TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------
Most of the items you mentioned, can be automated
Internet Scanner is not a tool that should be used to test ISS Real
Secure. You should have some scripts running to watch the growth of the
database, the performance of the engines and the connectivity between the
number of console, engines and agents deployed.
If you have an engine deployed on your internal network, gather records
for at least a month and analyze the amount of traffic and classify normal
activity versus suspicious activity.
/m
TTran <[EMAIL PROTECTED]>
Sent by: [EMAIL PROTECTED]
01/13/00 08:11 AM
To: "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]>
cc:
Subject: Operations
TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message
to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any
problems!
----------------------------------------------------------------------------
I am just beginning to use RealSecure and wanted to gauge how interactive
an
administrator needs to be. Here is a list of things that I have thought
of
that an administrator might need to do on a daily, weekly, or monthly
basis.
Daily: Check logs for any suspicious activity
Archive logs to either tape or log server
Clean out database
Run reports to help decipher the information
Weekly: Run Internet Scanner to make sure that RealSecure is working as
expected
Run reports to help decipher the information
Monthly: ???
- Trung Tran
