© 2006 Cisco Systems, Inc. All rights reserved. HIPS v3.05-1 Administering Events and Generating Reports Generating Reports. - презентация

1 © 2006 Cisco Systems, Inc. All rights reserved. HIPS v Administering Events and Generating Reports Generating Reports

2 © 2006 Cisco Systems, Inc. All rights reserved. HIPS v Objectives At the end of this lesson, you will be able to meet these objectives: Identify the various types of reports that you can generate in CSA MC Describe how to generate an Events by Severity report Describe how to generate an Events by Group report Describe how to generate a Group Detail report Describe how to generate a Host Detail report Describe how to generate a Policy Detail report Describe how to view the history of configuration changes made to CSA MC

3 © 2006 Cisco Systems, Inc. All rights reserved. HIPS v Types of Reports Events by Severity Events by Group Policy Detail Group Detail Host Detail Types of Reports

4 © 2006 Cisco Systems, Inc. All rights reserved. HIPS v HTML Frame Report Viewer

5 © 2006 Cisco Systems, Inc. All rights reserved. HIPS v ActiveX Crystal Report Viewer

6 © 2006 Cisco Systems, Inc. All rights reserved. HIPS v Web Server Issues CSA MC Database Backup Critical Information Events by Severity Report Grouping Events by Severity

7 © 2006 Cisco Systems, Inc. All rights reserved. HIPS v Generating an Events by Severity Report

8 © 2006 Cisco Systems, Inc. All rights reserved. HIPS v Events by Severity Report

9 © 2006 Cisco Systems, Inc. All rights reserved. HIPS v Events by Host Group Report IIS Web Servers Group Apache Web Servers Group Grouping Events by Host Group

10 © 2006 Cisco Systems, Inc. All rights reserved. HIPS v Generating an Events by Group Report

11 © 2006 Cisco Systems, Inc. All rights reserved. HIPS v Events by Group Report

12 © 2006 Cisco Systems, Inc. All rights reserved. HIPS v Group Detail Report Windows Desktops Group Viewing Group Details

13 © 2006 Cisco Systems, Inc. All rights reserved. HIPS v Generating a Group Detail Report

14 © 2006 Cisco Systems, Inc. All rights reserved. HIPS v Group Detail Report

15 © 2006 Cisco Systems, Inc. All rights reserved. HIPS v Viewing Host Details Headquarters Branch Office DNS Server Branch Office DNS Server Host Detail Report

16 © 2006 Cisco Systems, Inc. All rights reserved. HIPS v Generating a Host Detail Report

17 © 2006 Cisco Systems, Inc. All rights reserved. HIPS v Host Detail Report

18 © 2006 Cisco Systems, Inc. All rights reserved. HIPS v Viewing Policy Details Instant Messenger InternetPolicy Policy Detail Report

19 © 2006 Cisco Systems, Inc. All rights reserved. HIPS v Generating a Policy Detail Report

20 © 2006 Cisco Systems, Inc. All rights reserved. HIPS v Policy Detail Report

21 © 2006 Cisco Systems, Inc. All rights reserved. HIPS v Viewing the Audit Trail

22 © 2006 Cisco Systems, Inc. All rights reserved. HIPS v Summary You can monitor the actions occurring on individual host systems by configuring the Agent to log an event each time an action is triggered. You can generate various types of reports to view and interpret summarized Event Log data. CSA MC provides two types of report viewersHTML Frame and ActiveX. You can analyze system actions and determine the state of a network by generating an Events by Severity report. You can analyze group events based on the host group that triggered the events generating an Events by Group report. You can monitor host by groups in a network by generating a Group Detail report. You can track detailed information about each host in a group by generating a Host Detail report. You can view and monitor information about selected policies by generating a Policy Detail report. You can view all the changes made to the CSA MC configuration by using the Audit Trail option.

23 © 2006 Cisco Systems, Inc. All rights reserved. HIPS v