H3C Technologies H3C Intelligent Management Center - Manual (Page 63)

54
7.Managing FTP audit
FTP audit tasks allow you to audit user behaviors of FTP file transferring, and view the FTP account a
user uses and the files a user uploads or downloads.
Viewing FTP audit task details
1. Click the Service tab.
2. From the navigation tree, select Traffic Analysis and Audit > Settings.
3. The Settings page appears.
4. Access the Settings page.
5. Click the User Behavior Audit Management link or icon .
6. The User Behavior Audit Management page appears and displays all user behavior audit tasks
that have been added.
7. Click a user behavior task whose type is FTP.
The Custom FTP Audit Detail page appears.
Basic Info area
{
Name—Name of the FTP audit task.
{
Server—Name of the UBA server who audits user behaviors for the FTP audit task.
{
Reader—Operator groups that have the right to view the task.
FTP Condition area
{
FTP User—User name of the FTP transferring.
{
File—File of the FTP transferring.
{
Transfer Mode—Mode of the FTP transferring: Unlimited, Upload, or Download.
Audit Condition area
{
Custom Query—Query type for the audit conditions: Meet All or Meet Any.
{
Access User—Account used by the access user that is managed by UAM.
{
Terminal Type—Type of the endpoint used by the access user.
{
Operating System—Operating system of the endpoint used by the access user.
{
Source—Source IP address of the FTP transferring.
{
Destination—Destination IP address of the FTP transferring.
{
Destination Port—Destination port of the FTP transferring.
{
Device—IP address of the device or probe that generates flow records.
The Access User, Terminal Type, and Operating system fields are displayed only when UBA
works with UAM.
8. Click Back to return to the User Behavior Audit Management page.