eTrust Audit Reference Guide - CA Technologies

Mapping Examples .......................................................................... 13-17
Mandatory Fields for Event Identification.................................................. 13-17
Common Predefined Fields for Event Identification ......................................... 13-19
Optional Predefined Fields for Event Identification ......................................... 13-19
Common Predefined Fields for Event Description .......................................... 13-20
Mapping Events to Predefined Categories ................................................. 13-22
System Access........................................................................... 13-23
Account Management.................................................................... 13-24
Object Access ........................................................................... 13-25
Policy Management...................................................................... 13-26
Security Systems ........................................................................ 13-27
Physical Security ........................................................................ 13-28
Network ................................................................................ 13-28
Detailed Tracking ....................................................................... 13-30
System/Application, Administration and General Events ................................... 13-31
Fields Internal to eTrust Audit ............................................................ 13-32
Reserved Keywords ......................................................................... 13-32
Chapter 14: Recorder for Check Point FireWall-1 Reference
Information Flow............................................................................. 14-1
Preinstallation Considerations ................................................................. 14-3
Configuring the Check Point FireWall-1 Servers ............................................. 14-3
Information You Need to Collect ........................................................... 14-3
Installing the Recorder for Check Point FireWall-1............................................... 14-4
Installing in a Solaris Environment ............................................................. 14-4
Installing the Recorder for Check Point FireWall-1 ........................................... 14-5
Upgrading the Data Tools ................................................................. 14-6
Configuration Values ......................................................................... 14-7
Registry Keys and .ini File ................................................................. 14-7
Windows Registry Entries ................................................................. 14-7
Solaris eAudit.ini File Values ............................................................. 14-10
Technical Information ....................................................................... 14-13
OPSEC Connection Types ................................................................ 14-13
Configuring Check Point FireWall-1 Servers ............................................... 14-14
viii
Reference Guide