AudioCodes Mediant 8000, Инструкция по установке, эксплуатации и обслуживанию

Страница: 320 / 924

Installation & Operation Manual 320 Document # LTRT-92224
Mediant 8000
5.
When all files are acknowledged, run File System Integrity Scan by typing
tools
fs scan
and pressing
Enter
. Wait till the scan completes.
client238::~# tools fs scan
6.
If all problems are fixed,
File System Integrity Status
displays
OK
and the
following report is produced.
INTEGRITY CHECKING STATUS
Last Integrity Scan:
Thu Jan 11 15:09:34 GMT 2007
*** No Integrity Violation Detected ***
33.9 OS Auditing on SC Boards
OS auditing is implemented on the SC boards and provides the capability to log the
activity on a system at a granular level. The provided functionality complies with the
Trusted Computer System Evaluation Criteria (TCSEC) at security level C2 and
Common Criteria security requirements.
33.9.1 Auditing Goal
The primary goal of auditing is to record user actions to detect malicious intent. The
problem is to determine which events generate plausible information, and which
events generate negligible information that are so common that they clutter the audit
trail.
The secondary goal of auditing is to avoid performance degradation. The more audit
events recorded, the greater is the load on the system.
33.9.2 Auditing Trail File
When an event occurs, it is recorded in the Audit Trail File. The latter file contains all
relevant audit data in a binary form. Some tools are required to examine the data in a
human readable format. An administrator should periodically examine the Audit Trail
File and analyze system behavior based on the recorded events.
The Solaris and Linux OS provide some basic report tools that may be used to
examine the Audit Trail File. These report tools provide a good starting point for
analyzing the auditing data; however for advanced auditing analysis and automatic
intrusion detection and prevention, 3
rd
party Intrusion Detection Systems (IDS) should
be used.