Symantec ManHunt Smart Agent (10169223) for PC, Sun, Linux
Contents
1. ManHunt Smart Agent for Symantec Host IDS 4 1 Installation Guide amp symantec ManHunt Smart Agent for Symantec Host IDS 4 1 Installation Guide The software described in this book is furnished under a license agreement and may be used only in accordance with the terms of the agreement Copyright Notice Copyright 2003 Symantec Corporation All Rights Reserved Any technical documentation that is made available by Symantec Corporation is the copyrighted work of Symantec Corporation and is owned by Symantec Corporation NO WARRANTY Thetechnical documentation is being delivered to you AS IS and Symantec Corporation makes no warranty as to its accuracy or use Any use of the technical documentation or the information contained therein is at the risk of the user Documentation may include technical or other inaccuracies or typographical errors Symantec reserves the right to make changes without prior notice No part of this publication may be copied without the express written permission of Symantec Corporation 20330 Stevens Creek Blvd Cupertino CA 95014 Trademarks Symantec and the Symantec logo are U S registered trademarks of Symantec Corporation Other brands and product names mentioned in this manual may be trademarks or registered trademarks of their respective companies and are hereby acknowledged Printed in the U nited States of America 10098765 4321 SYMANTEC SOFTWARE LICENSE AGREEMENT SMART A2. INCIDENTAL OR CONSEQUENTIAL DAMAGES SO THE BELOW LIMITATION OR EXCLUSION MAY NOT APPLY TO YOU TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW AND REGARDLESS OF WHETHER ANY REMEDY SET FORTH HEREIN FAILS OF ITSESSENTIAL PURPOSE IN NO EVENT WILL SYMANTEC BE LIABLE TO YOU FOR ANY SPECIAL CONSEQUENTIAL INDIRECT OR SIMILAR DAMAGES INCLUDING ANY LOST PROFITS OR LOST DATA ARISING OUT OF THE USE OR INABILITY TO USE THE SOFTWARE EVEN IF SYMANTEC HASBEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES IN NO CASE SHALL SYMANTEC S LIABILITY EXCEED THE PURCHASE PRICE FOR THE SOFTWARE Thedisclaimers and limitations set forth above will apply regardless of whether You accept the Software 5 U S GOVERNMENT RESTRICTED RIGHTS RESTRICTED RIGHTSLEGEND All Symantec products and documentation are commercial in nature The software and software documentation are Commercial Items as that term is defined in 48 C F R section 2 101 consisting of Commercial Computer Software and Commercial Computer Software Documentation as such terms are defined in 48 C F R section 252 227 7014 a 5 and 48 C F R section 252 227 7014 a 1 and used in 48 C F R section 12 212 and 48 C F R section 227 7202 as applicable Consistent with 48 C F R section 12 212 48 C F R section 252 227 7015 48 C F R section 227 7202 through 227 7202 4 48 C F R section 52 227 14 and other relevant sections of the Code of Federal Regulations as applicable Symantec s compu
3. Do oneof the following m TYP delete and press Enter to delete the old meta data files m Typearcnive and press Enter to archive the old meta data files ManHunt must be restarted to incorporate the new meta data Type y and press Enter when prompted to restart M anH unt If this is the M anHunt node used for administration quit and restart any administration consoles connected to the node to enablethe consoles to incorporate the new meta data As Symantec releases new policies for Symantec H ost IDS via LiveU pdate it will be necessary to install a new metadata file You can find information on the latest Symantec product updates at http www symantec com avcenter Note If when uninstalling the M SA for Symantec H ost IDS 4 1 you require more space on the disk manually remove the meta data by deleting the Symantec_H ost_IDS policy md file and the Symantec_H ost_ DS events md file from the lt M anH unt_install_directory gt md directory See Uninstalling the M SA for Symantec Host IDS 4 1 on page 5 10 ManHunt Smart Agent for Symantec Host IDS 4 1 Configuring Symantec ManHunt You must configure Symantec M anH unt to enable communication between ManHunt and the M SA for Symantec H ost IDS The following sections describe how to configure M anH unt m Adding an external sensor node m Adding an interface to an external sensor node m Changing the EDP passphrase Adding an external sensor node To set M a
