INTOUCH^® INSA
Network Security Agent

File Selection

When the Archive Recordings report menu option is selected, a list of the archived recordings files is displayed.

Select the archived recordings file that your want to report on.

After you select the archive file, the Recordings Report selection criteria screen is displayed. The name of the archive file you select is shown in the Report Type box. For example:

INTOUCH INSA Archived Recordings Report 15-Jan-1997 +------------- Sort Order -------------++------------ Report Type -------------+ |1) || | |2) || | |3) ||File: MARCH_01_15 | |4) ||Type: | |5) || | +--------------------------------------++--------------------------------------+

You are asked for the sort order and the other report selection criteria. If you need help to answer any of the prompts, you can press the [Help] key to get information, or refer to Section 10.3, Recordings Reports.

10.20 Archive Audit Reports

The Archive Audit menu option creates reports of audit data in an archived audit file (refer to Section 10.7, Audit Reports, for information on creating reports from the current audit file).

+-------Reports-------+ | Incident | | Alert | | Recordings | | Browser Accesses | | URL Accesses | | Active Browsers | | Audit | | Page | | Top [>+----Archive----+ | Archive [>| Incident | +---------------------| Recordings | | Audit | +---------------+

Creating Archive Audit Reports is basically the same as creating current audit reports. The difference is that the report data comes from an archive file instead of from the current file.

File Selection

When the Archive Audit report menu option is selected, a list of the archived audit files is displayed.

+----------------------------------Audit Data----------------------------------+ | Files Exit | +------------------------------------------------------------------------------+ +Archived Audit Data+ | | | Files | | AUDIT_JAN | | AUDIT_FEB | +-------------------+ EXIT = Exit INTOUCH INSA \ = Back HELP = Help

Select the archived audit file that your want to report on.

After you select the archive file, the Audit Report selection criteria screen is displayed. The name of the archive file you select is shown in the Report Type box. For example:

INTOUCH INSA Archived Audit Report 15-Jan-1997 +------------- Sort Order -------------++------------ Report Type -------------+ |1) || | |2) ||File: AUDIT_JAN | |3) ||Type: | |4) || | +--------------------------------------++--------------------------------------+

Chapter 11
General Menu Procedures

Example 11-1 General Procedures

+-----------------INTOUCH INSA - Network Security Agent V1.5-------------------+ | Security Status Reports Maintenance General Advanced Exit | +------------------------------------------------+--General--+-----------------+ | E-mail | +-----------+

The General menu option is:

E-mail --- gets into the E-mail utility

11.1 E-mail Option

When you select E-mail from the General menu, you are placed in the E-mail utility. The screen clears and the MAIL> prompt is displayed:

MAIL>

At this point, you can read or send mail messages. If you need some help using the mail utility, enter HELP at the MAIL> prompt.

When you have finished reading and/or sending mail and want to return to the General menu, enter EXIT at the MAIL> prompt and the menu will be displayed.

Chapter 12
Advanced Menu Procedures

The Advanced menu options are:

Configure --- configure options
1. TCP/IP ports --- set up various port numbers
2. TCP/IP --- configure, start up, shut down TCP/IP services
Control INTOUCH INSA --- special procedures
1. Shut down INTOUCH INSA
2. Restart INTOUCH INSA
Software Upgrade --- upgrade the INTOUCH INSA software
System --- perform system procedures
1. Change Date and Time --- change system date, time
2. System Shutdown --- shut down the system

12.1 Configure Options

There are specific circumstances when TCP/IP ports and services are used.

TCP/IP Services

You need to start up TCP/IP services and perform a TCP/IP configuration when you want to:

resolve IP addresses --- get and use domain names
receive packet data from Transport Agents
send E-mail from the INTOUCH INSA box to some other CPU
access the INTOUCH INSA box from another CPU

TCP/IP Ports

You can set up port numbers for SMTP and DUMP ports, and set up proxy port numbers for HTTP and FTP ports. The following tells when you would set up TCP/IP port numbers:

SMTP --- you want INTOUCH INSA to scan all incoming and outgoing E-mail
HTTP --- when the normal port number "80" is not used
FTP --- when the normal port number "21" is not used
DUMP --- when requested to set up a number by Touch Technologies, Inc. Technical Support; this port is used for trouble-shooting purposes

Configure Menu Options

The Configure menu option displays a submenu.

