H3C Technologies H3C Intelligent Management Center - Manual (Page 67)

58
8.Managing mail audit
Mail audit tasks allow you to audit user behaviors of sending and receiving mails, and view the mail
senders, mail receivers, and mail titles.
Viewing mail audit task details
1. Click the Service tab.
2. From the navigation tree, select Traffic Analysis and Audit > Settings.
3. The Settings page appears.
4. Access the Settings page.
5. Click the User Behavior Audit Management link or icon .
The User Behavior Audit Management page appears and displays all user behavior audit tasks
that have been added.
6. Click a user behavior task whose type is Mail.
The Custom Mail Audit Detail page appears.
Basic Info area
{
Name—Name of the mail audit task.
{
Server—Name of the UBA server that audits user behaviors for the mail audit task.
{
Reader—Operator groups that have the right to view the task.
Mail Condition area
{
Sender—Mail address of the sender.
{
Receiver—Mail address of the receiver.
{
Title—Title of the mail.
Audit Condition area
{
Custom Query—Query type for the audit conditions: Meet All or Meet Any.
{
Access User—Account used by the access user that is managed by UAM.
{
Terminal Type—Type of the endpoint used by the access user.
{
Operating System—Operating system of the endpoint used by the access user.
{
Source—Source IP address of the mail sending.
{
Destination—Destination IP address of mail sending.
{
Destination Port—Destination port number of the mail sending.
{
Device—IP address of the device or probe that generates flow records.
The Access User, Terminal Type, and Operating system fields are displayed only when UBA
works with UAM.
7. Click Back to return to the User Behavior Audit Management page.