H3C Technologies H3C Intelligent Management Center - Manual (Page 57)

48
• NAT IP—Source IP address after translation.
• NAT Port—Source port number after translation.
• Terminal Type—Type of the endpoint used by the access user.
• Operating System—Operating system of the endpoint used by the access user.
The Terminal Type and the Operating System columns are displayed only when UBA works with UAM.
Viewing audit results for a NAT audit task by group
You can select one of the following group types from the Group list: Not Group, Source, Destination,
Source Port, Destination Port, Protocol, Application, Source-Destination, SPort-DPort, Source-SPort,
Desination-DPort, Source-DPort, Destination-SPort, Terminal Type, and Operating System. The Terminal
Type and the Operating System options are displayed only when UBA works with UAM.
In the audit result list, select a group type from the Group list. The audit result list displays the count of
audit results in the Count column based on the group type.
By default, the audit result list displays the grouped results in descending order of the value of the Count
column. This helps you to view the IP addresses, ports, or others whose NAT translation are more active.
Modifying a NAT audit task
1. Access the User Behavior Audit Management page.
2. In the user behavior audit task list, click the Modify icon for the NAT audit task you want to
modify.
The Modify Custom NAT audit page appears.
3. Modify parameters for the NAT audit task as needed.
You cannot modify the Name field. For more information about modifying other NAT audit task
parameters, see "
Adding a NAT audit task ."
4. Click OK to return to the User Behavior Audit Management page.
Deleting NAT audit tasks
Deleting a NAT audit task from UBA does not delete the flow records associated with the task prior to
the deletion.
To delete one or more NAT audit tasks:
1. Access the User Behavior Audit Management page.
2. In the user behavior audit task list, perform one of the following tasks:
{
To delete a NAT audit task, click the Delete icon for the NAT audit task and click OK on the
confirmation dialog box that appears.
{
To delete NAT audit tasks in bathes, select one or more NAT audit tasks, click Delete, and click
OK on the confirmation dialog box that appears.