3e Technologies International AirGuard 3e-525A-3, Руководство пользователя

Страница: 66 / 112

3e–525A–3 Wireless Access Point Chapter 3: Access Point Confi guration
58 29000167-001 B
Auditing
The 3e-525A-3 collects audit data and provides an interface for au-
thorized administrators to review generated audit records. It generates
records for two separate classes of events: authentication/access to the
system, and actions taken directly on the system. All audit records in-
clude the date/time of the event, the identity associated with the event
(such as the service, computer or user), the success/failure of the event
and a defi nition of the event (by code or explanation).
Every start and stop of the audit service is noted in the audit record.
For audit events resulting from actions of identifi ed users, the 3e-525A-3
shall be able to associate each auditable event with the identity of the user
that caused the event. The 3e-525A-3 shall be able to include or exclude
auditable events from the set of audited events based on object identity,
user identity, subject identity, host identity, and event type.
The TOE provides tools which can be used to review the audit re-
cords. These tools allow the user to query for records based on the iden-
tity associated with the record, such as the user or computer which is
associated with the event.
The Auditing screens contain auditing functions for the system. The
screens and functions are detailed in the following subsections.
Log
The Auditing—Log screen provides a listing of all the audit records.