© 2006 Cisco Systems, Inc. All rights reserved. HIPS v3.02-1 Configuring Groups and Polices Configuring Groups. - презентация

1 © 2006 Cisco Systems, Inc. All rights reserved. HIPS v Configuring Groups and Polices Configuring Groups

2 © 2006 Cisco Systems, Inc. All rights reserved. HIPS v Objectives At the end of this lesson, you will be able to meet these objectives: Identify the advantages of grouping hosts Describe how to configure a group

3 © 2006 Cisco Systems, Inc. All rights reserved. HIPS v Groups Desktops Group Web Servers Group Mail Servers Group Desktops Group Policies Mail Servers Group Policies Web Servers Group Policies CSA MC

4 © 2006 Cisco Systems, Inc. All rights reserved. HIPS v Grouping Criteria System function Business groups Geographical or topological location Importance to your enterprise

5 © 2006 Cisco Systems, Inc. All rights reserved. HIPS v Configuring Groups

6 © 2006 Cisco Systems, Inc. All rights reserved. HIPS v Configuring Groups (Cont.)

7 © 2006 Cisco Systems, Inc. All rights reserved. HIPS v Mandatory Group Enrollment A registered host must be enrolled in one of these architectural groups based on its operating system: Windows Solaris Linux

8 © 2006 Cisco Systems, Inc. All rights reserved. HIPS v Generating and Distributing Rule Programs

9 © 2006 Cisco Systems, Inc. All rights reserved. HIPS v Summary To protect the hosts on a network, you need to apply a set of security policies to each host. Host groups streamline the process of assigning security policies to several hosts at once. Hosts with similar security requirements are placed in a group. Security policies are made up of sets of rules. Policies govern the hosts in a group. To distribute the CSA MC configuration changes to the Agents, you need to generate rule programs.

10 © 2006 Cisco Systems, Inc. All rights reserved. HIPS v