INTOUCH® INSA
Network Security Agent


Previous Contents Index

12.4 System Options

When the System option is selected, a menu of system procedures is displayed.



                     +--------Advanced---------+ 
                     |  Configure            [>| 
                     |  Control INTOUCH INSA [>| 
                     |  Software Upgrade     +---------System----------+ 
                     |  System               |  Change Date and Time   | 
                     +-----------------------|  System Shutdown        | 
                                             +-------------------------+ 

The System menu options are:

12.4.1 Change Date and Time Option



                     +--------Advanced---------+ 
                     |  Configure            [>| 
                     |  Control INTOUCH INSA [>| 
                     |  Software Upgrade     +---------System----------+ 
                     |  System               |  Change Date and Time   | 
                     +-----------------------|  System Shutdown        | 
                                             +-------------------------+ 

When you select Change Date and Time from the System menu, you are able to change the system date and time. When you select this option, the following screen is displayed:



 INTOUCH INSA             Change System Date and Time               02-Feb-1997 
 
+--------------------------------------++--------------------------------------+ 
|     Current System Date and Time     ||       New System Date and Time       | 
|                                      ||                                      | 
|Date: 02-Feb-1997                     ||Date:                                 | 
|Time: 15:01:59                        ||Time:                                 | 
+--------------------------------------++--------------------------------------+ 
 
 
 
 
 
 
 
 
                        Press the RETURN key to continue 
EXIT = Exit                       INTOUCH INSA             \ = Back  HELP = Help

The current system date and time are shown and you are asked to enter a new system date.

System Date

You are asked for a new system date. You can enter a new date in MMDDYYYY format or press [Return] to accept the default of today.



New system date (MMDDYYYY)? 02021997 

The new system date is displayed at the top of the screen in the "New System Date and Time" box in DD-Mon-YYYY format.

System Time

You are asked for a new system time. You can press [Return] to accept the default system time or enter a new time in HH:MM:SS format (24-hour format and seconds). For example, enter 03:15:00 for 3:15 AM or enter 15:15:00 for 3:15 PM or enter 15:15:15 for 3:15 PM and 15 seconds.

Note: The time in the "Current System Date and Time" box is updated each time you respond to a prompt.



New system time (HH:MM:SS)? 15:54:17 

The new system time is displayed at the top of the screen in the "New System Date and Time" box.

Proceed

You are asked if you want to proceed with changing the system date and time.



        +-Proceed-+ 
        |  Yes    | 
        |  No     | 
        |---------| 
        |  Exit   | 
        +---------+ 

If you select Yes, the system date and time are changed.

If you select No, you are returned to the time prompt.

Select Exit to abandon the date and time change.

An appropriate message tells that the time was changed or not changed depending on your response.

12.4.2 System Shutdown



                     +--------Advanced---------+ 
                     |  Configure            [>| 
                     |  Control INTOUCH INSA [>| 
                     |  Software Upgrade     +---------System----------+ 
                     |  System               |  Change Date and Time   | 
                     +-----------------------|  System Shutdown        | 
                                             +-------------------------+ 

When you select System Shutdown from the System menu, the following screen is displayed:



 INTOUCH INSA                   System Shutdown                     02-Feb-1997 
 
               WARNING: This procedure will SHUT DOWN the system
 
   +Sure shut down the system+ 
   |  Yes                    | 
   |  No                     | 
   +-------------------------+ 
 
 
 
 
 
 
 
EXIT = Exit                       INTOUCH INSA             \ = Back  HELP = Help

If you select Yes, the system is shut down in an orderly manner.

If No, the system is not shut down and you are returned to the System menu options.


Chapter 13
E-mail Surveillance

INTOUCH INSA can perform surveillance on all incoming and outgoing E-mail.

To enable the E-mail surveillance feature, the SMTP port must be enabled by giving it a number. The "SMTP Port Number" information in Section 12.1.1, TCP/IP Ports Option, explains how to assign a number.

Once the SMTP port is enabled, one or more alerts can be set up which use the specific E-mail rule patterns. The "E-mail Patterns" information in Section 8.3.2, Alert Rules and Patterns, describes the patterns and how to use them.

The E-mail message is treated as a "session" but does NOT appear on the sessions menu list. If you have an ALERT pattern that is contained in the E-mail message, you will see the "screen snapshot" of the E-mail message that contains the pattern. If you select the RECORD action for the alert, the rest of the E-mail message will be stored as the "recording".

Note

The WATCH action is not available for E-Mail alerts because there is no keystroke action to watch.

The following rule pattern examples would cause all incoming and outgoing E-mail to be logged:


alert mgmt "NSA_EMAIL_TO: ?*" 
alert mgmt "NSA_EMAIL_FROM: ?*" 

E-mail Reports

The following sections describe the E-mail reports that can be created:

TCP/IP Services

If you want to send E-mail from the INTOUCH INSA box to some outside CPU, you must start up and configure TCP/IP services. Section 12.1.2, TCP/IP Option, provides information on these procedures.


