Evaluation Guide
Contents
1. 3 Rev j ew t h e b Documentation Report using Full Report type Microsoft Intemct Explorcr nj xj re p O rt Ar e an y File Edit view Favorites Tools ae rd lt Bas gt Q x n e p Search Y Favorites v Media 64 a 8 of the settings concerning 4 Browse through the sections of H organization ecora the report to me Domains 1 get a feel for r Domain Ecoraqa E Demain Documents 1 Click here or the long version Database Settings on Server storage Ecoraqa mail box Adjacent Domains 1 Table 1 89 Basic Information Settings for STORAGE Mallbox J g ra ecoraqaz File Pata mail hnx information and z d servers 1 L ata Directory c nknovins how features a storage Ecoraqa Database Title STORAGE Mailbox NA r Connections 1 ET ae pou L atabase Fie Nama mail box such as VISIO 1 V amp LAN Connections i ODS Yersior i R5 41 0 dia rams cou Id I 47 Notes Named Networks 2 g L 4 Network Database Size 1039 KB save time In Y TCPIP Network Hamer nU ES 2 our IT d h Groups 3 Fercentace Used 89 y Er Gy Databases 22 Createc on 01 27 2005 01 31 04 PM projects 5S Notes Databases 21 Last mcdiied on 01 28 2005 01 06 17 AM E Mailboxes 1 Disab e background agen s for this database No 5 Click on the link2. CCOICI Ecora Enterprise Auditor for Lotus Domino Servers Evaluation Guide Table of Contents C adly s kieM T KITM m 3 amp olcedjgsBb M T TT E m 3 ECORI i e eter o LL LT DOES 5 Generate a iFact FINGING Report sas xi sayi yay neken hewa kaka a d aic MEDA A a Wa titia PH DAE ait wa AWA WANA 6 Generate a Documentation REport ccc kk kk kk kaka kk kk kk kaka kaka kaka kaka aaa nan kk 7 Generate a Baseline Report L khL h WIll kk kk kk kk kk kk kk kk kaka kaka kaka kaka kak kaka kk kk aka kak kk kk kk kk a 8 Schedule an Alert for a Consolidated Change Log Report kk 9 Check Your Compliance with a Policy sssssesssssss HH nemen 10 TO eren t a OT OUT ere klan kana ya ce ee hak al ka kay xarek Kn po kal n kan x ya Ma kk W w k kane dan Bones kya W aw neue 10 To cr eba DB _ _ e_rr zzeeerzrz a oo _MK__R2 11 To Calculate compliance to d PONCY T E ay bak ERE xin h k kayan ka Wa Akay ka Waa CS bav EY ran FERAE 12 we obe Dw rrlrllllrr treet UTEM 12 Sle reolng DR Da MET RR 12 Introduction This evaluation guide provides an overview of the features of Ecora Enterprise Auditor and a cursory walk through of the software functionality aiming to consume less than an hour of your time It attempts only to show the highlights of how the softwar
3. 1 6 00 1 j 6 3 6 67 11 73 33 eo QO 1 1 1 O QO 0 5 0 9 J ern 33 1 o0 1 o0 0 1 64 anc Deming Severs 33 33 1 0 0 00 o 0 00 1 100 00 0 0 06 3 1 33 33 2 66 67 gi a Servers 6 66 33 33 16 6 3 0 06 6 35 33 6 6 0 43 4 System Details by Policy Propertes X Status System Name Policy Name or CR HCR ANCR ANCR m EEE 2 60 84 51 11 15 45 enc EGE arbanes 2 E 55 45 74 0 54 26 nuc EEE i4 4 28 57 0 71 43 ec ESE 1 1 100 00 0 0 00 enc 15 4 26 67 1 73 33 ec WEBEX 5 100 00 c 0 00 nc alerece 3 33 33 66 67 E bore Ne Local ntraret Li 4 Click on a system in the System Details by Policy block to see how the system compares to the rules that define this policy 5 Drill down to the rule level to see the settings on a specific system to see why it does not comply with the new policy 6 Close the dashboard browser Congratulations You have completed the Ecora Enterprise Auditor evaluation There are many more reports alerts creative queries and practical applications for the software but we hope that this evaluation guide helped you get through the highlights efficiently Thanks for your time Customer Support Ecora technical support representatives are available to answer your questions at 1 877 923 2672 or email support ecora com Ecora Software Corporation 12
4. or even unauthorized changes Consolidated Change Logs These reports add a valuable dimension to change tracking In addition to before and after data these CCL reports can show EVERY change that occurred in a given time period across multiple platforms These reports answer the call for change histories for auditors and intensive security monitoring systems Baseline Reports Everyone understands the value of keeping consistency in configurations keeping machines to current patch levels for security maintaining QA or policy standards compatibility and maintenance of core technology passing compliance audits performance and much more Baseline Reports are the best way to quickly locate differences among systems in your environment Choose any machine as a standard and one report shows exactly how any others you select deviate from that machine s configuration setup O Ecora Software Corporation 5 Generate a Fact Finding Report Lotus Domino experts created a collection of reports that solve common problems or target IT projects then included these reports in the software These report definitions act like templates creating the structure of the report which is filled in with actual content from your environment These report definitions can be used or customized to your specification Click on the Fact Finding button Click on the Database node plus sign to expand the tree 1 2 10 Take a minute t
