background image

®  

 

Threat Analysis Reporter

EVALUATION

GUIDE

Models: TAR HL/SL/MSA

Software Version: 1.3.00

Document Version: 01.05.09

Summary of Contents for TAR "MSA"

Page 1: ... Threat Analysis Reporter EVALUATION GUIDE Models TAR HL SL MSA Software Version 1 3 00 Document Version 01 05 09 ...

Page 2: ...y of this document However 8e6 Technologies makes no warranties with respect to this documentation and disclaims any implied warranties of merchantability and fitness for a particular purpose 8e6 Technologies shall not be liable for any error or for incidental or consequential dam ages in connection with the furnishing performance or use of this manual or the examples herein Due to future enhancem...

Page 3: ...4 Score 4 Time Span 5 Threat Level 5 Step 2 View Child Gauges 5 Step 3 View a List of Users Affecting a Child Gauge 6 Step 4 View an Individual User s Gauge Activity 6 Step 5 Take Action on an Individual s Activity 7 Step 6 View Category Details 7 Step 7 View the Actual Web Page Visited by the User 8 CHAPTER 3 CREATE A NEW URL GAUGE 9 Step 1 Select the Gauges Menu Item 9 Step 2 Add a Gauge Group 9...

Page 4: ... Time Span 14 CHAPTER 6 MONITOR BANDWIDTH GAUGES 15 Step 1 Select Bandwidth and Outbound 15 Step 2 Select the FTP Protocol Gauge 15 Step 3 Select Port 21 Child Gauge 16 Step 4 View the User Summary 16 Step 5 View Port Traffic 17 CHAPTER 7 VIEW A BANDWIDTH TREND REPORT 18 Step 1 Select Bandwidth and Trend Chart 18 Step 2 View Bandwidth Trend Chart Data 18 ...

Page 5: ...ompany and product is greatly appreciated This Evaluation Guide Is designed to provide product evaluators an efficient way to install configure and exercise the main product features of the TAR Install Configure and Test TAR To install the TAR appliance configure the server and to test the unit to ensure that reporting is operational please refer to the step by step instructions in the Threat Anal...

Page 6: ... Login window Step 3 Log into the Application 1 In the Username field type in your username If you are logging in as the global administrator enter the username registered during the quick start wizard procedures If you are logging in as a group administrator enter the username set up for you by the global administrator 2 In the Password field type in your password If you are logging in as the glo...

Page 7: ...CHAPTER 1 ACCESS THE TAR WEB CLIENT STEP 3 LOG INTO THE APPLICATION 8E6 TECHNOLOGIES THREAT ANALYSIS REPORTER EVALUATION GUIDE 3 URL dashboard with URL gauges ...

Page 8: ...mple gauges that correspond with five of 8e6 s super categories Adult Content Security Shopping Bandwidth and Illegal Administrators can create their own gauges as well as delete the default gauges Score The score is the large number in the center of the gauge that is based upon the number of URL page hits see NOTE below that occur in this specific category in a given period of time NOTES In addit...

Page 9: ...e ceiling created by the administrator For example if the administrator creates a gauge with a threshold of 100 when the score reaches 67 the gauge dial will move into the red section of the dial and the score number will turn red and begin to flash These gauges are designed to provide an intuitive reminder when a specific category gauge is experiencing abnormal levels of activity so the adminis t...

Page 10: ...onsible for driving that gauge s score In this example double click the Spyware child gauge Open the child gauges window Step 4 View an Individual User s Gauge Activity In the Spyware window select the top name from the user list and click User Summary to get a complete view of all activity for that user This will help deter mine if the user is just abusing a single category or has high activity i...

Page 11: ...user from further accessing a category This action is called a manual lockout Lockouts can be defined from 30 minutes to eight hours or set for an unlimited amount of time until the administrator manually unlocks the user View a summary of an end user s activity NOTE There is also a way to automatically lock out the user that will be demonstrated later in this document Step 6 View Category Details...

Page 12: ...NOLOGIES THREAT ANALYSIS REPORTER EVALUATION GUIDE Step 7 View the Actual Web Page Visited by the User You can now view the full URL details for this specific user In this example select the first URL in the list and then click Open URL to open the actual Web page the end user visited View URL Details ...

Page 13: ... 3 CREATE A NEW URL GAUGE Step 1 Select the Gauges Menu Item In order to create a new custom gauge select the Gauges menu item from the left hand menu This action will open a pop up window see Step 2 Select Gauges from left panel Step 2 Add a Gauge Group Click on the Add Gauge Group button to set parameters for the gauge Add a new gauge ...

Page 14: ...g a URL Trend Report for One Day to see the normal level of activity for that category and then set the threshold slightly above that level See Chapter 5 View a URL Trend Report for details on how to use the trend report 4 Put 60 in the Timespan field 5 Add Adware Alcohol and Art into the Assigned Categories field by selecting each category and then clicking the Add button TIP If you make a mistak...

Page 15: ...s for each child category For example if you deemed Alcohol more critical than Art you would set a lower threshold for Alcohol Also you can choose a different gauge method other than All For example you might select a gauge method that only monitors Keywords though a change at this field is not required Once you click Next the gauge setup wizard closes and takes you back to the dashboard where you...

Page 16: ...d per user so you can be automatically notified via email and the violating user will be automatically locked out once a threshold is exceeded Step 1 Select Alerts In the left hand menu tree click Policy to explode the sub options and then click Alerts This action will open a pop up window see Step 2 Select Alerts from left panel Step 2 Add a New Alert Click on the Add New Alert button to set para...

Page 17: ...nitored in the specific gauge only A Medium selec tion will lock out the user from Internet access altogether A High selection will lock out the users from all network protocols so they cannot access the Internet send e mails use instant messaging or use P2P or FTP NOTES Time based lockouts can be set for a range of 30 minutes one hour to eight hours or unlimited System Tray will not be shown in t...

Page 18: ...e helpful for monitoring improvement of activity in a certain category as well as providing a good tool for setting appropriate thresholds for each TAR gauge Step 1 Access Trend Charts Click the Report Analysis menu and then the Trend Chart sub menu Select Trend Chart from left panel Step 2 Change the Time Span You can change the time span represented in the trend report by selecting one of five o...

Page 19: ...nd and outbound activity This information can then be easily compared to the user s URL activity providing a complete picture of the user s Web behavior Step 1 Select Bandwidth and Outbound Select the Bandwidth menu option and the Outbound sub menu option Select Bandwith and Outbound Step 2 Select the FTP Protocol Gauge Double click the FTP protocol gauge NOTE The score on bandwidth gauges is base...

Page 20: ...E6 TECHNOLOGIES THREAT ANALYSIS REPORTER EVALUATION GUIDE Step 3 Select Port 21 Child Gauge Double click on Port 21 child gauge FTP Port 21 gauge Step 4 View the User Summary Select one of the IP addresses in the list and then click the User Summary button View User Summary ...

Page 21: ...IES THREAT ANALYSIS REPORTER EVALUATION GUIDE 17 Step 5 View Port Traffic Select the FTP protocol from the list and click the Port View button The port traffic for this user will display for each of the ports assigned to FTP e g Port 20 and 21 View bandwidth used by end user ...

Page 22: ...mprovement over time as well as providing a good tool for setting appropriate thresholds for each TAR bandwidth gauge Step 1 Select Bandwidth and Trend Chart Select the Bandwidth menu option in the left hand menu and then select the sub menu option Trend Chart This action will open a pop up window see Step 2 Bandwidth and Trend Chart selection Step 2 View Bandwidth Trend Chart Data You might try s...

Reviews: