HP-UX Host Intrusion Detection System Version 4.3 administrator guide

Chapter 2 Configuring HP-UX HIDS: Describes how to configure HP-UX HIDS System
Manager and Agent software.
Chapter 3 Getting Started with HP-UX HIDS: Provides information about the procedures
you must follow to get the System Manager and agents up and running on the
administrative and monitored systems.
Chapter 4 System Manager Screen: Describes the tasks you can perform using the HP-UX
HIDS System Manager screen.
Chapter 5 Schedule Manager Screen: Describes how to configure surveillance schedules,
surveillance groups, and detection templates using the HP-UX HIDS Schedule
Manager screen.
Chapter 6 Host Manager Screen: Describes how to define hosts to be monitored using
the HP-UX HIDS Host Manager screen.
Chapter 7 Network Node Screen: Describes the tasks you can perform using the HP-UX
HIDS Network Node screen.
Chapter 8 Preferences Screen: Describes the operational and display settings that you can
set on the Preferences screen
Appendix A Templates and Alerts: Describes the detection templates that constitute
surveillance groups. This appendix also describes the alerts that are passed to
the System Manager and to the response programs by the HIDS agent.
Appendix B Automated Response for Alerts: Describes how to use response programs to
process alerts automatically according to your installation policy. It includes a
sample C program, several sample response scripts, and information about a
prepackaged response program that communicates with HP OpenView
VantagePoint Operations.
Appendix C Tuning Schedules and Generating Alert Reports: Provides information and
instructions for using the idsadmin command to tune schedules and generate
alert reports.
Appendix D The Agent Configuration File: Describes the user-configurable options that
can be modified in the HP-UX HIDS agent configuration file, which is located
in /etc/opt/ids/ids.cf.
Appendix E The Surveillance Schedule Text File: Describes the surveillance schedule in
text format for those administrators who want to edit surveillance schedules
using their preferred editor, instead of using the GUI Schedule Manager.
Appendix F Error Messages: Describes errors and messages that may be generated by the
Agent and System Manager programs.
Appendix G Troubleshooting: Describes how to troubleshoot problems on the agent and
administrative systems.
Appendix H HP Software License: Lists the terms and conditions for using HIDS and
OpenSSL.
Typographic Conventions
This document uses the following typographical conventions:
audit(5) An HP-UX manpage. In this example, audit is the name and 5 is the section in
the HP-UX Reference. On the web and on the Instant Information CD, it may
be a link to the manpage itself. From the HP-UX command line, you can enter
“man audit” or “man 5 audit” to view the manpage. See man( 1).
Book Title The title of a book. On the web and on the Instant Information CD, it may be
a link to the book itself.
16