Chapter 14
Transport Agents

When INTOUCH INSA is connected to the network, it reads the network packets. If the network consists of several segments, it is possible that INTOUCH INSA might not have access to all of the segments and cannot scan all of the packets. If, for example, the network consists of two segments and a router as shown below, INTOUCH INSA would only have access to the packets on segment A.


          -----------       R        ------------ 
         /           \      O       /            \
        |  Segment A  |-----U------|  Segment B   | 
         \           /      T       \            / 
          -----------       E        ------------ 
               |            R 
               V 
          +---------+ 
          | INTOUCH | 
          |  INSA   | 
          +---------+ 

If you want to read the packets on segment B, you can do so by using a Transport Agent. For example:


          -----------       R        ------------ 
         /           \      O       /            \
        |  Segment A  |-----U------|  Segment B   | 
         \           /      T       \            / 
          -----------       E        ------------ 
               |            R             | 
               V                          V 
          +---------+                +-----------+ 
          | INTOUCH |<---------------| Transport | 
          |  INSA   |                |   Agent   | 
          +---------+                +-----------+ 

A Transport Agent is connected to a different segment of the network than the INTOUCH INSA box. The Transport Agent system is on a Pentium PC which uses the Windows NTtm operating system.

The Transport Agent reads the packets on its segment, selects the packets it needs, and sends the selected packets to the INTOUCH INSA box. When INTOUCH INSA notices the Transport Agent on segment B, it processes the packets from the Transport Agent the same as it processes the packets from segment A. When you list the active sessions, the list will show the active sessions on both segment A and on segment B. When alert incidents occur on segment B, they are processed exactly the same as those found on segment A.

You can have multiple Transport Agents. INTOUCH INSA processes all packets from all the Transport Agents as well as the packets received by the INTOUCH INSA box from its own segment.

Note

To use one or more Transport Agents, the INTOUCH INSA box must start up a TCP/IP stack (see Section 12.1, Configure Options).

Note

tm Windows NT is a trademark of Microsoft Corporation.

14.1 Logging Onto the Transport Agent

Note

Before you can log onto the Transport Agent the first time, you will need to contact Technical Support at Touch Technologies, Inc. to get the password. Technical support can be reached seven days a week, 24 hours a day at 800-525-2527 or 619-566-3603.

Once the Transport Agent is connected to the network and powered up, you can log on to the PC. To bring up the logon prompts, press the following keys --- all at the same time:

Ctrl + Alt + Delete

The logon prompts are displayed and you are asked for the user name and password.



        +---------------------------------------+ 
        |  Username:                            | 
        +---------------------------------------+ 
 
        +---------------------------------------+ 
        |  Password:                            | 
        +---------------------------------------+ 

Enter the user name. The user name is administrator. Enter the password given to you by Touch Technologies, Inc.'s Technical Support staff.

Note: Before entering the user name and password, be sure to find out if they are to be entered in upper or lowercase.



        +---------------------------------------+ 
        |  Username: administrator              | 
        +---------------------------------------+ 
 
        +---------------------------------------+ 
        |  Password:                            | 
        +---------------------------------------+ 

Getting Started

After the user name and password are entered, the desktop main window is opened.



        +-----------------------------------------------------------+ 
        |                                                           | 
        |                                                           | 
        |                                                           | 
        |                                                           | 
        |                                                           | 
        |                                                           | 
        |                                                           | 
        +-----+-----------------------------------------------------| 
        |Start| <- Click here to begin.                             | 
        +-----+-----------------------------------------------------+ 

To get started, click on the Start button in the bottom, left corner. This causes the Start menu to be displayed.



        +-----------------------------------------------------------+ 
        |                                                           | 
        |                                                           | 
        |                                                           | 
        |                                                           | 
        +-----------+                                               | 
        | --------  |                                               | 
        | --------  |                                               | 
        | Settings >|                                               | 
        | --------  |                                               | 
        | --------  |                                               | 
        | --------  |                                               | 
        +-----+-----+-----------------------------------------------| 
        |Start| <- Click here to begin.                             | 
        +-----+-----------------------------------------------------+ 

Moving the mouse to the Settings menu option, causes a submenu to be displayed.



        +-----------------------------------------------------------+ 
        |                                                           | 
        |                                                           | 
        |                                                           | 
        |                                                           | 
        +-----------+                                               | 
        | --------  +---------------+                               | 
        | --------  | Control Panel |                               | 
        | Settings >|  -----------  |                               | 
        | --------  |  -----------  |                               | 
        | --------  +---------------+                               | 
        | --------  |                                               | 
        +-----+-----+-----------------------------------------------| 
        |Start|                                                     | 
        +-----+-----------------------------------------------------+ 

Selecting the Control Panel option displays the Control Panel menu which contains various icons.



