9 auditing desktop assets, Asset hardware change record audit – H3C Technologies H3C Intelligent Management Center User Manual
Page 213
197
9 Auditing desktop assets
DAM supports the following asset audit functions:
•
Post audits—Post-audit data shows asset usage based on the asset history records stored in DAM,
including:
{
Asset hardware changes
{
Asset software changes
{
Use of USB storage devices
{
Use of printers
{
Use of unauthorized peripherals
•
Real-time audits—Real-time audit data shows asset information in real time. DAM provides the
terminal file audit function to show in real time whether a terminal asset contains specified files.
Asset hardware change record audit
DAM works with the iNode client to support the asset hardware change record audit function. The iNode
client automatically collects changes to asset hardware shown in
and reports them to the DAM
server. Operators can view the change time and change content by auditing these changes.
Operators can configure the hardware items to monitor in a monitoring alarm policy, assign the policy
to a desktop control scheme, and assign the desktop control scheme to the target asset or asset group.
The DAM server collects hardware changes from the monitored asset or each asset in the monitored asset
group, and then sends them in syslogs to the specified syslog server. DAM and the syslog server both are
aware of the asset hardware changes.
By default, asset hardware change records can be kept for 1,825 days (about five years). Operators can
modify the record lifetime through the Asset Change Record Lifetime parameter. For more information
about modifying the record lifetime, see "
Table 27 Asset hardware changes
Item Changes
CPU
•
CPU number
•
CPU name
Mainboard
•
Vendor
•
Product model
BIOS
•
Caption
•
Vendor
•
Release date
•
Version
Memory Total
memory
Hard Disk
•
Interface type
•
Device instance path
NIC
Device instance path