 |
» |
|
|
 |
This section provides a concise synopsis of the steps required to get the HIDS agent and Graphical User Interface (GUI) operational. HP-UX HIDS is packaged with a set of predefined Surveillance Groups and Schedules that cover a wide variety of detection strategies. These Surveillance Groups and Schedules can be used as is, or you can use them as a model for designing a customized detection strategy for specific requirements. Before following the steps listed here, you must ensure that you have installed and configured the HIDS software package, and have created and propagated certificates to all appropriate hosts. Log in to each agent host and start the idsagent program. For detailed instructions, see “Starting HP-UX HIDS for the First Time” Start the System Manager on the administration host. For detailed instructions, see “Starting the HP-UX HIDS System Manager”  |  |  |  |  | NOTE: The first time you start the System Manager, the product license agreement is displayed. |  |  |  |  |
Use the predefined schedules, or create surveillance schedules from the Schedule Manager screen. For detailed instructions, see “Creating a Surveillance Schedule” Define the agent hosts that you want to monitor using the Host Manager screen. These are the hosts that you specified in step 1. For detailed instructions, see “Managing Hosts” Check the status of the agents using the System Manager screen. The host names must be listed in the Monitored Hosts list and they must be listed as Available in the Status column. Select a host in the Monitored Hosts list. Select a schedule in the Schedules list, and click the Activate button to download the schedule on the host. Repeat this step for different schedules and different hosts. An agent host can run only one schedule at a time. If the downloads are successful, their status will be Scheduled or Running , depending on their timetables. For more information, see “Activating Schedules on Agent Hosts”. Double-click on a host entry in the System Manager screen to see alerts or errors for the host.
|