4. for Symantec H ost IDS 4 1 can be set up in six basic steps To set up the MSA for Symantec Host IDS 4 1 1 _Ensurethat you have installed Symantec M anH unt 2 2 patch 2 or Symantec ManHunt 3 0 2 Install the M SA for Symantec Host IDS 4 1 See Installing the M SA for Symantec Host IDS 4 1 on page 2 3 Configure the Symantec management console See Configuring the SESA M anagement on page 6 4 Install the Symantec Host IDS 4 1 meta data on the M anH unt node See Installing the Symantec H ost ID S 4 1 meta data on page 8 5 Configure Symantec M anH unt for Symantec Host IDS 4 1 See Configuring Symantec M anH unt on page 10 Installing the MSA for Symantec Host IDS 4 1 You must install the M SA for Symantec Host IDS 4 1 on the SESA M anager host from which you want to receive events If multiple SESA M anagers are using the same SESA database the M SA for Symantec H ost ID S 4 1 must be installed on each SESA M anager to enable events to be sent to M anH unt TheM SA for Symantec H ost IDS 4 1 receives the Symantec Host IDS 4 1 event data converts the data into the M anH unt event format and sends the converted data to the M anH unt node During the M SA installation you specify the IP address of the M anH unt node that will receive the event data from theM SA The MSA and M anH unt node communicate over Event Dispatch Protocol EDP To ensure secure and encrypted communication over EDP they must share an
5. EDP passphrase Note You must be logged in as root to run the install script ManHunt Smart Agent for Symantec Host IDS 4 1 To install the MSA for Symantec Host IDS 4 1 PlacetheCD in the CD ROM drive of the SESA M anager host Change to the CD directory and type the following command 1 2 Shids41MSA_MH lt version gt java jar setup jar where lt version gt iS 22 OF 30 You can change how the installation runs by passing one of the following arguments to the executable debug silent userDN lt userdn gt password lt password gt sesaDirectory lt hostname gt sesaDirectoryPort lt port gt info help uninstall Prints debug information and also creates a SIPI Inst log filein C Documents and Settings lt username gt Local Settings Temp with all the debug information Runs the SESA Integration Wizard silently requires the indicated arguments User name used to connect to the SESA directory required for silent Password used to connect to the SESA directory required for silent Machine host name or IP address of the SESA directory required for silent Port number of the SESA directory required for silent Usually 636 Displays all information regarding the SESA Integration Wizard including version and point product information packaged in the Wizard Displays all available arguments Runs the SESA Integration Wizard in uninstall mode This will comp
6. GENT SYMANTEC CORPORATION AND ORITS SUBSIDIARIES SYMANTEC ISWILLING TO LICENSE THE SOFTWARE TO YOU ASAN INDIVIDUAL THE COMPANY OR THE LEGAL ENTITY THAT WILL BE UTILIZING THE SOFTWARE REFERENCED BELOW AS YOU OR YOUR ONLY ON THE CONDITION THAT YOU ACCEPT ALL OF THE TERMSOF THIS LICENSE AGREEMENT READ THE TERMSAND CONDITIONS OF THISLICENSE AGREEMENT CAREFULLY BEFORE USING THE SOFTWARE THISISA LEGAL AND ENFORCEABLE CONTRACT BETWEEN YOU AND THE LICENSOR BY OPENING THIS PACKAGE BREAKING THE SEAL CLICKING ON THE AGREE OR YES BUTTON OR OTHERWISE INDICATING ASSENT ELECTRONICALLY OR LOADING THE SOFTWARE YOU AGREE TO THE TERMSAND CONDITIONS OF THIS AGREEMENT IF YOU DO NOT AGREE TO THESE TERMSAND CONDITIONS CLICK ON THE I DO NOT AGREE NO BUTTON OR OTHERWISE INDICATE REFUSAL AND MAKE NO FURTHER USE OF THE SOFTWARE 1 LICENSE The software and documentation that accompanies this license collectively the Software is the proprietary property of Symantec or its licensors and is protected by copyright law While Symantec continues to own the Software You will have certain rights to usethe Software after Your acceptance of this license This license governs any releases revisions or enhancements to the Software that the Licensor may furnish to You Except as may be modified by an applicable Symantec license certificate license coupon or license key each a License M odule that accompanies precedes or follows this lice
7. articular Content U pdates on the date of purchase You will not have to pay an additional fee to continue receiving such Content U pdates through theterm of such maintenance even if Symantec designates such Content U pdates as requiring separate purchase This License does not otherwise permit Licensee to obtain and use Content Updates 3 LIMITED WARRANTY Symantec warrants that the media on which the Software is distributed will be free from defects for a period of sixty 60 days from the date of delivery of the Software to You Your sole remedy in the event of a breach of this warranty will be that Symantec will at its option replace any defective media returned to Symantec within the warranty period or refund the money You paid for the Software Symantec does not warrant that the Software will meet Your requirements or that operation of the Software will be uninterrupted or that the Software will be error free THE ABOVE WARRANTY ISEXCLUSIVE AND IN LIEU OF ALL OTHER WARRANTIES WHETHER EXPRESS OR IMPLIED INCLUDING THE IMPLIED WARRANTIES OF MERCHANTABILITY FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF INTELLECTUAL PROPERTY RIGHTS THIS WARRANTY GIVES YOU SPECIFIC LEGAL RIGHTS YOU MAY HAVE OTHER RIGHTS WHICH VARY FROM STATE TO STATE AND COUNTRY TO COUNTRY 4 DISCLAIMER OF DAMAGES SOME STATESAND COUNTRIES INCLUDING MEMBER COUNTRIES OF THE EUROPEAN ECONOMIC AREA DO NOT ALLOW THE LIMITATION OR EXCLUSION OF LIABILITY FOR