5. By edie Policy Rule Attribute Domina Domain Server Security Anonymous Access esa 20 Click Finish to complete the policy 21 Right click on the new policy and select Apply Policy 22 Select the group created above Domino Servers and select OK O Ecora Software Corporation 11 To calculate compliance to a policy P Compliance 2 Click on the Domino Servers group in the tree on the left Dashboard 1 Run Policy Compliance Dashboard from the icon on the desktop 3 Review the pie chart in the upper right to see the percentage of your systems that are compliant green non compliant red marginal yellow or pending blue A poticy Compliance Dastiboorgd Groop AT Systeme Micro t Antermet Explorer Be t t Yew Favorites Jocs be Q O id l D 34902 9m OLTw Ngo tss e http Aoc alos foede Desh Board npa Nroupld 1 U J G Policy Compliance esa LS Ig Dashboard i4 2 E ec ra Compliance by Systems All Systems Not Compliant Total Systems Compliant Systems Marginal Not Compliant Systems Pending Status Thresholds Not Comp amp ant 0 69 e Marginai 70 89 Complant 90 100 Not Compliant 100 Policy Name ec R e c c a HIPAA 84 51 1 100 00 0 00 6 1 eo 84 51 1 15 45 enc 223 9 45 74 1 0 6 06 6 00 1 100 00 6 22 35 45 74 70 4 26 nuc lt Min 28 5 1 6 60 1 106 60 6 4 6 5 6 71 43 ec Hi 00 6 1 1 100 6 00 0 00 6 1 oO 6 0 nuc i 26 6
6. in the To field 22 Click in the Include hyper link to report option and click OK 23 Click on the Triggers tab if the box closed choose Edit Alerts and Triggers Ee Alert 2x 24 Click New 25 On the Basics tab enter a Name and Poi Edo Description EEE ENE T Pi 1 1 cc Po 26 On the Conditions tab click in the Domino E csc OO checkbox and select Consolidated Change oe Log Report from the dro p down list Iv Include hyper link to report shared in message Share name audio 0000000000000 27 Choose Success from the Condition drop down list 28 On the Alerts tab click in the checkbox next to the Alert you created suggested CCL test Fri sp alert and click Close 29 Look forward to getting an email in a week or so Check Your Compliance with a Policy Auditor now includes the ability to define policies for security federally regulated standards corporate standards as well as an interface to graphically display compliance levels for a quick and concise visual of compliance status Ecora provides a series of policies with the software that you can use to check your environment for compliance or customize to suit your needs Note This section presumes that Policy Compliance Dashboard has been installed and configured according to the Startup Guide located on Ecora s website at http www ecora com ecora um startup guide auditor4 O pdf To create a group 1 Selec
7. then OK Show multiple schedules N BETIR Ecora Software Corporation 4 Ecora Reports Once you begin collecting data it is available for reporting querying and archiving Ecora Auditor offers more reporting options than ever allowing you to answer virtually any question you might have about your infrastructure Ecora s range of reports provides you an assortment of ways to extract valuable data in the best format for your needs Documentation Reports These full text reports preserve the strengths of past Ecora versions for compliance audits detail disaster recovery plans security assessments migration plans troubleshooting and preserving IT knowledge and decisions Fact Finding Reports These reports more closely resemble database queries for several reasons they pull data from the cross platform configuration database and they allow use of operators so you can search for values greater than less than or unlike a threshold value you set These reports are very surgical in their precision you can pull precisely the data you need but they also offer a wealth of data through hundreds of built in reports created by experts Change Reports Change Reports offer the ability to quickly see before and after snapshots of systems in your environment Great for pinpointing a setting change that indicates a security breach or is the cause of your troubleshooting problem These concise reports find any planned unplanned
