Security Analytics Engine Overview
Plugins
Conditions
Introduction
Conditions page
Condition categories
Shared Policies
Application
Behavior
Adding and managing conditions
Abnormal Authentication
Abnormal Time
Associated w/ Application Category
Associated w/ Application Threat Level
Associated w/ Blacklist
Associated w/ Country
Associated w/ Malware
Authentication List
Location
Network
User
Introduction
Shared risk policies
Shared Policies page
Adding and managing shared risk policies
Shared Policy wizard
Applications
Introduction
Risk policies
Applications page
Adding and managing applications
Adding and managing risk policies
Application wizard
Auditing
Introduction
Auditing page
Filtering the audit events
Configuring the retention settings
Displaying details for an individual audit event
Downloading audit events information
Adding and managing overrides on the Auditing page
Issued Alerts
Policy Overrides
Fallback Password
Security Settings
Glossary
Introduction
From the Home page of the Security Analytics Engine Administration web site, click on the Reports link to open the Reports page. From the Reports page, click the Auditing link to open the Auditing page where you can view and manage the auditing data captured by the Security Analytics Engine. This page is also used for overriding a user’s risk score to allow them access to the Security Analytics Engine protected applications for a specified period of time.
Auditing page
The Auditing page is displayed when Auditing is clicked on the Reports page of the Security Analytics Engine Administration web site.
Filtering options
The Search button updates the Audit Events table located beneath the filtering options.
For more information on using the above filtering options, see To filter audit events. For information on filtering individual columns, see To filter data.
Retention settings option
|
If the new number of days is less than the previous number of days, all auditing information currently stored in the database which does NOT fit within the new range will be permanently deleted. Resetting the number of days back to the previous setting will NOT undo the deletion.
|
