H3c-technologies H3C SecCenter UTM Manager Manual do Utilizador Página 162
- Página / 262
- Índice
- MARCADORES
Avaliado. / 5. Com base em avaliações de clientes
154
Item Description
Virus
Specify the system to raise alarms when detecting virus events.
You can also specify a filter for virus events, so that the system will raise alarms only for
the detected virus events that match the filter configurations.
DDoS
Specify the system to raise alarms when detecting DDoS events.
You can also specify a filter for DDoS events, so that the system will raise alarms only for
the detected DDoS events that match the filter configurations.
Filter
Optional
Select a filter.
To configure a filter, click
to enter the filter management page. For more
information, see “
Managing filters.”
Alarm Time
Optional
Specify when alarm Emails will be sent
Required when alarming by emails or SMS is selected. If no alarm time is specified, the
system will not send any alarm email or message.
Select the Alarm Info tab and the system will display all alarms raised in the last day by default. You can
select a time range and then query alarms raised during the specified time range, view the detailed
information of an alarm, and export alarms to an Excel file, as shown in
Figure 145. Table 130 describes
fields of the alarm information list.
Figure 145 Alarm information
Table 130 Fields of the alarm information list
Field Description
Time Time when the attack/virus/DDoS event occurred
Device IP IP address of the device that detected the event
Alarm Type Type of the event recorded in the current alarm
Attack/Virus/DDoS
Name
Name of the attack/virus/DDoS event
- H3C SecCenter UTM Manager 1
- Preface 3
- Obtaining documentation 4
- Technical support 4
- Documentation feedback 4
- Contents 5
- Overview 9
- Installing H3C SecCenter 10
- Registering the UTM Manager 12
- Uninstalling the UTM Manager 13
- CAUTION: 14
- Integration with iMC 15
- Removing SCMTOOL 17
- System management 18
- Device group list 19
- Adding a device group 19
- Template list 21
- Adding a template 21
- Figure 13 Add a template 22
- Item Description 22
- Managing devices 23
- Device list 24
- Adding a device 25
- Figure 15 Add a device 26
- Managing device software 28
- Running Config 36
- Importing device software 39
- Managing events 41
- Device interface event list 42
- Operator management 43
- Operator list 44
- Adding an operator 45
- Managing operation logs 46
- Changing your password 47
- System configuration 48
- Configuring management ports 49
- Configuring the mail server 51
- Configuring SMS alarming 52
- Managing filters 53
- Filter list 54
- Adding a filter 54
- Managing LDAP servers 55
- LDAP server list 56
- Adding an LDAP server 56
- Configuring segments 58
- Monitoring the disk space 59
- Managing subsystems 61
- Adding a subsystem 62
- Bandwidth management 64
- Figure 53 Traffic snapshot 65
- Segment traffic comparison 66
- Traffic anomaly alarm 67
- Service traffic trend 69
- Service traffic distribution 73
- Generic service analysis 76
- Detailed session statistics 85
- Managing IP groups 86
- IP group list 87
- Adding an IP group 88
- Behavior auditing 97
- Figure 83 Website analysis 98
- Email application analysis 99
- User behavior auditing 100
- FTP application auditing 101
- Email application auditing 102
- Telnet application auditing 104
- SQL application auditing 105
- NAT logs auditing 106
- Quick auditing 107
- User details 108
- User behavior alarm 109
- Option Description 114
- Configuration guide 119
- Database access alarm list 122
- Field Description 124
- Item Description 125
- URL analysis 126
- Aggregate analysis 127
- User action analysis 128
- Category auditing 129
- Audit logs backup 130
- Scheduling auto backup 132
- Importing backed up logs 133
- IPS management 136
- UTM device list 137
- Adding UTM devices 138
- Upgrading signature files 138
- Managing signature files 139
- Uploading a file 140
- Modifying a signature file 140
- Rule list 141
- Displaying device statistics 142
- Realtime monitoring 143
- Monitoring devices 149
- Event analysis 150
- Attack event details 154
- Managing report export tasks 163
- Adding a report export task 164
- Policy management 165
- Anti-virus policy list 171
- Adding an anti-virus policy 171
- Policy application list 174
- Adding a policy application 175
- Displaying attack signatures 176
- Configuring custom events 179
- Custom event list 180
- Adding a custom event 181
- Changing the event status 186
- Modifying a custom event 187
- Policy list 188
- Firewall management 190
- Firewall device list 191
- Adding firewall devices 191
- Viewing device statistics 192
- Configuration segment list 194
- Managing deployment tasks 199
- Attack events monitoring 200
- Recent events list 202
- Viewing event details 205
- Report export task list 208
- Event auditing 209
- Auditing operation logs 210
- Auditing blacklist logs 211
- Auditing NAT logs 212
- Auditing MPLS logs 213
- Auditing other logs 213
- Security policy management 214
- Security zone list 215
- Adding a security zone 215
- Managing time ranges 216
- Time range list 217
- Adding a time range 217
- Managing services 218
- Predefined services 219
- User-defined services 219
- Service groups 221
- Managing IP addresses 223
- Address ranges 224
- Subnet addresses 226
- IP address groups 228
- Managing interzone rules 230
- Adding an interzone rule 231
- Managing interzone policies 234
- Adding an interzone policy 235
- Rule management 235
- Sorting interzone rules 236
- Applying interzone policies 238
- Applied rules list 239
- Filed Description 240
- Configuration example 1 241
- Configuration example 2 243
- Configuring the SecCenter 246
- Configuring an IPS policy 250
- Configuring an AV policy 253
- Verification 255
Manuais e produtos relacionados com Segurança H3c-technologies H3C SecCenter UTM Manager
(8 páginas)© 2020, manymanuals-pt.com. Todos os direitos reservados. | 0.492 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comentários a estes Manuais