8. Task HE j ame of Task Trial fhangeLog C C 1 Click on the Scheduled Tasks tab kura 2 i C ick N ew Ta S k Details epos change log report on selected datasets from 3 Choose Consolidated Change Log and click OK 4 Enter a task name such as Trial Change Log and click Net Ces OK 5 Select the Mailboxes report and click Next 5g Select a Consolidated Change Log Report Definition 2 xl Ds DB Web Messaging Network Directory Services Cross Platform 6 Accept all the settings and click Exchange Domino Next gt Category hage 72727 a a Ea a a a a iI Change Report Name eport Name Description escription Modules Certificates Certificates Domino 7 Change to Exact Time Range and set the End date to ten 10 days from today Clusters Clusters Domino Connections Connections Domino Domain documents Domain documents Domino TI me PIE PE Domains Domains Domino Groups Groups Domino Licenses Licenses Domino lT TI E 8 Change the Report Type to Trend in the drop down list 9 Click in the checkbox for All Systems and click Next gt Domino Notes databases Notes databases Domino Notes Named Networks Notes Named Networks Domino Programs Programs Domino Server Server Domino Server configuration settings Server configuration settings Domino J pus pus pus i prs 10 Accept the date time default DSN Ecora
9. amp uditerDSN36 naming convention and Click OK Heb Next gt Close a 11 0n the Task tab click 2 xl CCL Selection Refinement on the Set DSN EcoraduditorDSN36 Passwords button Report Criteria Report types C Relative time range Exact Time Range l 2 A E n te r t h e p a S S W O rd T r Week z Start VWWASETNEADI Change Uses only the first and last data collections within the selected time range tw ce a n d C C k O K End 4 20 2005 5 28 30 PM Trend Uses ALL data collections within the selected time range j Report type Tends By Collection Uses only data collections specified by the user 13 Click on the Schedule tab click By Systems By Data sets on t h e N ew b U tto n v All Systems All platforms Selected systems System Name Domino ie Ecoraqa 14 From the drop down lists set the task for Once at 6 00 AM Help lt Back Generate gt Cancel 15 In the Run on area 7 choose the date ten 10 days from today 16 Click Apply then OK O Ecora Software Corporation 9 General Custom Attributes Members 17 Choose Edit Alerts and Name Domi ino Servers Triggers from Description the menu 18 Click New 19 Select an Email Alert and click OK 20 On the Basics tab enter a Name such as CCL test alert and Description for the alert 21 On the Email tab enter your email address
10. as O Ecora Software Corporation 3 EB Domino Directory Selections x 2 Local omainSernvers 4FL 7L854 DFBTE 743 852551 33 B AE 10 mH 5 Configurations 0 C j lw OtherDomainServers 1B6 499085 CEBSCFE 9 8525615C 316445 wl users L804382D SEBBBC A 88256FCD 5B33FB debe Groups 3 3 O Eg Pragrams 0 SA El Servers 1 1 12 Click Yes when prompted to save this selection to a file for scheduling 13 Enter a name such as Evaluation that you ll remember and click OK 14 Once collection has completed click Finish 2 xl Scheduling Collection Go to Scheduled Tasks tab Wa iet Change Report Click New task Baseline Report Consolidated Change Lag Fact Finding Report 1 2 3 Choose Data Collection and click Ok 4 Name the Task Nightly and C Archiving click Ok Database Archiving 5 Accept the default data file Task Schedule Settings Auto Import name and choose Evaluation ED MZOOAM eve d Patch Database Updates from the drop down list or Load Remote Task choose interactively and repeat the prior section 6 Click OK On the Task tab click the Set Passwords button Schedule T ask Ste Daily Schedule Task Daily Even g davls 8 Enter a valid password twice and click OK 9 Click on the Schedule tab click New 10 Set the task to run Daily with start time 2am 11 Click Apply
11. ate and frequency Selection sets contain a list of systems and scheduling assigns a time date and frequency to the selection set Collecting Data 1 Click on the Collect button 2 Select the Data Collection select yyy eer 3 xl Full Report and click Next Specify the Lotus Domino server admiri 3 If prompted enter the Preparer DT p settings your name email and K organization enable the option to 1 eee Always use these settings and Td Hernan be pesstoare click OK Liser name administrator user admin 4 Enter the name of a Domino Er Server Domains EAE Tip Document one of your hub servers for the most data av vaye Ie Ecora names nsf 5 Enter your Lotus Notes CLIENT password or select the My m Notes ID has no password option 6 Click OK Select domain s you re interested in collecting and reporting Select the types of data you re interested in collecting and reporting 9 Click OK Data Collection Options Ei ES 10 If prompted navigate the tree to select the Domino Directory Databases specific objects you d like reported Certificates V a e v Canfiaurati Database Types 11 Click the OK button to begin collection uS v Connections Iv Databases nist Iw Domain documents Templates ntf Bi Gone Mailboxes box Licenses Only gather ACL from database Iv Programs replicas which are marked Enforce a consistent ACL across all replic
