Chat now with support

Get Live Help
Complete Registration

Sign In

Request Pricing

Contact Sales

Security Analytics Engine 1.1 - User Guide

Table of Contents

Security Analytics Engine Overview

Introduction Launch the Security Analytics Engine Administration web site Web site components

Heading bar Main web pages Navigating the Security Analytics Engine Administration web site Filter data

Introduction Plugins page Plugins

BlacklistProviderPlugin BuiltinPlugin GeoLocationPlugin LdapPlugin SonicWALLPlugin

Editing plugins

Introduction Conditions page Condition categories

Abnormal Browser

Abnormal Authentication Abnormal Time Associated w/ Application Category Associated w/ Application Threat Level Associated w/ Blacklist Associated w/ Country Associated w/ Malware Authentication List

Abnormal Location Country List

Dynamic Blacklist Network List

Role List Last Logon LDAP Group

Adding and managing conditions

Creating a new condition Managing conditions

Shared Policies

Introduction Shared risk policies Shared Policies page Adding and managing shared risk policies

Adding a new shared risk policy Managing shared risk policies

Shared Policy wizard

Introduction Risk policies Applications page

Sample Application

Adding and managing applications

Adding a new application Managing applications

Adding and managing risk policies

Adding a new risk policy Managing risk policies Managing shared risk policies in an application

Application wizard

Introduction Auditing page

Filtering options Retention settings option Audit Events table Event details Download options

Filtering the audit events Configuring the retention settings Displaying details for an individual audit event Downloading audit events information Adding and managing overrides on the Auditing page

Adding a policy override Managing a policy override

Introduction Issued Alerts page

Filtering options Issued Alerts table

Filtering the issued alerts

Policy Overrides

Introduction Policy Overrides page Managing overrides on the Policy Overrides page

Fallback Password

Introduction Fallback Administrator Password page

Security Settings

Introduction Security wizard

Adding new authentication providers

Security wizard pages

Creating a new condition

To create a new condition

1

On the Conditions page, select a condition of the same type and click the

button to create a duplicate of that condition.

2

On the Edit Condition dialog, enter a new name for the condition in the Identifier field.

3

In the remaining fields, enter settings information for the condition. These fields depend on the type of condition, see Condition categories for more information on the available settings within each type of condition.


	NOTE: In order to avoid application configuration errors, the Risk Type Value parameter available for some of the conditions cannot be edited once the condition has been saved. If this parameter must be changed after the condition has been saved, a new condition must be created.

4

Click Save to save changes and return to the Conditions page.

Managing conditions

All default conditions can be viewed on the Conditions page, and duplicate conditions can be edited or deleted.

To view a default condition

1

On the Conditions page, select a default condition.

2

button to open the View Condition dialog.

3

After viewing the condition, click the Close button to close the dialog.

To edit a condition


	NOTE: Default conditions cannot be edited.

1

On the Conditions page, select the condition to edit.

2

button to open the Edit Condition dialog.


	NOTE: In order to avoid application configuration errors, the Risk Type Value parameter available for some of the conditions cannot be edited once the condition has been saved. If this parameter must be changed after the condition has been saved, a new condition must be created. For more information, see To create a new condition.

3

After making edits, click the Save button to save the changes and close the dialog.

To delete a condition


	NOTE: Default conditions and conditions that are currently used in a risk policy cannot be deleted.

1

On the Conditions page, select the condition to delete.

2

button to delete the condition.

3

A dialog will appear confirming that you want to delete the selected condition. Click the Delete button.

Shared Policies

•

•

Shared risk policies

•

Shared Policies page

•

Adding and managing shared risk policies

•

Shared Policy wizard

Introduction

The Security Analytics Engine provides the option of having multiple applications use the same risk policy without having to recreate or edit the risk policy each time an application is added or your risk policy needs change. For more information on the different uses for risk policies, see Shared risk policies.

From the Home page of the Security Analytics Engine Administration web site, click on the Shared Policies link to open the Shared Policies page where you can create and manage risk policies that can be shared by multiple applications.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating

© 2025 One Identity LLC. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center