The Configure menu options are:

TCP/IP Ports --- set up HTTP and FTP proxy ports, SMTP and DUMP ports
TCP/IP --- perform TCP/IP service procedures

12.1.1 TCP/IP Ports Option


                       +--------Advanced-------+----Configure----+ 
                       |  Configure            |  TCP/IP Ports   | 
                       |  Control INTOUCH INSA |  TCP/IP         | 
                       |  Software Upgrade     +-----------------+ 
                       |  System               [>| 
                       +-------------------------+

Selecting TCP/IP Ports from the Configure menu allows you to set up HTTP and/or FTP proxy ports and SMTP and/or DUMP ports. When the TCP/IP Ports option is selected, the following screen is displayed.

INTOUCH INSA Configure Proxy Ports 10-Jan-1997 Current HTTP proxy port number: none Current FTP proxy port number : none Current SMTP port number : 25 Current DUMP port number : none +---------Configure---------+ | HTTP proxy port number | | FTP proxy port number | | SMTP port number | | DUMP port number | |---------------------------| | Exit | +---------------------------+

INTOUCH INSA checks for specific ports for TCP/IP services. On some systems, instead of using the normal port numbers, proxy port numbers are used. By setting up proxy port numbers, you can tell INTOUCH INSA to look at specific port numbers.

You can set up a HTTP proxy port number and a FTP proxy port number. You can also set up a SMTP port number and a DUMP port number.

Note

Enabling the SMTP port allows INTOUCH INSA to perform surveillance on all incoming and outgoing E-mail.

The current HTTP, FTP, SMTP and DUMP port numbers are displayed and you are asked to select one of the following options:

Select HTTP proxy port number to set up a HTTP proxy port number.

Select FTP proxy port number to set up a FTP proxy port number.

Select SMTP port number to set up a SMTP port number.

Select DUMP port number to set up a DUMP port number.

Select Exit to return to the Configure menu.

HTTP Proxy Port Number

The normal HTTP port number is "80". If the HTTP port number has been changed to a different port number, you can set up a HTTP proxy port number to identify the HTTP port.

You are asked for the HTTP proxy port number.

HTTP proxy port number? none_

To set up a HTTP proxy port number, enter the number that the HTTP port has been changed to.

Press [Return] to accept the default of "none" if you do NOT want to enter a proxy port number.

FTP Proxy Port Number

The normal FTP port number is "21". If the FTP port number has been changed to a different port number, you can set up a FTP proxy port number to identify the FTP port.

You are asked for the FTP proxy port number.

FTP proxy port number? none_

To set up a FTP proxy port number, enter the number that the FTP port has been changed to.

Press [Return] to accept the default of "none" if you do NOT want to enter a proxy port number.

SMTP Port Number

You are asked for a SMTP (Simple Mail Transport Protocol) port number. If this port is enabled, INTOUCH INSA will perform surveillance on all incoming and outgoing E-mail messages.

SMTP port number? 25___

Press [Return] to accept the default port number. The normal SMTP port number is "25" unless it has been changed.

If the SMTP port number has been changed to a different port number, enter the number that the port has been changed to.

Enter "none" if you do NOT want to set up a SMTP port number.

DUMP Port Number

The DUMP port is used for testing or trouble-shooting purposes. The DUMP port dumps data from the given port number to the scanner log file.

Note

A port that is being dumped is NOT being scanned.

DUMP port number? none_

To set up a DUMP port number, enter the port number of the service you want to dump.

Press [Return] to accept the default of "none" if you do NOT want to enter a port number.