8. ccessing the relay page requires the SESA domain administrator name and password Installing the Symantec Host IDS 4 1 meta data You must install the Symantec H ost IDS 4 1 meta data on the M anH unt node that you log into from the administration console typically the primary master node This is donein order for you to be able to create the M SA for Symantec Host IDS 4 1 external sensor node create response policies for Symantec H ost IDS 4 1 events and display Symantec Host IDS 4 1 event data in the M anH unt console In addition you must install this meta data on the M anH unt node that will receive the Symantec Host IDS 4 1 event data from the M SA for Symantec H ost IDS 4 1 if different from the master node Note You must be logged in as root to install the Symantec H ost IDS 4 1 meta data ManHunt Smart Agent for Symantec Host IDS 4 1 To install the Symantec Host IDS 4 1 meta data 1 PlacetheCD in the CD ROM drive of the Symantec M anH unt host mount the volume if necessary Change to the CD directory and enter the install commana cd Shids41MSA_MH lt version gt install lt platform gt where lt version gt iS 22 or 30 and lt platform gt is linux solaris8 intel Or solaris8 sparc install md sh Ensure that the meta data file to be installed begins with Symantec_Host_IDS and ends with the md file extension If you have old meta data files you can choose to either delete or archive them
9. copies of the Software The disclaimers of warranties and damages and limitations on liability shall survive termination Software and documentation is delivered Ex Works California U S A or Dublin Ireland respectively ICC INCOTERMS 2000 This Agreement may only be modified by a License M odule which accompanies this license or by a written document which has been signed by both You and Symantec Should You have any questions concerning this Agreement or if You desire to contact Symantec for any reason please write to i Symantec Customer Service 555 International W ay Springfield OR 97477 U SA ii Symantec Customer Service Center PO BOX 5689 Dublin 15 Ireland or iii Symantec Customer Service 1 Julius Ave North Ryde NSW 2113 Australia Contents ManHunt Smart Agent for Symantec Host IDS 4 1 _ a 1 System requirements L n u a u Qa bu an beau aineissa 1 Installation oVervieW uo sscsessssssssessssssesesssssssscsessssssssessssssesesssessrssesasstssesaees 2 Installing the M SA for Symantec Host IDS 4 1 l l a a 2 Configuring the SESA M anagement sissies 6 Installing the Symantec Host IDS 4 1 meta data a 8 Configuring Symantec ManHunt I nn nn 10 2 Contents ManHunt Smart Agent for Symantec Host IDS 4 1 The M anH unt Smart Agent M SA for Symantec H ost IDS 4 1 enables Symantec M anH unt to receive events in real time from the Symantec Enterprise Secu
10. e The following sections describe this processes m Configuring the M SA for Symantec Host IDS 4 1 m Configuring the SESA Agent m TheMSA relay status page Configuring the MSA for Symantec Host IDS 4 1 This section describes how to configure the M SA for Symantec H ost IDS 4 1 in the Symantec management console To configure the MSA for Symantec Host IDS 4 1 1 Click the Configurations tab in the Symantec management console 2 Click MSA for Symantec Host IDS gt ManH unt Event Relay gt Default In theright window pane click the M SA Settings tab and enter the following information ManHunt Smart Agent for Symantec Host IDS 4 1 Table 1 2 MSA Configuration Parameters Parameter Description ManHuntIP address IP address of the M anHunt node to which you want to forward Symantec Host IDS events ManHuntEDP port TheManHunt EDP Event Dispatch Protocol port By default 1333 ManHunt EDP secret TheManHunt EDP passphrase ManHuntRelayLog Thelevel of logging of Symantec Host IDS events sent to Level ManH unt via the M SA There are 3 values m Low only error events will be sent m Medium all events sent will be logged but only those fields the M SA passes to M anHunt will be logged these are Event type Destination IP and Text Data m High all events will be logged and all Symantec Host IDS fields for those events will be logged The log file will be stored in C Program Files IBM Http Se