   Control Panel                                                              
 
     +------+       +------+       +------+       +------+       +------+ 
     |      |       |      |       |      |       |      |       |      | 
     +------+       +------+       +------+       +------+       +------+ 
 
     +------+       +------+       +------+         INSA         +------+ 
     |      |       |      |       |      |        INTOUCH       |      | 
     +------+       +------+       +------+         INSA         +------+ 
 
     +------+       +------+       +------+       +------+       +------+ 
     |      |       |      |       |      |       |      |       |      | 
     +------+       +------+       +------+       +------+       +------+ 
 
     +------+       +------+       +------+       +------+       +------+ 
     |      |       |      |       |      |       |      |       |      | 
     +------+       +------+       +------+       +------+       +------+ 

Various menu options---icons---are selected to perform the procedures explained in this chapter.

14.2 Configuring the Transport Agent

You need to configure the Transport Agent so that it can communicate with the INTOUCH INSA box. Normally, this procedure is only done once unless changes are make.

To start the procedure to configure the Transport Agent, select the INSA - INTOUCH INSA icon from the Control Panel menu.



   Control Panel                                                              
 
     +------+       +------+       +------+       +------+       +------+ 
     |      |       |      |       |      |       |      |       |      | 
     +------+       +------+       +------+       +------+       +------+ 
 
     +------+       +------+       +------+         INSA         +------+ 
     |      |       |      |       |      |        INTOUCH       |      | 
     +------+       +------+       +------+         INSA         +------+ 
 
     +------+       +------+       +------+       +------+       +------+ 
     |      |       |      |       |      |       |      |       |      | 
     +------+       +------+       +------+       +------+       +------+ 
 
     +------+       +------+       +------+       +------+       +------+ 
     |      |       |      |       |      |       |      |       |      | 
     +------+       +------+       +------+       +------+       +------+ 

The INTOUCH INSA Transport Agent window is displayed.

You will need to enter the server host IP address. The server host is the IP address of the INTOUCH INSA box. Enter the server host IP address and press the [Tab] key.



  INTOUCH INSA Transport Agent - Version n.nn                                  
 
                                                       +------------+ 
             +-------------------+                     |     OK     | 
Server Host: |  215.102.19.155   |                     +------------+ 
             +-------------------+ 
                                                       +------------+ 
             +-------------------+                     |   Cancel   | 
Agent Name:  |                   |                     +------------+ 
             +-------------------+ 
 
Agent Description: 
+--------------------------------------------------------------+ 
|                                                              | 
|                                                              | 
+--------------------------------------------------------------+ 

You will enter the Transport Agent name. For example: "INSA-TA-10001" Enter the Transport Agent name and press the [Tab] key.



  INTOUCH INSA Transport Agent - Version n.nn                                  
 
                                                       +------------+ 
             +-------------------+                     |     OK     | 
Server Host: |  215.102.19.155   |                     +------------+ 
             +-------------------+ 
                                                       +------------+ 
             +-------------------+                     |   Cancel   | 
Agent Name:  |  INSA-TA-10001    |                     +------------+ 
             +-------------------+ 
 
Agent Description: 
+--------------------------------------------------------------+ 
|                                                              | 
|                                                              | 
+--------------------------------------------------------------+ 

Enter the Transport Agent description and press the [Tab] key.



  INTOUCH INSA Transport Agent - Version n.nn                                  
 
                                                       +------------+ 
             +-------------------+                     |     OK     | 
Server Host: |  215.102.19.155   |                     +------------+ 
             +-------------------+ 
                                                       +------------+ 
             +-------------------+                     |   Cancel   | 
Agent Name:  |  INSA-TA-10001    |                     +------------+ 
             +-------------------+ 
 
Agent Description: 
+--------------------------------------------------------------+ 
| INSA Transport Agent at TTI                                  | 
|                                                              | 
+--------------------------------------------------------------+ 

Select OK to complete the entry.



  INTOUCH INSA Transport Agent - Version n.nn                                  
 
                                                       +------------+ 
             +-------------------+                     |     OK     | 
Server Host: |  215.102.19.155   |                     +------------+ 
             +-------------------+ 
                                                       +------------+ 
             +-------------------+                     |   Cancel   | 
Agent Name:  |  INSA-TA-10001    |                     +------------+ 
             +-------------------+ 
 
Agent Description: 
+--------------------------------------------------------------+ 
| INSA Transport Agent at TTI                                  | 
|                                                              | 
+--------------------------------------------------------------+ 

The INTOUCH INSA Transport Agent window is closed and you are returned to the Control Panel window.


Previous Next Contents Index