H3C Technologies H3C Intelligent Management Center - Manual (Page 34)

18
SCC collaboration
Security Control Center (SCC) is the network attack analyzer of the IMC platform, which generates attack
alarms and takes action in response to the attack.
EAD can work with SCC to isolate users when a network attack occurs. Enable the Isolates users by using
EAD option for SCC to block the attack source. When a network attack occurs, SCC locates the endpoint
IP address and notifies EAD of the IP address. EAD searches the online user by the IP address and isolates
the user based on the assigned security policy.
Desktop asset management
The DAM module manages Windows PCs as desktop assets.
Desktop asset management procedure
To manage desktop assets:
1. Install the iNode client on the PCs.
2. Create asset groups to manage desktop assets in different groups.
3. Identify owners of desktop assets, set the numbering mode of desktop assets, and register the
assets to EAD.
4. Configure the desktop control schemes, and assign them to asset groups or assets to monitor the
use and changes of assets.
5. Regularly audit asset logs and statistics reports, and check use and changes of assets.
The owner of an asset is responsible for maintaining the security of the asset. The user of an asset might
not be the owner of the asset. HP recommends that asset usage regulations are made for desktop assets
managed in DAM to clearly define the rights and responsibilities of users and owners.
Desktop asset grouping type
EAD supports the following ways of creating asset groups:
• Manually create asset groups—Operators must manually create asset groups and subgroups in
DAM. Assets are manually assigned to asset groups.
• Use user groups—DAM automatically creates asset groups and subgroups based on existing user
groups on the IMC Platform. Every asset is automatically added to the group to which its owner
belongs. DAM automatically changes assets among asset groups when the user groups of asset
owners are changed.
Desktop asset numbering mode
EAD supports the following modes of numbering desktop assets:
• Manual numbering—Operators must manually number desktop assets and specify the asset
information, such as owners, asset types, and physical locations in DAM. The user of an asset must
enter the asset number specified by the operator to complete registration.