11. er version of the Software than is provided herewith unless You have purchased corresponding maintenance and or upgrade insurance or have otherwise separately acquired the right to usesuch later version E use if You received the software distributed on media containing multiple Symantec products any Symantec software on the media for which You have not received a permission in a License M odule nor F use the Software in any manner not authorized by this license 2 CONTENT UPDATES Certain Software utilize content which is updated from time to time including but not limited to the following Software antivirus software utilize updated virus definitions content filtering software utilize updated U RL lists some firewall software utilize updated firewall rules and vulnerability assessment products utilize updated vulnerability data these updates are collectively referred to as Content U pdates You shall have the right to obtain Content U pdates for any period for which You have purchased maintenance except for those Content Updates which Symantec elects to make available by separate paid subscription or for any period for which You have otherwise separately acquired the right to obtain Content U pdates Symantec reserves the right to designate specified Content U pdates as requiring purchase of a separate subscription at any time and without notice to You provided however that if You purchase maintenance hereunder that includes p
12. everity mapping Informational 0 Informational 0 Informational 0 6 Low 1 16 Informational 7 12 Medium 17 32 Informational 13 24 High 33 61 Warning 25 28 High 62 72 Warning 29 37 Urgent 73 96 Warning 38 47 Critical 97 120 Warning 48 59 Fatal Error 121 150 Critical 60 100 Fatal Error 151 255 Uninstalling the MSA for Symantec Host IDS 4 1 Except for the initial command the process to uninstall the M SA for Symantec Host IDS 4 1 is identical to the installation process To uninstall the MSA for Symantec Host IDS 4 1 1 2 PlacetheCD in the CD ROM drive of the SESA M anager host Change to the CD directory and type the following command Shids41MSA_MH lt version gt java jar setup jar uninstall where lt version gt is 22 or 30 The script will ask if you wish to continue uninstalling the M SA See Installing the M SA for Symantec Host IDS 4 1 on page 2 Note If after installing the M SA for Symantec H ost IDS 4 1 meta data you require more space on the disk manually remove the meta data by deleting the Symantec_H ost_IDS policy md file and the Symantec_H ost_IDS events md file from the lt M anH unt_install_directory gt md directory See Installing the Symantec H ost IDS 4 1 meta data on page 8 6 ManHunt Smart Agent for Symantec Host IDS 4 1 Configuring the SESA Management You must configure the M SA for Symantec H ost IDS 4 1 and its corresponding SESA Agent in the Symantec management consol
13. letely delete the schema installed by the point product both from the SESA directory and the SESA database All events logged by that point product will be deleted It is recommended to delete or archive those events before uninstalling In the SESA Integration Wizard click Next twice 4 ManHunt Smart Agent for Symantec Host IDS 4 1 4 IntheSESA Domain Information Window type the following information about the SESA Domain Administrator and SESA directory SESA Domain Administrator Thenameof the SESA directory Domain Administrator account SESA Domain Administrator The password for the SESA directory Domain Password Administrator account IP Address of SESA Directory ThelP address of the computer on which the SESA directory is installed SSL Port Thenumber of the SESA directory secure port By default 636 Note This step is not necessary if you have already typed in this information at the command line 5 Click Next twice and then click Finish to complete the install If you are running Symantec Host IDS you will have to restart the SESA console before the M SA will appear Symantec Host IDS 4 1 to ManHunt event severity mapping The default reliability setting of Symantec Host ID S 4 1 events is 128 medium and the severity mapping from Symantec H ost IDS 4 1 to M anH unt is as follows ManHunt Smart Agent for Symantec Host IDS 4 1 Table 1 1 Symantec H ost IDS 4 1 to M anH unt s
