H3C Technologies H3C Intelligent Management Center - Manual (Page 40)

31
100000. The default value is 1000. After completing the configuration, click OK next to the
Max. Displayed Entries for Audit field.
{
DNS Setting—Enable or disable the DNS resolution function for UBA. If you enable the
function, you can specify DNS server IP addresses. When a user queries the host information
for an IP address, UBA uses the specified DNS servers to query the domain name for the IP
address. To enable the function, select Enable from the DNS Settings list. To add a DNS server
IP address, enter a DNS server IP address in the DNS Server IP field and then click Add.
Repeat this operation to add more DNS server IP addresses. To delete an existing DNS server
IP address, select the IP address and then click Delete. After completing the configuration, click
OK next to the DNS Setting field.
NOTE:
You can specify only IPv4 addresses for DNS servers, and you can specify up to five DNS server
IP addresses.
Managing filter strategies
The filter strategies management function allows you to define whether network flow records that UBA
receives are processed or discarded by UBA. You can save system resources and improve UBA
processing efficiency by using filter strategies.
Create filter strategies before you configuring the UBA server. For a filter strategy to take effect, select
the filter strategy in the server configuration. A filter strategy can be used by multiple UBA servers, which
avoids unnecessary repetitive configurations.
Each filter strategy has a default filter policy and filter policies defined for every filter condition. Filter
conditions are matched based on their orders from up to down in the filter condition list. If a filter
condition is matched, the data is processed by the filter policy of the matched filter condition, and the
matching process ends. If no filter condition is matched, the data is processed by the default policy
(Receive or Discard).
Viewing the filter strategy list
1. Access the Settings page.
2. Click the Filter Strategy link or icon .
The Filter Strategy Management page appears.
Filter Strategy List contents
{
Name—Name of the filter strategy. You can click the filter strategy name to view filter strategy
details.
{
Description—Description for the filter strategy.
{
Modify—Allows you to click the Modify icon to modify the filter strategy.
{
Delete—Allows you to click the Delete icon to delete the filter strategy.
Viewing filter strategy details
1. Access the Filter Strategy Management page.