:

•

Abnormal Browser

•

Abnormal Location

•

Abnormal Time

•

Associated w/ Malware

•

•

•

•

Please select your product:

To serve you better, please complete the Purpose of your Chat:

Recommended Solutions for Your Problem

Security Analytics Engine 1.0 - User Guide

Conditions

Introduction

Conditions page

Condition types