14. nH unt response policies for Symantec H ost IDS events you must add an external sensor nodein the M anH unt topology tree for the machine on which the M SA for Symantec Host IDS 4 1 is installed To add an external sensor node 1 Open theManHunt console 2 Right click External Sensors in the topology tree and click Add External Sensor in the pop up menu The Add External Sensor dialog appears 3 Enter anameof up to 39 characters for the device This name will appear in the topology tree 4 Enter an optional customer ID This D is a way of labeling the devices for example to describe the physical location of the device 5 Enter the IP address for the SESA machine on which you installed the M SA for Symantec Host IDS 4 1 6 From Smart Agent Type choose one of the following m For Symantec M anH unt 2 2 choose Symantec_Host_IDS m For Symantec M anH unt 3 0 choose Symantec H ost IDS Note The Symantec Host IDS 4 1 Smart Agent type only appearsin the drop down list if you have installed the Symantec H ost ID S 4 1 meta data 7 Select the M anH unt node that will receive event data from the M SA for Symantec Host IDS 4 1 10 11 ManHunt Smart Agent for Symantec Host IDS 4 1 Note You must select the M anH unt node before setting the EDP passphrase as M anH unt sets the EDP passphrase for the M anH unt nodethat is selected in the Event Receiver box at the time that you enter the EDP passphrase Set the EDP pas
15. nse Your rights and obligations with respect to the use of this Software are as follows YOU MAY A use that number of copies of the Software as have been licensed to You by Symantec under a License M odule for Your internal business purposes Your License M odule shall constitute proof of Your right to make such copies If no License M odule accompanies precedes or follows this license You may make one copy of the Software You are authorized to use on a single machine B make one copy of the Software for archival purposes or copy the Software onto the hard disk of Your computer and retain the original for archival purposes C use each licensed copy of the Software on asingle central processing unit and D after written consent from Symantec transfer the Software on a permanent basis to another person or entity provided that You retain no copies of the Software and the transferee agrees to the terms of this license YOU MAY NOT A copy the printed documentation which accompanies the Software B sublicense rent or lease any portion of the Software reverse engineer decompile disassemble modify translate make any attempt to discover the source code of the Software or create derivative works from the Software C use a previous version or copy of the Software after You have received a disk replacement set or an upgraded version Upon upgrading the Software all copies of the prior version must be destroyed D usea lat
16. rity Architecture SESA M anager M anH unt then converts these events into the M anH unt event format and sends the events to aM anH unt node for aggregation correlation and reporting with all other M anH unt events The M SA also enables you to set response policies for Symantec H ost ID S eventsin the M anH unt Policy Configuration interface See Symantec M anH unt Administration Guide for instructions on creating response policies System requirements TheM SA for Symantec H ost IDS 4 1 requires the following Symantec Host IDS 4 1 running on Windows 2000 Professional with Service Pack 2 SESA Manager 1 1 running on Windows 2000 Server Symantec M anH unt 2 2 patch 2 installed on Solaris 8 SPARC or Intel or Symantec M anH unt 3 0 installed on Solaris 8 SPARC or Intel or Red Hat Linux 8 0 with kernel version 2 4 Note Patch 2 is required for M anHunt 2 2 to enable you to properly view event information from M SAs You can download the patch at http www symantec com techsupp enterprise products manhunt manhunt_2 2 files html To find out which M anH unt patches have been installed look in the lt M anH unt_inst_root gt patchlevel file The content of the patchlevel file will includethe entry 1 2 220 02 ManHunt patch 2 220 02 if you have patch 2 installed If you do not havea patchlevel file no patches have been installed 2 ManHunt Smart Agent for Symantec Host IDS 4 1 Installation overview TheM SA
17. rver tomcat webapps M anhuntRelay or if you have installed IBM HTTP Server and tomcat in a different directory C lt tomcat install directory gt webapps M anhuntRdiay Configuring the SESA Agent This section describes how to configure the SESA Agent in the Symantec management console Realize that the M SA for Symantec Host IDS 4 1 will start and stop as you start and stop the SESA Agent on the Symantec management console See Symantec Enterprise Security Architecture Administration Guide for details To configure the SESA Agent 1 2 3 4 5 Click the Configurations tab in the Symantec management console Click SESA gt SESA Agent Configuration gt D efault In the right window pane click the Configuration tab Set the Config poll time property to 1 minute Click Apply 8 ManHunt Smart Agent for Symantec Host IDS 4 1 Caution Changing other SESA Agent configuration parameters may lead to degraded or unpredictable performance of the M SA In particular the App Flush Size setting should always be left at the default value of 50 kb or considerable delays in event forwarding from SESA will occur The MSA relay status page TheM SA relay status page allows you to view statistics on events sent to ManHunt via the M SA for Symantec H ost IDS as well as configuration settings for the M SA This page can be viewed at https lt IP address of your SESA machine gt M anhuntRelay serviet M anhuntRelay Note A
