The HP-UX HIDS agent software must be running continually on the systems you are monitoring for it to detect and report intrusions as they occur. When an agent is running a schedule, it records intrusion alerts and agent program errors in local log files.
When the System Manager is running on the administration system, and is monitoring the agent, alerts and errors are transferred to log files on the administration host.
In addition, agents pass alerts to user-defined programs on the agent host for analysis and action if such programs are configured. For more information, see “Automated Response for Alerts”.
The agent runs as a background daemon on the agent host. It communicates with the administration host via an encrypted Secure Socket Layer (SSL) communications link, which provides integrity, confidentiality, and authentication for network transmission.
Printable version
