Configuring InTrust Monitoring Console
To configure InTrust Monitoring Console after the setup is completed, open the Monitoring Console Administration page, for example, from the Start menu.
Here you can manage the profiles which allow authorized users to work with InTrust alerts.
|
|
Caution: Alert records are available to users only if their accounts were granted sufficient rights to view the alerts or modify their state. For more information about how to configure alert security settings, see the Alert Security Settings topic. |
Users can work with the alerts they need using the alert views. To create or modify a view, open the Monitoring Console, for example, from the Start menu, select the necessary profile, and follow the procedures described in the Monitoring Console Help.
You can configure Monitoring Console to notify you of a new alert when you are working with the alerts in the certain alert view. For that, in the Monitoring Console, go to My Preferences tab, and select the Pop up a message box when new alerts arise checkbox. When a new alert arises, a message will be displayed asking whether to refresh the current view. Refresh means the following:
- New alerts are incorporated into the view
- The view is reloaded, opening on the first page (regardless of the page you have been working with)
|
|
Note: The message is displayed only when the Alerts tab is active (when the Search tab is active, no message is displayed even if the corresponding check box was selected). |
Licensing
When you install the product and launch InTrust Manager or InTrust Deployment Manager for the first time, you will be asked to provide a license. Supply the license that you obtained from the sales representative. If you do not supply a license, most of InTrust functionality will be unavailable to you.
To obtain a license, contact your local sales office listed at https://www.quest.com.
Sample Deployment and Configuration Scenario
The following topics describe a simple custom InTrust deployment and its post-installation configuration:
- Lab Configuration Overview
- InTrust Organization Configuration Overview
- Gathering Configuration Overview
- Real-Time Monitoring Configuration Overview
- Setting Up Gathering and Reporting on Events
- Setting Up Real-Time Monitoring of Security Events
Lab Configuration Overview
The deployment scenario described below was designed to fit the following test lab configuration:
- 4 trusted domains within a well-connected area
- Standalone IIS servers behind a firewall
The deployment scenario assumes the following:
- One of the test domains is considered central.
- Audit data will be gathered into domain-level repositories and then consolidated into a central repository.
- Both domain-level reports and consolidated reports on data from all 4 domains will be generated.
- Real-time monitoring alerts will be viewed in both the central console and local consoles in each domain.
- For the sake of simplicity, you can create a single service account with the Domain Admins rights and supply this account for all InTrust operations.
In a production environment, we recommend that you granularly assign the required permissions to InTrust service accounts. For details, see System Requirements.