AuditWizard - Using AuditWizard - Administration - Auditing - AuditScanner Configuration
(→Alert Monitor Settings) |
|||
Line 89: | Line 89: | ||
This is where the basic settings are for activating AlertMonitor and configuring check intervals. | This is where the basic settings are for activating AlertMonitor and configuring check intervals. | ||
− | To enable AlertMonitor, check ''Enable AlertMonitor for this Scanner Configuration''. To set specific alerts, | + | To enable AlertMonitor, check ''Enable AlertMonitor for this Scanner Configuration''. To set specific alerts, go to [[AuditWizard™_-_Using_AuditWizard_-_Administration_-_Auditing_-_AlertMonitor_Configuration|AlertMonitor Configuration]]. |
''Check for Setting Changes Every: X Seconds'' – This setting denotes how often the Alert Monitor will check for changes on the system. | ''Check for Setting Changes Every: X Seconds'' – This setting denotes how often the Alert Monitor will check for changes on the system. |
Revision as of 16:48, 22 February 2011
Contents |
Ribbon Commands
Scanner Configuration
New Configuration: Asks you to save the current configuration, if desired, then a set of defaults is displayed for modification, to become the new configuration.
Load Configuration: Load a saved configuration.
Save Configuration: Save the currently displayed settings with the name that appears in the Scanner Name field. If it already exists, you will be asked to confirm.
Scanner Deployment
Deploy to Network: Writes the Scanner executable and configuration file to the network share. This must be done any time the Scanner configuration is changed, in order to output the settings to the configuration file used by the Scanner executable.
Instant Settings
These settings are the minimum you need in order to use the Scanner.
- Go to Administration > Auditing > AuditScanner Configuration.
- Enter the name of your network share in UNC format, \\SERVER\SHARE, in the Network Share Folder field. AuditWizard will populate the Data Folder field based on this information.
- Click the Save Configuration button. This saves the configuration with the name in the Scanner Name field.
- Click the Deploy to Network button. This writes the data and scanner folders to the root of the network share, if not present, then writes AuditScanner.exe and AuditScanner.xml (the Scanner executable and configuration file, respectively) into \\SERVER\SHARE\scanner.
Advanced Settings
General Settings
Scanner Name: The name for the scanner you are currently running. In addition to the technique of clicking the New Configuration button as noted above, you can create additional configurations by changing the Scanner name, then saving it, which saves a copy with the new name.
Description: Description of the currently loaded Scanner configuration.
Scanner Mode:
- Non-Interactive: The scanner runs in the background and is not visible to the user.
- Interactive: The scanner is visible to the user so they can fill in custom forms.
- First Time Interactive: The Scanner runs interactively the first time, then is invisible for subsequent audits. Useful for newly deployed computers that you want to get certain data from, but don't want users to see on a regular basis.
Re-audit Interval: The number of days that will pass before another audit is done. 0 is used to indicate that an audit will be done every time the Scanner runs.
Run Scanner Invisible to the User: Unchecking this option will place a notification icon in the notification area of the taskbar. The icon indicates that the Scanner is running.
Enable Auto-Upload for the results of this Scanner: There is a global setting that you can use to enable or disable automatic uploading in Upload Options. If you want to disable an individual configuration, load the configuration, uncheck this option and save the configuration.
Audited Items
Hardware: Various attributes of the computer. Turn general classes on or off by clicking the Configure button.
Internet Explorer Usage: History of websites visited and stored cookies. Turn these options on or off by clicking the Configure button.
File System: You can specify folders to be scanned and types of files. Manage these by clicking the Configure button.
Windows Registry: You can specify registry keys. Manage these by clicking the Configure button.
Mobile Devices: Audit mobile devices such as phones and PDAs and the files on them. Manage these by clicking the Configure button.
USB Devices: Audit USB devices such as flash drives and cameras that appear as drives and the files on them. Manage these by clicking the Configure button.
Software: Audits the software on a computer. Can be disabled.
Audit Scanner Location
Here is where you can define where the scanner will be built to. It is recommended that this location be in UNC path notation (\\ServerName\Folder). Users will need at least Read access to this folder. Admins will need Read/Write access if they are building new scanners.
Results Location
Here is where you can specify where the audits will go once a PC has been scanned. There are 3 different methods to send the results of the audit:
- Network Folder - As with the scanner location, the Data folder should be specified in UNC path notation. Users and Admins will need Full Access to the folder.
- FTP Site - For off-site assets that cannot connect to the network. The audits upload to an FTP site, for later download to the server. Click Details and the following window will be displayed:
Enter the Connection Type, Address, Port, Default Directory, and Login Credentials. Click OK to save the FTP settings.
- Removable Media Device - For storage on removable media, specify a folder path in the Data Folder field.
To upload a copy of audit data files to an FTP server, check Upload copy of audit data files and click the Details button. An FTP Upload Settings window will be displayed where the FTP server information is entered.
Alert Monitor Settings
This is where the basic settings are for activating AlertMonitor and configuring check intervals.
To enable AlertMonitor, check Enable AlertMonitor for this Scanner Configuration. To set specific alerts, go to AlertMonitor Configuration.
Check for Setting Changes Every: X Seconds – This setting denotes how often the Alert Monitor will check for changes on the system.
Check for Alterable Changes Every: X Seconds – This setting tells the Alert Monitor how often to send the changes it has found back to the server.
Select a predefined Alert Monitor Definition: This is where you can select a default trigger that you have set-up under the Alert Monitor Configuration section.