18. sphrase This passphrase must be the same passphrase you entered during the M SA for Symantec Host IDS 4 1 installation process Enter a description for the M SA for Symantec Host IDS 4 1 This description will be displayed on the main console screen when this external sensor node is selected in the topology tree Click OK then click Topology gt Save C hanges to save your topology tree changes Adding an interface to an external sensor node The M SA for Symantec H ost IDS 4 1 can take input from more than one source You may add a description to each interface that corresponds to the external sensor you added in the M anH unt console This allows for better correlation and presentation of Symantec H ost ID S 4 1 events in the M anH unt console Note You may add an interface to an external node in Symantec M anH unt 3 0 only To add and interface to an external sensor node 1 Right click on the external sensor you added for the M SA for Symantec H ost IDS 4 1 in the M anHunt console and click Add Interface in the pop up menu The Add M SA Interface dialog appears Enter a name of up to 39 characters for the interface This name will appear in the topology tree Enter an optional customer ID This D is a way of labeling the source for example to describe the physical location of the sensor Enter the IP address for the machine on which you installed the device Enter the netmask 12 ManHunt Smart Agent for S
19. ter software and computer software documentation are licensed to United States Government end users with only those rights as granted to all other end users according to the terms and conditions contained in this license agreement M anufacturer is Symantec Corporation 20330 Stevens Creek Blvd Cupertino CA 95014 United States of America 6 EXPORT REGULATION Export re export of this Software is governed by the laws and regulations of the United States and import laws and regulations of certain other countries Export or re export of Software to any entity on the Denied Parties List and other lists promulgated by various agencies of the United States Federal Government is strictly prohibited 7 GENERAL If You are located in North America or Latin America this Agreement will be governed by the laws of the State of California United States of America Otherwise this Agreement will be governed by the laws of England This Agreement and any related License M odule isthe entire agreement between You and Symantec relating to the Software and i supersedes all prior or contemporaneous oral or written communications proposals and representations with respect to its subject matter and ii prevails over any conflicting or additional terms of any quote order acknowledgment or similar communications between the parties This Agreement shall terminate upon Your breach of any term contained herein and You shall cease use of and destroy all
20. ymantec Host IDS 4 1 6 Enter a description for the device This description will be displayed on the main console screen when this external sensor node is selected in the topology tree Click OK then click Topology gt Save C hanges to save your topology tree changes Changing the EDP passphrase To change the EDP passphrase on the M anH unt node edit the external sensor topology treenode The EDP passphrase on the M anH unt node must match the EDP passphrase on the M SA for Symantec H ost IDS 4 1 machine Therefore if you change the passphrase on the M anH unt node you must also change the passphrase on the M SA for Symantec Host ID S 4 1 machine by running the changesecret command located in the lt M SA_install_directory gt bin directory To change the EDP passphrase on the ManHunt node 1 2 Log into the M anHunt console Right click the appropriate external sensor node and select Edit The Edit External Sensor dialog appears Click Set ED P Passphrase The EDP Passphrase dialog appears Enter the new passphrase the M anH unt node will use to communicate with the M SA for Symantec Host IDS 4 1 This passphrase must be at least 8 characters long Re enter the passphrase for confirmation Click OK then click OK in the Edit External Sensor dialog box Click Topology gt Save Changes
Download Pdf Manuals
Related Search