H3C Technologies H3C Intelligent Management Center - Manual (Page 129)

113
Viewing Internet access audit policy details
1. Click the User tab.
2. From the navigation tree, select User Security Policy > Endpoint Access Control > Internet Access
Audit.
The Internet access audit policy list displays all Internet access audit policies.
3. Click the name of an Internet access audit policy to view detailed information.
The page showing detailed information about the Internet access audit policy appears.
Internet access audit policy details
Basic Information
{
Name—Name of the Internet access audit policy.
{
Default Action—Action to take for packets that do not match any ACL rule, Audit or Not Audit.
{
Description—Description of the Internet access audit policy.
{
Service Group—Service group to which the Internet access audit policy belongs.
Audit ACL Rule List
{
Enable Audit—Specify whether the iNode client generates Internet access audit logs to EAD
when the ACL rule is matched.
{
Protocol—Transport layer protocol identified by its name or number.
{
Destination IP/Mask—Destination network IP address and mask length. The value of 0.0.0.0
matches all IP addresses.
{
Destination Port—Specify the destination port number.
4. Click Back to return to the Internet access audit policy list.
Adding an Internet access audit policy
1. Click the User tab.
2. From the navigation tree, select User Security Policy > Endpoint Access Control > Internet Access
Audit.
The Internet access audit policy list displays all Internet access audit policies.
3. Click Add.
The Add Internet Access Audit page appears.
4. Configure the following basic information:
{
Name—Enter the name of the Internet access audit policy.
{
Default Action—Configure whether Internet access audit logs are generated by the iNode
client for packets that do not match any ACL rule. Options are Audit and Not Audit.
{
Description—Enter a description of the Internet access audit policy.
{
Service Group—Select the service group to which the Internet access audit policy belongs.
5. Add an audit ACL rule to the Internet access audit policy:
a. In the Audit ACL Rule List area, click Add.
The Add Audit ACL Rule page appears.
b. Configure the following parameters for the audit ACL rule: