Viewing the audit results for an ftp audit task, Querying audit results for an ftp audit task – H3C Technologies H3C Intelligent Management Center User Manual
Page 65
56
An example of a valid IPv6 address entry:
a001:410:0:1::1- a001:410:0:1::100
d.
Select the Destination Port option and enter the destination port number in the format of 21 or
21-100.
e.
Select the Device option and enter a single IPv4 or IPv6 device IP address in the Device field.
7.
Click OK.
NOTE:
You must configure the Name and Server fields. You can configure other fields as needed.
Viewing the audit results for an FTP audit task
Querying audit results for an FTP audit task
1.
Access the User Behavior Audit Management page.
2.
Click the Audit icon for the FTP audit task for which you want to view audit results.
The audit result page for the FTP audit task appears.
For more information about querying audit results for an FTP audit task, see "
Viewing the audit result list for an FTP audit task
The audit result list for an FTP audit task displays the audit results for the audit task in the specified time
range.
If the number of audit result entries exceeds the value of the Max. Displayed Entries for Audit field in the
system parameters configuration, for example, 1000, the list displays only 1000 audit result entries. If
you want to view more audit result entries, click Continue. The list displays the next 1000 audit result
entries each time you click Continue.
The audit result list for an FTP audit task displays the following contents:
•
Start Time—Start time of the FTP transferring.
•
End Time—End time of the FTP transferring.
•
Source—Source IP address of the FTP transferring.
•
Destination—Destination IP address of the FTP transferring.
•
Port—Port number of the FTP transferring.
•
FTP User—User name of the FTP transferring.
•
File—File of the FTP transferring.
•
Transfer Mode—Mode of the FTP transferring: Unlimited, Upload, or Download.
•
Device—IP address of the device or probe that generates flow records.
•
Terminal Type—Type of the endpoint used by the access user.
•
Operating System—Operating system of the endpoint used by the access user.
The Terminal Type and the Operating System columns are displayed only when UBA works with UAM.