12. e might help you with compliance audits security analysis disaster recovery and other projects not to detail all of the software s capabilities The user manual online help system and printable PDF provides a much more thorough explanation of each software feature and function Enterprise Solution Ecora offers solutions for Microsoft SQL servers Microsoft Windows servers Microsoft Windows workstations Novell NetWare servers amp NDS Oracle databases Unix systems HP UX AIX Linux Solaris Active Directory systems Cisco routers and L3 switches Citrix MetaFrame servers Lotus Domino servers Microsoft Exchange servers Microsoft Internet Information Services Install the Software This Evaluation Guide assumes that you have successfully downloaded installed and configured Ecora Enterprise Auditor f you have not please refer to the Start up Guide located on Ecora s website at http www ecora com ecora um startup_quide auditor4 0 pdf Ecora Software Corporation 2 Getting Started This section will locate systems in your environment collect configuration information about the systems you select and set up regular collection Since reports can always be run against existing data it makes sense to get into the habit of regular data collection which Ecora allows you to automate completely with scheduling There are two basic aspects of scheduling selecting systems and scheduling the time d
13. n e end un PE i M doett addevbERuE Table 1 90 Replication Settings for STORAGE Mailbox labeled Click M d Certificates 22 Reriuve uavunieibs nul modifed in the purge inlerval Nu here for the E i Notes Certiticates 1 long version pe H Licenses iI Bi Visio Diagrams z sleti to toggle Do nct send daletions to other replicas No Do nct seid caances in database title and catalcg intormatian to other No between the r2plicas i Ao o Iz Temnnrarily disaaln r nlicat nn E Nn zi deta l led lon g E Dune 4 My Cunpuler form or the just the facts short form for as much detail as you desire 6 Particularly in the long version look for the tips notes alerts and references provided by Microsoft Windows experts These icons call your attention to important information such as security risks or relevant articles resources Ecora Software Corporation 7 Generate a Baseline Report Baseline reports identify deviations from any selected standard invaluable in locating non standard configurations insecure settings or compromising access rights 1 Click on the Baseline button 2 Verify that Baseline Comparison Report is selected and that Report Type is Full Report 3 Click the Next gt button 4 Choose to Use an existing data set gEcora Documentation Report wizard 24x in the Baseline Object area itch Baseline Object Comparison Objects 5 Locate an d C h OOSO a B ase j
14. ne O bj ect j n Collect anew dataset Use an existing data set x Collect a new dataset C Use an existing data u B amp diacentDomain EE 9 ecoraqa2 with id 96339F78 5251 07F8 85 9 ggApr20 2005 16 13 40 B SA ccMailConnection 3 CCMaiDomain B 4 ConfigSettinas E CrossCertificate i om EK b the left pane For this evaluation locate and select your saved data set and select one system to be the standard 6 Click Next gt gt C h O O S e to C O ect a n ew d ata set In Choose to collect new data or use an existing data set then select the objects you would like to compare against your baseline object i i If you are using an existing data set click the plus sign to expand the data set and then select which objects you would like to compare the Choose Comparison Objects area A eaa rien 8 Locate and select the Comparison Hep Cancel Object s in the right pane Choose the remaining systems allowed by your trial license 9 Click Next gt 10 If prompted to verify the Selection Editor click OK to accept the default settings You can use the tree to locate and select peeUEDUT MD E data objects you want to compare OZ O TT ST yA OI Er against your baseline or Gold Standard system ecorc 11 Click OK D Differences 1 2 Security x A EhubO1 Ecora maio 1 Ecora 12 After the report has been nd erynesr ote exemtan