12.1.2 TCP/IP Option


                       +--------Advanced-------+----Configure----+ 
                       |  Configure            |  TCP/IP Ports   | 
                       |  Control INTOUCH INSA |  TCP/IP         | 
                       |  Software Upgrade     +-----------------+ 
                       |  System               [>| 
                       +-------------------------+

Selecting TCP/IP from the Configure menu allows you to perform TCP/IP services procedures. When the TCP/IP option is selected, the following screen is displayed.

INTOUCH INSA Configure TCP/IP 10-Jan-1997 +-------------Configure-------------+ | Configure TCP/IP addressing | | Enable/Disable TCP/IP services | | Start up TCP/IP services | | Shut down TCP/IP services | |-----------------------------------| | Exit | +-----------------------------------+

You are asked to select one of the TCP/IP services options. You can:

Select Configure TCP/IP addressing to configure TCP/IP addresses.

Select Enable/Disable TCP/IP services to enable and disable TCP/IP services.

Select Start up TCP/IP services to start up the TCP/IP services.

Select Shut down TCP/IP services to shut down the TCP/IP services.

Select Exit to exit this submenu and return to the Configure menu.

12.1.2.1 Configure TCP/IP Addressing

The Configure TCP/IP addressing option allows you to perform a TCP/IP configuration --- i.e. set up TCP/IP addresses.

+-------------Configure-------------+ | Configure TCP/IP addressing | | Enable/Disable TCP/IP services | | Start up TCP/IP services | | Shut down TCP/IP services | |-----------------------------------| | Exit | +-----------------------------------+

When the Configure TCP/IP addressing option is selected, the TCP/IP status is checked to make sure the services have been started. The following screen is displayed, and you are prompted for configuration information.

INTOUCH INSA Configure TCP/IP 10-Jan-1997 Interfaces Unqualified host name: Internet address : Internet network mask: Broadcast mask : Routing Default gateway host : Domain Internet domain : Domain Name Server DNS address : Client Services FTP : SMTP : TELNET : Unqualified host name? ___________________

Unqualified host name

You are asked for the unqualified host name.

Unqualified host name? NSA101_____________

Enter the host name. This is the name you use to refer to this machine (CPU). A default node name is provided. Press [Return] to accept the default.

Note

You can enter EXIT at this prompt or at any of the following prompts to abort this procedure.

As you answer the prompts, the input responses are displayed on the screen.

Internet Address

You are asked for the internet address.

Internet address for NSA101 (nnn.nnn.nnn.nnn)? ____________________

Enter the internet address for this CPU. The address consists of four segments separated by dots. Each segment must consist of a number between 0 and 255. The first three segments consist of the number assigned to you by your internet provider. The fourth segment is the number your site assigned to this CPU.

Internet address for NSA101 (nnn.nnn.nnn.nnn)? 213.126.219.38______

Contents

Index

	Select HTTP proxy port number to set up a HTTP proxy port number.
	Select FTP proxy port number to set up a FTP proxy port number.
	Select SMTP port number to set up a SMTP port number.
	Select DUMP port number to set up a DUMP port number.
	Select Exit to return to the Configure menu.

	Select Configure TCP/IP addressing to configure TCP/IP addresses.
	Select Enable/Disable TCP/IP services to enable and disable TCP/IP services.
	Select Start up TCP/IP services to start up the TCP/IP services.
	Select Shut down TCP/IP services to shut down the TCP/IP services.
	Select Exit to exit this submenu and return to the Configure menu.

INTOUCH® INSA Network Security Agent

File Selection

10.20 Archive Audit Reports

File Selection

Chapter 11General Menu Procedures

11.1 E-mail Option

Chapter 12Advanced Menu Procedures

12.1 Configure Options

TCP/IP Services

TCP/IP Ports

Configure Menu Options

12.1.1 TCP/IP Ports Option

HTTP Proxy Port Number

FTP Proxy Port Number

SMTP Port Number

DUMP Port Number

12.1.2 TCP/IP Option

12.1.2.1 Configure TCP/IP Addressing

Unqualified host name

Internet Address

INTOUCH^® INSA
Network Security Agent

Chapter 11
General Menu Procedures

Chapter 12
Advanced Menu Procedures