15. o explore the available reports that have been provided Any can be generated scheduled or customized Select a report that interests you Click on the 2x EB Select a Fact Finding Report Definition os DB Web Messaging Network Directory Services Cross Platform Exchange Domino Category Database 2 3 Database Report Name Description Databases group Modules Databases group B i Server group Category Folder Domain documents Domain documents Domino B Groups Groups Domino Licenses Licenses Domino BH Notes Named Networks Notes Named Networks Domino Programs Programs Domino Server group Category Folder 4 DSN Ecora amp uditorDSN35 Help Next gt Close A Next gt button to proceed If you wish to see how the report is constructed select the table and click the Edit button Click Close once you ve reviewed the structure Click Generate gt Accept the timestamp name and click OK When the report finishes click View to see the finished report as an HTML page in a browser Scroll down to see how each is configured Tip Remember any report can be scheduled to occur daily weekly or once after hours Notes Named Networks Microsoft Internet Explorer Bl XI File Edit View Favorites Tools Help ae yeas gt NAX TES Gp Beck QK x B A p Sea
16. oenot ate l generated click Finish to View anin NER N na Report Now mu anaa All users Servers and groups with access to this server are allowed to create naw 13 Browse the split screen HTML Gm s ae I baseline report using the directory El Netes ini ettinga Tne fatowing users and groups are alowed to use monitors on ths server m tree to compare each system to gO anmann i your standard The top section of d emal e2 Ecora EN the right frame contains the a i E TE WER E N reference server your gold Bsewm o mem E S NAT R standard and the bottom section E ene rt Serin The following users servers and groups aro NOT allowed access to this server contains the selected target densi Ir server s differences when compared puc end ifa user name is in thi fold the user can not use an old NOTOS ID TO against the standard system g T TT TT eux 14 In particular check the security differences Are all your systems secured 15 Browse the other sections to see where your systems differ 16 Close the report when you re done O Ecora Software Corporation 8 Schedule an Alert for a Consolidated Change Log Report This section is strictly optional but introduces you to the tip of the iceberg in automating scheduled reports and using Ecora s proactive alerting capabilities If you complete this section you will be rewarded with a Consolidated Change Log emailed to you at the end of the evaluation period Eg Now
17. rch sj p Favorites QI Media va Lj E CCOrCi Notes Named Networks Prepared For authorized user Prepared On 4 20 2005 4 43 05 PM Prepared By Ecora Enterprise Auditor 3 6 Lotus Domino Module Prepared Using FFR definition Notes Named Networks Prepared Time Criteria Last 20 weeks Copyright 2005 ecora All rights reserved Notes Narned Networks e Default table Table 1 Default table name Administrators Name Title Administrators Network TCPIP Network Name Title ecora ecora Ecoraqa storage Ecoraqa ino title ecora ecora Ecoraqa storage Ecoraqa ino title si l Done ff fa My Computer Z Ecora Software Corporation 6 Generate a Documentation Report Click on the Document button Verify that the Documentation Report and Full Report type are selected Click Next gt Choose to Use Existing Data and click Next gt Select the data set you just collected and click Next gt d n xo w 5 After the report has been generated click Finish to View Report Now Browse the Report A browser opens displaying the HTML report with a directory tree in the left frame and the content in the right frame The directory tree is both an overview and a navigational device allowing you to locate and open specific sections of the report 1 Click on the top node plus sign to expand the tree to display the available domains 2 Click on one of the database nodes
18. t the Policies tab on the main screen of Auditor 2 Expand Groups to show the All Systems Group 3 Right click on the All Systems Group and select New Static Group O Ecora Software Corporation 10 4 Enter a name for the group in the Name Bi sisya ue city Paule erer field such as Domino Servers General Custom Attributes Members lt lt 5 Select the Members Tab war Sl kmn T 6 Click on the Add el button to add Saadi rate Gron Youle 2554915 systems to the group Genera Custom Atibutes Members 7 Select a Domino server from the list of DICA DECIT WR OC ANTT a available systems and click OK To create a policy 8 Right click on Policies and select New Policy 9 Uncheck I mport system configuration as policy and click Next 10 The Manage Rules dialog that appears click the Add button to the right g Policy Builder Manage Rules Attribute Location Attribute Name lt Back Next gt Cancel 11 The Select a Rule Attribute window appears Click on the Messaging tab 12 Expand the tree locate and select the Anonymous Access attribute for this policy 13 Click Next 14 Use the drop down list to select the NOT LIKE operator General Rule Cita Rule Scope 15 Enter YES for a value 16 Click OK 17 Click Finish and the Manage Rule Scope window appears Make no changes 18 Click Next 19 You can change the Rule name and add a Rule Description
Download Pdf Manuals
Related Search